syzkaller syzkaller login: [ 15.685023][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 15.685039][ T30] audit: type=1400 audit(1783445085.000:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.695118][ T30] audit: type=1400 audit(1783445085.000:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.701755][ T30] audit: type=1400 audit(1783445085.000:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13949]" dev="pipefs" ino=13949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.717355][ T30] audit: type=1400 audit(1783445085.010:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.744931][ T30] audit: type=1400 audit(1783445085.010:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.847073][ T231] scp (231) used greatest stack depth: 21120 bytes left Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. 2026/07/07 17:24:55 parsed 1 programs 2026/07/07 17:24:55 serving rpc on tcp://40419 [ 25.960062][ T30] audit: type=1400 audit(1783445095.270:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.981294][ T30] audit: type=1400 audit(1783445095.270:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.972538][ T30] audit: type=1400 audit(1783445096.280:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.976166][ T300] cgroup: Unknown subsys name 'net' [ 26.995303][ T30] audit: type=1400 audit(1783445096.280:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.022609][ T30] audit: type=1400 audit(1783445096.310:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.022953][ T300] cgroup: Unknown subsys name 'devices' [ 27.166656][ T300] cgroup: Unknown subsys name 'hugetlb' [ 27.172374][ T300] cgroup: Unknown subsys name 'rlimit' [ 27.379873][ T30] audit: type=1400 audit(1783445096.690:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.403114][ T30] audit: type=1400 audit(1783445096.690:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.423731][ T30] audit: type=1400 audit(1783445096.690:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.444155][ T30] audit: type=1400 audit(1783445096.690:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.463287][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.464447][ T30] audit: type=1400 audit(1783445096.690:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.519768][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.052547][ T311] request_module fs-gadgetfs succeeded, but still no fs? [ 28.151403][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.158713][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.166655][ T310] device bridge_slave_0 entered promiscuous mode [ 28.209837][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.234583][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.242473][ T310] device bridge_slave_1 entered promiscuous mode [ 28.512085][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.519199][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.526562][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.533692][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.657372][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.667925][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.684993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.694948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.726929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.735227][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.742272][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.750441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.759059][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.766121][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.790142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.798232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.813438][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.840878][ T310] device veth0_vlan entered promiscuous mode [ 28.847675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.856231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.863705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.892725][ T310] device veth1_macvtap entered promiscuous mode [ 28.905513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.921364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.941691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/07 17:24:58 executed programs: 0 [ 29.189253][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.196437][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.203914][ T372] device bridge_slave_0 entered promiscuous mode [ 29.211748][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.218870][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.226442][ T372] device bridge_slave_1 entered promiscuous mode [ 29.321307][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.328497][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.335994][ T378] device bridge_slave_0 entered promiscuous mode [ 29.354381][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.361630][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.369238][ T378] device bridge_slave_1 entered promiscuous mode [ 29.398644][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.405792][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.413183][ T375] device bridge_slave_0 entered promiscuous mode [ 29.420164][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.427243][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.434772][ T375] device bridge_slave_1 entered promiscuous mode [ 29.453698][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.460785][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.468356][ T373] device bridge_slave_0 entered promiscuous mode [ 29.496968][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.504025][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.511463][ T373] device bridge_slave_1 entered promiscuous mode [ 29.542244][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.549410][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.556712][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.563742][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.613588][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.620712][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.628174][ T377] device bridge_slave_0 entered promiscuous mode [ 29.637792][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.645104][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.652572][ T377] device bridge_slave_1 entered promiscuous mode [ 29.659209][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.666963][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.674109][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.709775][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.717976][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.725036][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.733568][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.742032][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.749094][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.848981][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.872209][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.934610][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.952576][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.968850][ T372] device veth0_vlan entered promiscuous mode [ 29.981607][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.990391][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.997969][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.005870][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.013986][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.021132][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.028558][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.036768][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.043789][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.062572][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.070468][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.089267][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.098255][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.105338][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.112969][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.121776][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.128852][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.136452][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.143972][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.152148][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.160394][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.177858][ T372] device veth1_macvtap entered promiscuous mode [ 30.187966][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.196491][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.206415][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.213475][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.221485][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.230056][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.238790][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.245893][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.253319][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.261630][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.269905][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.277576][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.285736][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.293607][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.301891][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.309924][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.318204][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.326236][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.352474][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.361001][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.369048][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.377123][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.385792][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.394222][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.402704][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.410644][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.418715][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.426975][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.435294][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.443439][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.451834][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.459325][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.467326][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.475823][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.498509][ T373] device veth0_vlan entered promiscuous mode [ 30.511083][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.520286][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.528770][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.535848][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.543493][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.551897][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.560148][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.567179][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.574908][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.583382][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.591840][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.599925][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.607850][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.620478][ T378] device veth0_vlan entered promiscuous mode [ 30.637782][ T396] ================================================================== [ 30.642347][ T373] device veth1_macvtap entered promiscuous mode [ 30.645881][ T396] BUG: KASAN: use-after-free in mutex_lock+0x8e/0x1c0 [ 30.658918][ T396] Write of size 8 at addr ffff88812d5a2950 by task syz.6.19/396 [ 30.666573][ T396] [ 30.668919][ T396] CPU: 1 PID: 396 Comm: syz.6.19 Not tainted syzkaller #0 [ 30.674321][ T377] device veth0_vlan entered promiscuous mode [ 30.676049][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.676071][ T396] Call Trace: [ 30.676077][ T396] [ 30.698355][ T396] __dump_stack+0x21/0x30 [ 30.702716][ T396] dump_stack_lvl+0x110/0x170 [ 30.703554][ T377] device veth1_macvtap entered promiscuous mode [ 30.707418][ T396] ? show_regs_print_info+0x20/0x20 [ 30.707440][ T396] ? load_image+0x3f0/0x3f0 [ 30.723416][ T396] print_address_description+0x7f/0x2c0 [ 30.729002][ T396] ? mutex_lock+0x8e/0x1c0 [ 30.733451][ T396] kasan_report+0x10f/0x150 [ 30.737970][ T396] ? mutex_lock+0x8e/0x1c0 [ 30.742385][ T396] kasan_check_range+0x249/0x2a0 [ 30.747313][ T396] __kasan_check_write+0x14/0x20 [ 30.752244][ T396] mutex_lock+0x8e/0x1c0 [ 30.756481][ T396] ? wait_for_completion_killable_timeout+0x10/0x10 [ 30.763066][ T396] ? l2tp_session_put+0xaf/0x1a0 [ 30.768006][ T396] ? l2tp_session_delete+0x3a9/0x4a0 [ 30.773289][ T396] pppol2tp_release+0x178/0x2b0 [ 30.778132][ T396] sock_close+0xb8/0x200 [ 30.782365][ T396] ? sock_mmap+0xa0/0xa0 [ 30.786601][ T396] __fput+0x22b/0x900 [ 30.790576][ T396] ____fput+0x15/0x20 [ 30.794557][ T396] task_work_run+0x127/0x190 [ 30.799162][ T396] exit_to_user_mode_loop+0xd0/0xe0 [ 30.804353][ T396] exit_to_user_mode_prepare+0x87/0xd0 [ 30.809807][ T396] syscall_exit_to_user_mode+0x1a/0x30 [ 30.815263][ T396] do_syscall_64+0x58/0xa0 [ 30.819675][ T396] ? clear_bhb_loop+0x50/0xa0 [ 30.824355][ T396] ? clear_bhb_loop+0x50/0xa0 [ 30.829027][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.834914][ T396] RIP: 0033:0x7ff76c380e59 [ 30.839337][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.858976][ T396] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.867381][ T396] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 30.875352][ T396] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.883336][ T396] RBP: 0000000000007789 R08: 0000000000000001 R09: 0000000000000000 [ 30.891303][ T396] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 30.899271][ T396] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 30.907243][ T396] [ 30.910256][ T396] [ 30.912568][ T396] Allocated by task 396: [ 30.916794][ T396] __kasan_kmalloc+0xd4/0x100 [ 30.921469][ T396] __kmalloc+0x13d/0x2c0 [ 30.925707][ T396] l2tp_session_create+0x39/0xb60 [ 30.930739][ T396] pppol2tp_connect+0xbf5/0x1640 [ 30.935663][ T396] __sys_connect+0x3cb/0x450 [ 30.940247][ T396] __x64_sys_connect+0x7a/0x90 [ 30.945001][ T396] x64_sys_call+0x7c/0x9a0 [ 30.949411][ T396] do_syscall_64+0x4c/0xa0 [ 30.953822][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.959715][ T396] [ 30.962032][ T396] Freed by task 396: [ 30.965915][ T396] kasan_set_track+0x4a/0x70 [ 30.970510][ T396] kasan_set_free_info+0x23/0x40 [ 30.975453][ T396] ____kasan_slab_free+0x125/0x160 [ 30.980553][ T396] __kasan_slab_free+0x11/0x20 [ 30.985306][ T396] slab_free_freelist_hook+0xc2/0x190 [ 30.990664][ T396] kfree+0xc4/0x270 [ 30.994462][ T396] l2tp_session_put+0xaf/0x1a0 [ 30.999258][ T396] l2tp_session_delete+0x3a9/0x4a0 [ 31.004370][ T396] pppol2tp_release+0x169/0x2b0 [ 31.009214][ T396] sock_close+0xb8/0x200 [ 31.013449][ T396] __fput+0x22b/0x900 [ 31.017440][ T396] ____fput+0x15/0x20 [ 31.021415][ T396] task_work_run+0x127/0x190 [ 31.026034][ T396] exit_to_user_mode_loop+0xd0/0xe0 [ 31.031228][ T396] exit_to_user_mode_prepare+0x87/0xd0 [ 31.036674][ T396] syscall_exit_to_user_mode+0x1a/0x30 [ 31.042121][ T396] do_syscall_64+0x58/0xa0 [ 31.046528][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.052415][ T396] [ 31.054740][ T396] The buggy address belongs to the object at ffff88812d5a2800 [ 31.054740][ T396] which belongs to the cache kmalloc-512 of size 512 [ 31.068802][ T396] The buggy address is located 336 bytes inside of [ 31.068802][ T396] 512-byte region [ffff88812d5a2800, ffff88812d5a2a00) [ 31.082078][ T396] The buggy address belongs to the page: [ 31.087702][ T396] page:ffffea0004b56800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d5a0 [ 31.097944][ T396] head:ffffea0004b56800 order:2 compound_mapcount:0 compound_pincount:0 [ 31.106258][ T396] flags: 0x4000000000010200(slab|head|zone=1) [ 31.112330][ T396] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 31.120903][ T396] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.129476][ T396] page dumped because: kasan: bad access detected [ 31.135874][ T396] page_owner tracks the page as allocated [ 31.141588][ T396] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 375, ts 30631284644, free_ts 28303376523 [ 31.161981][ T396] post_alloc_hook+0x192/0x1b0 [ 31.166745][ T396] prep_new_page+0x1c/0x110 [ 31.171241][ T396] get_page_from_freelist+0x2c3a/0x2cd0 [ 31.176961][ T396] __alloc_pages+0x1a2/0x460 [ 31.181552][ T396] new_slab+0xa0/0x4d0 [ 31.185609][ T396] ___slab_alloc+0x3ac/0x840 [ 31.190195][ T396] __slab_alloc+0x49/0x90 [ 31.194608][ T396] __kmalloc_track_caller+0x169/0x2c0 [ 31.199992][ T396] __alloc_skb+0x210/0x730 [ 31.204408][ T396] netlink_ack+0x35c/0xb10 [ 31.208820][ T396] netlink_rcv_skb+0x267/0x430 [ 31.213581][ T396] rtnetlink_rcv+0x1c/0x20 [ 31.217999][ T396] netlink_unicast+0x86c/0xa30 [ 31.222756][ T396] netlink_sendmsg+0x879/0xb80 [ 31.227521][ T396] __sys_sendto+0x46d/0x620 [ 31.232018][ T396] __x64_sys_sendto+0xe5/0x100 [ 31.236777][ T396] page last free stack trace: [ 31.241448][ T396] free_unref_page_prepare+0x5fa/0x600 [ 31.246907][ T396] free_unref_page+0xae/0x540 [ 31.251583][ T396] __free_pages+0x6c/0x100 [ 31.255992][ T396] __vunmap+0x801/0x980 [ 31.260149][ T396] vfree+0x8b/0xc0 [ 31.263862][ T396] kcov_close+0x2b/0x50 [ 31.268025][ T396] __fput+0x22b/0x900 [ 31.272164][ T396] ____fput+0x15/0x20 [ 31.276146][ T396] task_work_run+0x127/0x190 [ 31.280730][ T396] do_exit+0xb70/0x29a0 [ 31.284879][ T396] do_group_exit+0x149/0x310 [ 31.289472][ T396] get_signal+0x64f/0x1430 [ 31.293890][ T396] arch_do_signal_or_restart+0xe2/0x1100 [ 31.299519][ T396] exit_to_user_mode_loop+0xa7/0xe0 [ 31.304716][ T396] exit_to_user_mode_prepare+0x87/0xd0 [ 31.310165][ T396] syscall_exit_to_user_mode+0x1a/0x30 [ 31.315613][ T396] [ 31.317927][ T396] Memory state around the buggy address: [ 31.323541][ T396] ffff88812d5a2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.331709][ T396] ffff88812d5a2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.339759][ T396] >ffff88812d5a2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.347805][ T396] ^ [ 31.354462][ T396] ffff88812d5a2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.362548][ T396] ffff88812d5a2a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.370595][ T396] ================================================================== [ 31.378637][ T396] Disabling lock debugging due to kernel taint [ 31.394084][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 31.394098][ T30] audit: type=1400 audit(1783445100.700:107): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.427373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.437222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.445636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.456186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.461136][ T400] ------------[ cut here ]------------ [ 31.465569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.469667][ T400] WARNING: CPU: 0 PID: 400 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.477912][ T30] audit: type=1400 audit(1783445100.700:108): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.487440][ T400] Modules linked in: [ 31.509135][ T30] audit: type=1400 audit(1783445100.700:109): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.513389][ T400] [ 31.536085][ T30] audit: type=1400 audit(1783445100.700:110): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.538204][ T400] CPU: 0 PID: 400 Comm: syz.6.24 Tainted: G B syzkaller #0 [ 31.558385][ T30] audit: type=1400 audit(1783445100.700:111): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.566934][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.587427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.604842][ T30] audit: type=1400 audit(1783445100.700:112): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.605249][ T400] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.628363][ T30] audit: type=1400 audit(1783445100.700:113): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.634778][ T400] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 31.658047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.676857][ T400] RSP: 0018:ffffc90001557d10 EFLAGS: 00010293 [ 31.685437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.690552][ T400] RAX: ffffffff845dc087 RBX: ffff888115118000 RCX: ffff88810dd20000 [ 31.699751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.705806][ T400] RDX: 0000000000000000 RSI: 00000000083f10c0 RDI: 000000000c04eb7d [ 31.714422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.721483][ T400] RBP: ffffc90001557d30 R08: ffff888115118083 R09: 1ffff11022a23010 [ 31.731314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.737109][ T400] R10: dffffc0000000000 R11: ffffed1022a23011 R12: dffffc0000000000 [ 31.745730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.753526][ T400] R13: dffffc0000000000 R14: 00000000083f10c0 R15: ffff88812d3dc400 [ 31.762230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.769438][ T400] FS: 000055557969a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.778345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.786474][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.795232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.801550][ T400] CR2: 00002bc09fbd6000 CR3: 00000001141e1000 CR4: 00000000003506b0 [ 31.824001][ T375] device veth0_vlan entered promiscuous mode [ 31.830118][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.838349][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.848351][ T400] Call Trace: [ 31.853220][ T400] [ 31.856323][ T400] pppol2tp_release+0x150/0x2b0 [ 31.861263][ T400] sock_close+0xb8/0x200 [ 31.866606][ T400] ? sock_mmap+0xa0/0xa0 [ 31.870932][ T400] __fput+0x22b/0x900 [ 31.874997][ T400] ____fput+0x15/0x20 [ 31.879014][ T400] task_work_run+0x127/0x190 [ 31.883633][ T400] exit_to_user_mode_loop+0xd0/0xe0 [ 31.888898][ T400] exit_to_user_mode_prepare+0x87/0xd0 [ 31.903235][ T378] device veth1_macvtap entered promiscuous mode [ 31.909718][ T400] syscall_exit_to_user_mode+0x1a/0x30 [ 31.915855][ T400] do_syscall_64+0x58/0xa0 [ 31.919837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.920395][ T400] ? clear_bhb_loop+0x50/0xa0 [ 31.932298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.939467][ T400] ? clear_bhb_loop+0x50/0xa0 [ 31.940921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.944295][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.953249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.959072][ T400] RIP: 0033:0x7ff76c380e59 [ 31.971600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.980244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.988473][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.993982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.015334][ T400] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.027120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.032985][ T400] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 32.045157][ T400] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.045189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.053169][ T400] RBP: 0000000000007abc R08: 0000000000000001 R09: 0000000000000000 [ 32.053184][ T400] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 32.062773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.070492][ T404] ------------[ cut here ]------------ [ 32.081380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.085613][ T404] WARNING: CPU: 1 PID: 404 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.092639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.099045][ T400] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 32.109946][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.117117][ T404] Modules linked in: [ 32.126008][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.132928][ T400] [ 32.137994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.144812][ T404] [ 32.148890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.164769][ T400] ---[ end trace 32cd58c628b00f31 ]--- [ 32.165429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.173154][ T404] CPU: 1 PID: 404 Comm: syz.4.27 Tainted: G B W syzkaller #0 [ 32.191886][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.215183][ T404] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.224662][ T404] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 32.245214][ T404] RSP: 0018:ffffc90001587d10 EFLAGS: 00010293 [ 32.251348][ T404] RAX: ffffffff845dc087 RBX: ffff88811526a000 RCX: ffff8881143b0000 [ 32.251901][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.268176][ T404] RDX: 0000000000000000 RSI: 0000000022e2d2a0 RDI: 000000000c04eb7d [ 32.281413][ T408] ------------[ cut here ]------------ [ 32.282188][ T404] RBP: ffffc90001587d30 R08: ffff88811526a083 R09: 1ffff11022a4d410 [ 32.295436][ T404] R10: dffffc0000000000 R11: ffffed1022a4d411 R12: dffffc0000000000 [ 32.302209][ T408] refcount_t: underflow; use-after-free. [ 32.309641][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.318763][ T404] R13: dffffc0000000000 R14: 0000000022e2d2a0 R15: ffff888131469800 [ 32.327550][ T408] WARNING: CPU: 1 PID: 408 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 32.337042][ T404] FS: 000055555fd81500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.347646][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.354751][ T408] Modules linked in: [ 32.359723][ T408] CPU: 1 PID: 408 Comm: syz.6.31 Tainted: G B W syzkaller #0 [ 32.366026][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.369078][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.386611][ T404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.393225][ T404] CR2: 00007fb3f21c3060 CR3: 0000000122d7b000 CR4: 00000000003506a0 [ 32.402684][ T408] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 32.413414][ T412] ------------[ cut here ]------------ [ 32.418740][ T375] device veth1_macvtap entered promiscuous mode [ 32.425333][ T404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.433330][ T404] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.441812][ T408] Code: 04 01 48 c7 c7 40 40 63 85 e8 0c 10 5a 02 0f 0b eb c3 e8 b3 8e 19 ff c6 05 60 01 96 04 01 48 c7 c7 a0 40 63 85 e8 f0 0f 5a 02 <0f> 0b eb a7 e8 97 8e 19 ff c6 05 41 01 96 04 01 48 c7 c7 e0 3f 63 [ 32.442879][ T412] WARNING: CPU: 0 PID: 412 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.467344][ T408] RSP: 0018:ffffc90001577cc0 EFLAGS: 00010246 [ 32.473372][ T412] Modules linked in: [ 32.478699][ T404] Call Trace: [ 32.482255][ T412] CPU: 0 PID: 412 Comm: syz.0.34 Tainted: G B W syzkaller #0 [ 32.487937][ T404] [ 32.497234][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.497234][ T408] RAX: 01ad5093c908df00 RBX: 0000000000000003 RCX: ffff8881156e0000 [ 32.497252][ T408] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 32.506767][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.513970][ T404] pppol2tp_release+0x150/0x2b0 [ 32.521524][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.530022][ T408] RBP: ffffc90001577cd0 R08: ffff8881f7132f3f R09: 1ffff1103ee265e7 [ 32.536246][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.545035][ T404] sock_close+0xb8/0x200 [ 32.552652][ T412] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.560337][ T408] R10: dffffc0000000000 R11: ffffed103ee265e8 R12: 0000000000000000 [ 32.564030][ T412] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 32.570555][ T408] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 32.597053][ T412] RSP: 0018:ffffc90001557d10 EFLAGS: 00010293 [ 32.598830][ T404] ? sock_mmap+0xa0/0xa0 [ 32.606094][ T412] [ 32.612457][ T404] __fput+0x22b/0x900 [ 32.620016][ T412] RAX: ffffffff845dc087 RBX: ffff888115c4f000 RCX: ffff8881156e2780 [ 32.630738][ T412] RDX: 0000000000000000 RSI: 0000000022cde000 RDI: 000000000c04eb7d [ 32.635174][ T404] ____fput+0x15/0x20 [ 32.638998][ T408] FS: 000055557969a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.642763][ T404] task_work_run+0x127/0x190 [ 32.642787][ T404] exit_to_user_mode_loop+0xd0/0xe0 [ 32.652468][ T412] RBP: ffffc90001557d30 R08: ffff888115c4f083 R09: 1ffff11022b89e10 [ 32.665417][ T404] exit_to_user_mode_prepare+0x87/0xd0 [ 32.670119][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.675790][ T404] syscall_exit_to_user_mode+0x1a/0x30 [ 32.682022][ T412] R10: dffffc0000000000 R11: ffffed1022b89e11 R12: dffffc0000000000 [ 32.694704][ T404] do_syscall_64+0x58/0xa0 [ 32.699342][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.708356][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.711399][ T404] ? clear_bhb_loop+0x50/0xa0 [ 32.717233][ T412] R13: dffffc0000000000 R14: 0000000022cde000 R15: ffff8881151f2000 [ 32.730163][ T404] ? clear_bhb_loop+0x50/0xa0 [ 32.730585][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.743982][ T404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.752201][ T408] CR2: 00007fb3f21c3060 CR3: 0000000122d68000 CR4: 00000000003506b0 [ 32.757704][ T404] RIP: 0033:0x7f4967647e59 [ 32.766651][ T414] ------------[ cut here ]------------ [ 32.770540][ T412] FS: 0000555574352500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.773048][ T404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.782503][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.803965][ T414] WARNING: CPU: 1 PID: 414 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.810452][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.820517][ T414] Modules linked in: [ 32.827243][ T404] RSP: 002b:00007ffe9adc0fd8 EFLAGS: 00000246 [ 32.828411][ T412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.831264][ T404] ORIG_RAX: 00000000000001b4 [ 32.837390][ T412] CR2: 00007fb3f21c3060 CR3: 0000000122ced000 CR4: 00000000003506b0 [ 32.837412][ T412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.837424][ T412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.837437][ T412] Call Trace: [ 32.837442][ T412] [ 32.837450][ T412] pppol2tp_release+0x150/0x2b0 [ 32.837477][ T412] sock_close+0xb8/0x200 [ 32.845790][ T414] [ 32.848989][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.857837][ T404] RAX: 0000000000000000 RBX: 00007ffe9adc10c0 RCX: 00007f4967647e59 [ 32.865562][ T412] ? sock_mmap+0xa0/0xa0 [ 32.873381][ T414] CPU: 1 PID: 414 Comm: syz.5.35 Tainted: G B W syzkaller #0 [ 32.879693][ T412] __fput+0x22b/0x900 [ 32.885082][ T404] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.894355][ T408] Call Trace: [ 32.913648][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.927451][ T412] ____fput+0x15/0x20 [ 32.934002][ T404] RBP: 0000000000007d0a R08: 0000000000000001 R09: 0000000000000000 [ 32.935097][ T412] task_work_run+0x127/0x190 [ 32.945960][ T414] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.957662][ T412] exit_to_user_mode_loop+0xd0/0xe0 [ 32.957688][ T412] exit_to_user_mode_prepare+0x87/0xd0 [ 32.957708][ T412] syscall_exit_to_user_mode+0x1a/0x30 [ 32.957730][ T412] do_syscall_64+0x58/0xa0 [ 32.957751][ T412] ? clear_bhb_loop+0x50/0xa0 [ 32.964013][ T404] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 32.994311][ T408] [ 32.994321][ T408] l2tp_session_put+0xc8/0x1a0 [ 32.994346][ T408] l2tp_session_delete+0x3a9/0x4a0 [ 32.994367][ T408] pppol2tp_release+0x169/0x2b0 [ 32.994388][ T408] sock_close+0xb8/0x200 [ 32.994407][ T408] ? sock_mmap+0xa0/0xa0 [ 32.994424][ T408] __fput+0x22b/0x900 [ 32.994445][ T408] ____fput+0x15/0x20 [ 32.994462][ T408] task_work_run+0x127/0x190 [ 33.009303][ T414] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 33.010424][ T412] ? clear_bhb_loop+0x50/0xa0 [ 33.016960][ T414] RSP: 0018:ffffc900015d7d10 EFLAGS: 00010293 [ 33.042701][ T412] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.069517][ T404] R13: 00007f49678cffac R14: 00007f49678cffa8 R15: 00007f49678cffa0 [ 33.088256][ T404] [ 33.091453][ T404] ---[ end trace 32cd58c628b00f32 ]--- [ 33.091616][ T408] exit_to_user_mode_loop+0xd0/0xe0 [ 33.103767][ T414] [ 33.106602][ T414] RAX: ffffffff845dc087 RBX: ffff888116423000 RCX: ffff888115cd62c0 [ 33.124348][ T408] exit_to_user_mode_prepare+0x87/0xd0 [ 33.137700][ T412] RIP: 0033:0x7fb3f1408e59 [ 33.142164][ T412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.144232][ T414] RDX: 0000000000000000 RSI: 0000000022cde940 RDI: 000000000c04eb7d [ 33.162615][ T408] syscall_exit_to_user_mode+0x1a/0x30 [ 33.183763][ T419] ------------[ cut here ]------------ [ 33.185476][ T408] do_syscall_64+0x58/0xa0 [ 33.191662][ T420] ------------[ cut here ]------------ [ 33.193853][ T412] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 [ 33.199611][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.202950][ T419] WARNING: CPU: 1 PID: 419 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.210745][ T412] ORIG_RAX: 00000000000001b4 [ 33.221721][ T420] WARNING: CPU: 1 PID: 420 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.226540][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.235720][ T414] RBP: ffffc900015d7d30 R08: ffff888116423083 R09: 1ffff11022c84610 [ 33.240242][ T412] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 33.248169][ T420] Modules linked in: [ 33.255884][ T414] R10: dffffc0000000000 R11: ffffed1022c84611 R12: dffffc0000000000 [ 33.259700][ T408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.259944][ T414] R13: dffffc0000000000 R14: 0000000022cde940 R15: ffff8881144b2400 [ 33.268653][ T412] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.274233][ T419] Modules linked in: [ 33.286211][ T408] RIP: 0033:0x7ff76c380e59 [ 33.291776][ T420] [ 33.293956][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.298574][ T420] CPU: 1 PID: 420 Comm: syz.4.40 Tainted: G B W syzkaller #0 [ 33.320882][ T412] RBP: 0000000000007e77 R08: 0000000000000001 R09: 0000000000000000 [ 33.331980][ T414] FS: 00005555949b9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.337401][ T408] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.346016][ T419] [ 33.354416][ T408] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 33.358448][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.365433][ T412] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 33.371822][ T419] CPU: 1 PID: 419 Comm: syz.1.39 Tainted: G B W syzkaller #0 [ 33.379871][ T408] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.388460][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.396532][ T412] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 33.406586][ T414] CR2: 0000000000000000 CR3: 0000000122c0b000 CR4: 00000000003506a0 [ 33.414881][ T408] RBP: 0000000000007ded R08: 0000000000000001 R09: 0000000000000000 [ 33.422246][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.430638][ T412] [ 33.444531][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.452632][ T420] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.453894][ T408] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 33.459097][ T420] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 33.486846][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.487268][ T412] ---[ end trace 32cd58c628b00f33 ]--- [ 33.501136][ T408] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 33.502846][ T419] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.515659][ T408] [ 33.515668][ T408] ---[ end trace 32cd58c628b00f34 ]--- [ 33.521492][ T420] RSP: 0018:ffffc90001587d10 EFLAGS: 00010293 [ 33.531740][ T414] Call Trace: [ 33.536830][ T421] ------------[ cut here ]------------ [ 33.542318][ T421] WARNING: CPU: 0 PID: 421 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.552628][ T420] RAX: ffffffff845dc087 RBX: ffff88811675c000 RCX: ffff88811677e2c0 [ 33.560874][ T414] [ 33.564311][ T414] pppol2tp_release+0x150/0x2b0 [ 33.571477][ T419] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 33.573182][ T420] RDX: 0000000000000000 RSI: 00000000118c8cc0 RDI: 000000000c04eb7d [ 33.602616][ T421] Modules linked in: [ 33.606758][ T414] sock_close+0xb8/0x200 [ 33.611038][ T414] ? sock_mmap+0xa0/0xa0 [ 33.611688][ T419] RSP: 0018:ffffc900015f7d10 EFLAGS: 00010293 [ 33.615473][ T421] CPU: 0 PID: 421 Comm: syz.0.41 Tainted: G B W syzkaller #0 [ 33.631997][ T414] __fput+0x22b/0x900 [ 33.636131][ T420] RBP: ffffc90001587d30 R08: ffff88811675c083 R09: 1ffff11022ceb810 [ 33.644165][ T420] R10: dffffc0000000000 R11: ffffed1022ceb811 R12: dffffc0000000000 [ 33.645239][ T419] [ 33.652919][ T414] ____fput+0x15/0x20 [ 33.658667][ T414] task_work_run+0x127/0x190 [ 33.663455][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.666167][ T419] RAX: ffffffff845dc087 RBX: ffff88811675d000 RCX: ffff88811610a780 [ 33.674210][ T414] exit_to_user_mode_loop+0xd0/0xe0 [ 33.687557][ T421] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.694007][ T420] R13: dffffc0000000000 R14: 00000000118c8cc0 R15: ffff8881144b8c00 [ 33.702106][ T421] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 33.714391][ T419] RDX: 0000000000000000 RSI: 000000001248d000 RDI: 000000000c04eb7d [ 33.724848][ T414] exit_to_user_mode_prepare+0x87/0xd0 [ 33.731228][ T419] RBP: ffffc900015f7d30 R08: ffff88811675d083 R09: 1ffff11022ceba10 [ 33.736866][ T420] FS: 000055555fd81500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.743962][ T419] R10: dffffc0000000000 R11: ffffed1022ceba11 R12: dffffc0000000000 [ 33.760634][ T414] syscall_exit_to_user_mode+0x1a/0x30 [ 33.767986][ T421] RSP: 0018:ffffc9000168fd10 EFLAGS: 00010293 [ 33.774125][ T421] RAX: ffffffff845dc087 RBX: ffff888115d85000 RCX: ffff888116778000 [ 33.782417][ T414] do_syscall_64+0x58/0xa0 [ 33.785973][ T419] R13: dffffc0000000000 R14: 000000001248d000 R15: ffff8881144b8000 [ 33.790692][ T421] RDX: 0000000000000000 RSI: 000000001f8ab2a0 RDI: 000000000c04eb7d [ 33.800104][ T419] FS: 0000555558e1b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.804383][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.813283][ T419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.819276][ T414] ? clear_bhb_loop+0x50/0xa0 [ 33.830556][ T421] RBP: ffffc9000168fd30 R08: ffff888115d85083 R09: 1ffff11022bb0a10 [ 33.839012][ T414] ? clear_bhb_loop+0x50/0xa0 [ 33.843801][ T421] R10: dffffc0000000000 R11: ffffed1022bb0a11 R12: dffffc0000000000 [ 33.851878][ T420] CR2: 0000000000000000 CR3: 00000001227c7000 CR4: 00000000003506b0 [ 33.860075][ T414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.866068][ T421] R13: dffffc0000000000 R14: 000000001f8ab2a0 R15: ffff88811ba21000 [ 33.874105][ T421] FS: 0000555574352500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.883219][ T419] CR2: 00007ff76d13b060 CR3: 000000011f8b3000 CR4: 00000000003506a0 [ 33.887359][ T414] RIP: 0033:0x7fd00a6d7e59 [ 33.893877][ T419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.895723][ T420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.904453][ T419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.916622][ T421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.926281][ T414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.946198][ T419] Call Trace: [ 33.949517][ T419] [ 33.950870][ T420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.957866][ T421] CR2: 0000000000000000 CR3: 000000012271c000 CR4: 00000000003506b0 [ 33.961910][ T420] Call Trace: [ 33.968510][ T419] pppol2tp_release+0x150/0x2b0 [ 33.972391][ T420] [ 33.976682][ T421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.976697][ T421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.976711][ T421] Call Trace: [ 33.976716][ T421] [ 33.976723][ T421] pppol2tp_release+0x150/0x2b0 [ 33.976747][ T421] sock_close+0xb8/0x200 [ 33.976765][ T421] ? sock_mmap+0xa0/0xa0 [ 33.983409][ T420] pppol2tp_release+0x150/0x2b0 [ 33.987742][ T414] RSP: 002b:00007ffe47c054a8 EFLAGS: 00000246 [ 33.996961][ T420] sock_close+0xb8/0x200 [ 34.002667][ T419] sock_close+0xb8/0x200 [ 34.020620][ T420] ? sock_mmap+0xa0/0xa0 [ 34.039543][ T421] __fput+0x22b/0x900 [ 34.043887][ T414] ORIG_RAX: 00000000000001b4 [ 34.048657][ T421] ____fput+0x15/0x20 [ 34.052720][ T414] RAX: 0000000000000000 RBX: 00007ffe47c05590 RCX: 00007fd00a6d7e59 [ 34.062956][ T430] ------------[ cut here ]------------ [ 34.069355][ T420] __fput+0x22b/0x900 [ 34.073348][ T421] task_work_run+0x127/0x190 [ 34.073397][ T421] exit_to_user_mode_loop+0xd0/0xe0 [ 34.080566][ T430] WARNING: CPU: 1 PID: 430 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.084319][ T414] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.095142][ T420] ____fput+0x15/0x20 [ 34.101617][ T421] exit_to_user_mode_prepare+0x87/0xd0 [ 34.109445][ T430] Modules linked in: [ 34.111196][ T421] syscall_exit_to_user_mode+0x1a/0x30 [ 34.116488][ T420] task_work_run+0x127/0x190 [ 34.120495][ T419] ? sock_mmap+0xa0/0xa0 [ 34.125755][ T430] CPU: 1 PID: 430 Comm: syz.6.50 Tainted: G B W syzkaller #0 [ 34.129669][ T421] do_syscall_64+0x58/0xa0 [ 34.138940][ T420] exit_to_user_mode_loop+0xd0/0xe0 [ 34.142397][ T419] __fput+0x22b/0x900 [ 34.148950][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.151582][ T421] ? clear_bhb_loop+0x50/0xa0 [ 34.163977][ T45] device bridge_slave_1 left promiscuous mode [ 34.172482][ T414] RBP: 0000000000007fdb R08: 0000000000000001 R09: 0000000000000000 [ 34.173044][ T420] exit_to_user_mode_prepare+0x87/0xd0 [ 34.180546][ T419] ____fput+0x15/0x20 [ 34.186872][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.190028][ T419] task_work_run+0x127/0x190 [ 34.198144][ T430] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.201684][ T414] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 34.208948][ T420] syscall_exit_to_user_mode+0x1a/0x30 [ 34.216400][ T421] ? clear_bhb_loop+0x50/0xa0 [ 34.222774][ T430] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 34.226171][ T419] exit_to_user_mode_loop+0xd0/0xe0 [ 34.226196][ T419] exit_to_user_mode_prepare+0x87/0xd0 [ 34.247659][ T45] device bridge_slave_0 left promiscuous mode [ 34.251547][ T414] R13: 00007fd00a95ffac R14: 00007fd00a95ffa8 R15: 00007fd00a95ffa0 [ 34.257950][ T420] do_syscall_64+0x58/0xa0 [ 34.262784][ T421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.271557][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.275318][ T414] [ 34.282532][ T420] ? clear_bhb_loop+0x50/0xa0 [ 34.288296][ T419] syscall_exit_to_user_mode+0x1a/0x30 [ 34.292557][ T420] ? clear_bhb_loop+0x50/0xa0 [ 34.296084][ T421] RIP: 0033:0x7fb3f1408e59 [ 34.296103][ T421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.304466][ T430] RSP: 0018:ffffc90001b97d10 EFLAGS: 00010293 [ 34.306395][ T414] ---[ end trace 32cd58c628b00f35 ]--- [ 34.310929][ T45] device veth1_macvtap left promiscuous mode [ 34.330621][ T419] do_syscall_64+0x58/0xa0 [ 34.338127][ T420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.342705][ T421] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 [ 34.348502][ T430] [ 34.352457][ T419] ? clear_bhb_loop+0x50/0xa0 [ 34.359029][ T420] RIP: 0033:0x7f4967647e59 [ 34.364746][ T421] ORIG_RAX: 00000000000001b4 [ 34.367116][ T430] RAX: ffffffff845dc087 RBX: ffff8881179a2000 RCX: ffff8881175fa780 [ 34.371339][ T419] ? clear_bhb_loop+0x50/0xa0 [ 34.376187][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.380477][ T421] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 34.389149][ T430] RDX: 0000000000000000 RSI: 00000000160be140 RDI: 000000000c04eb7d [ 34.394811][ T419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.414357][ T45] device veth0_vlan left promiscuous mode [ 34.420953][ T421] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.429376][ T420] RSP: 002b:00007ffe9adc0fd8 EFLAGS: 00000246 [ 34.437040][ T421] RBP: 00000000000082dd R08: 0000000000000001 R09: 0000000000000000 [ 34.450783][ T420] ORIG_RAX: 00000000000001b4 [ 34.469149][ T431] ------------[ cut here ]------------ 2026/07/07 17:25:03 executed programs: 44 [ 34.474636][ T430] RBP: ffffc90001b97d30 R08: ffff8881179a2083 R09: 1ffff11022f34410 [ 34.474656][ T430] R10: dffffc0000000000 R11: ffffed1022f34411 R12: dffffc0000000000 [ 34.474672][ T430] R13: dffffc0000000000 R14: 00000000160be140 R15: ffff88811ba60800 [ 34.483572][ T431] WARNING: CPU: 0 PID: 431 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.498654][ T30] audit: type=1400 audit(1783445103.800:114): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[14725]" dev="pipefs" ino=14725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 34.515447][ T420] RAX: 0000000000000000 RBX: 00007ffe9adc10c0 RCX: 00007f4967647e59 [ 34.531913][ T419] RIP: 0033:0x7f9e3ae5fe59 [ 34.544779][ T421] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 34.550541][ T430] FS: 000055557969a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.552907][ T421] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 34.552929][ T421] [ 34.572777][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.573565][ T419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.590450][ T430] CR2: 00007fd00b492060 CR3: 00000001225b5000 CR4: 00000000003506a0 [ 34.599573][ T420] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.599588][ T420] RBP: 000000000000817c R08: 0000000000000001 R09: 0000000000000000 [ 34.619752][ T430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.624352][ T421] ---[ end trace 32cd58c628b00f36 ]--- [ 34.637263][ T419] RSP: 002b:00007ffee26d9cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.639055][ T430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.645864][ T420] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 34.645880][ T420] R13: 00007f49678cffac R14: 00007f49678cffa8 R15: 00007f49678cffa0 [ 34.645899][ T420] [ 34.645906][ T420] ---[ end trace 32cd58c628b00f37 ]--- [ 34.648978][ T419] RAX: 0000000000000000 RBX: 00007ffee26d9dc0 RCX: 00007f9e3ae5fe59 [ 34.673680][ T431] Modules linked in: [ 34.682210][ T419] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.700724][ T430] Call Trace: [ 34.704037][ T430] [ 34.710588][ T430] pppol2tp_release+0x150/0x2b0 [ 34.718137][ T419] RBP: 0000000000008154 R08: 0000000000000001 R09: 0000000000000000 [ 34.727943][ T430] sock_close+0xb8/0x200 [ 34.732307][ T430] ? sock_mmap+0xa0/0xa0 [ 34.736807][ T419] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 34.746258][ T430] __fput+0x22b/0x900 [ 34.750349][ T430] ____fput+0x15/0x20 [ 34.760660][ T431] [ 34.763032][ T431] CPU: 1 PID: 431 Comm: syz.5.51 Tainted: G B W syzkaller #0 [ 34.769109][ T430] task_work_run+0x127/0x190 [ 34.776542][ T419] R13: 00007f9e3b0e7fac R14: 00007f9e3b0e7fa8 R15: 00007f9e3b0e7fa0 [ 34.787247][ T430] exit_to_user_mode_loop+0xd0/0xe0 [ 34.793495][ T419] [ 34.796978][ T419] ---[ end trace 32cd58c628b00f38 ]--- [ 34.802575][ T430] exit_to_user_mode_prepare+0x87/0xd0 [ 34.811915][ T430] syscall_exit_to_user_mode+0x1a/0x30 [ 34.827330][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.839526][ T430] do_syscall_64+0x58/0xa0 [ 34.845703][ T440] ------------[ cut here ]------------ [ 34.851496][ T439] ------------[ cut here ]------------ [ 34.857650][ T430] ? clear_bhb_loop+0x50/0xa0 [ 34.864895][ T439] WARNING: CPU: 0 PID: 439 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.874699][ T431] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.880266][ T430] ? clear_bhb_loop+0x50/0xa0 [ 34.886083][ T440] WARNING: CPU: 0 PID: 440 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.897612][ T430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.903552][ T430] RIP: 0033:0x7ff76c380e59 [ 34.908242][ T439] Modules linked in: [ 34.912162][ T439] CPU: 0 PID: 439 Comm: syz.1.60 Tainted: G B W syzkaller #0 [ 34.919807][ T431] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 34.921625][ T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.960001][ T431] RSP: 0018:ffffc90001777d10 EFLAGS: 00010293 [ 34.960032][ T431] RAX: ffffffff845dc087 RBX: ffff888117899000 RCX: ffff888117bc13c0 [ 34.960049][ T431] RDX: 0000000000000000 RSI: 000000001f8ab220 RDI: 000000000c04eb7d [ 34.960063][ T431] RBP: ffffc90001777d30 R08: ffff888117899083 R09: 1ffff11022f13210 [ 34.960077][ T431] R10: dffffc0000000000 R11: ffffed1022f13211 R12: dffffc0000000000 [ 34.960093][ T431] R13: dffffc0000000000 R14: 000000001f8ab220 R15: ffff888117400400 [ 34.960108][ T431] FS: 00005555949b9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.960126][ T431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.960141][ T431] CR2: 000055555fd9c908 CR3: 0000000122594000 CR4: 00000000003506a0 [ 34.960160][ T431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.969687][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.975231][ T440] Modules linked in: [ 34.982787][ T439] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.995891][ T431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.999038][ T430] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 [ 35.006400][ T431] Call Trace: [ 35.024613][ T439] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 35.045640][ T440] [ 35.060612][ T430] ORIG_RAX: 00000000000001b4 [ 35.074017][ T431] [ 35.106657][ T445] ------------[ cut here ]------------ [ 35.112275][ T430] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 35.120902][ T445] WARNING: CPU: 0 PID: 445 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.126757][ T440] CPU: 1 PID: 440 Comm: syz.0.61 Tainted: G B W syzkaller #0 [ 35.137008][ T439] RSP: 0018:ffffc90001597d10 EFLAGS: 00010293 [ 35.139764][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.147462][ T430] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.157130][ T431] pppol2tp_release+0x150/0x2b0 [ 35.164222][ T445] Modules linked in: [ 35.168717][ T431] sock_close+0xb8/0x200 [ 35.169194][ T445] [ 35.174951][ T431] ? sock_mmap+0xa0/0xa0 [ 35.178642][ T439] RAX: ffffffff845dc087 RBX: ffff888118472000 RCX: ffff88811610e2c0 [ 35.179374][ T440] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.183519][ T439] RDX: 0000000000000000 RSI: 0000000018479100 RDI: 000000000c04eb7d [ 35.191815][ T431] __fput+0x22b/0x900 [ 35.198838][ T430] RBP: 00000000000084eb R08: 0000000000000001 R09: 0000000000000000 [ 35.206129][ T440] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 35.210455][ T445] CPU: 0 PID: 445 Comm: syz.4.65 Tainted: G B W syzkaller #0 [ 35.218159][ T431] ____fput+0x15/0x20 [ 35.238115][ T430] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 35.246373][ T440] RSP: 0018:ffffc900015c7d10 EFLAGS: 00010293 [ 35.250509][ T439] RBP: ffffc90001597d30 R08: ffff888118472083 R09: 1ffff1102308e410 [ 35.258431][ T440] [ 35.264952][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.272554][ T431] task_work_run+0x127/0x190 [ 35.275078][ T439] R10: dffffc0000000000 R11: ffffed102308e411 R12: dffffc0000000000 [ 35.285459][ T431] exit_to_user_mode_loop+0xd0/0xe0 [ 35.289751][ T430] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 35.297541][ T440] RAX: ffffffff845dc087 RBX: ffff888118474000 RCX: ffff8881186413c0 [ 35.302917][ T445] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.310833][ T431] exit_to_user_mode_prepare+0x87/0xd0 [ 35.318630][ T439] R13: dffffc0000000000 R14: 0000000018479100 R15: ffff8881173fcc00 [ 35.325229][ T440] RDX: 0000000000000000 RSI: 000000001f8b0460 RDI: 000000000c04eb7d [ 35.330519][ T430] [ 35.339211][ T431] syscall_exit_to_user_mode+0x1a/0x30 [ 35.346542][ T445] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 35.349848][ T440] RBP: ffffc900015c7d30 R08: ffff888118474083 R09: 1ffff1102308e810 [ 35.354948][ T439] FS: 0000555558e1b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.375523][ T431] do_syscall_64+0x58/0xa0 [ 35.382744][ T445] RSP: 0018:ffffc900015f7d10 EFLAGS: 00010293 [ 35.392794][ T431] ? clear_bhb_loop+0x50/0xa0 [ 35.396383][ T430] ---[ end trace 32cd58c628b00f39 ]--- [ 35.402543][ T440] R10: dffffc0000000000 R11: ffffed102308e811 R12: dffffc0000000000 [ 35.406970][ T445] [ 35.412765][ T440] R13: dffffc0000000000 R14: 000000001f8b0460 R15: ffff888117a3f800 [ 35.423252][ T439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.437747][ T445] RAX: ffffffff845dc087 RBX: ffff88811867c000 RCX: ffff8881185862c0 [ 35.445919][ T440] FS: 0000555574352500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.452121][ T431] ? clear_bhb_loop+0x50/0xa0 [ 35.460509][ T439] CR2: 0000000000000000 CR3: 0000000122453000 CR4: 00000000003506b0 [ 35.468309][ T440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.478567][ T440] CR2: 00007ffea1444f70 CR3: 0000000107ddc000 CR4: 00000000003506a0 [ 35.478746][ T431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.487087][ T440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.494928][ T445] RDX: 0000000000000000 RSI: 000000001f8b0a00 RDI: 000000000c04eb7d [ 35.501233][ T439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.512213][ T445] RBP: ffffc900015f7d30 R08: ffff88811867c083 R09: 1ffff110230cf810 [ 35.521365][ T440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.533047][ T439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.541165][ T439] Call Trace: [ 35.544721][ T439] [ 35.547682][ T439] pppol2tp_release+0x150/0x2b0 [ 35.552964][ T431] RIP: 0033:0x7fd00a6d7e59 [ 35.557449][ T440] Call Trace: [ 35.557458][ T440] [ 35.557465][ T440] pppol2tp_release+0x150/0x2b0 [ 35.557492][ T440] sock_close+0xb8/0x200 [ 35.557510][ T440] ? sock_mmap+0xa0/0xa0 [ 35.557528][ T440] __fput+0x22b/0x900 [ 35.557551][ T440] ____fput+0x15/0x20 [ 35.574723][ T445] R10: dffffc0000000000 R11: ffffed10230cf811 R12: dffffc0000000000 [ 35.583511][ T439] sock_close+0xb8/0x200 [ 35.593352][ T431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.598408][ T439] ? sock_mmap+0xa0/0xa0 [ 35.632010][ T440] task_work_run+0x127/0x190 [ 35.638489][ T445] R13: dffffc0000000000 R14: 000000001f8b0a00 R15: ffff88811bb28400 [ 35.649901][ T440] exit_to_user_mode_loop+0xd0/0xe0 [ 35.655359][ T440] exit_to_user_mode_prepare+0x87/0xd0 [ 35.657377][ T450] ------------[ cut here ]------------ [ 35.660986][ T439] __fput+0x22b/0x900 [ 35.671382][ T440] syscall_exit_to_user_mode+0x1a/0x30 [ 35.675123][ T445] FS: 000055555fd81500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.678611][ T439] ____fput+0x15/0x20 [ 35.689927][ T450] WARNING: CPU: 1 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.694620][ T431] RSP: 002b:00007ffe47c054a8 EFLAGS: 00000246 [ 35.700179][ T440] do_syscall_64+0x58/0xa0 [ 35.710137][ T431] ORIG_RAX: 00000000000001b4 [ 35.711372][ T450] Modules linked in: [ 35.715503][ T439] task_work_run+0x127/0x190 [ 35.715733][ T445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.719424][ T439] exit_to_user_mode_loop+0xd0/0xe0 [ 35.724097][ T431] RAX: 0000000000000000 RBX: 00007ffe47c05590 RCX: 00007fd00a6d7e59 [ 35.731508][ T450] [ 35.744691][ T445] CR2: 0000000000000000 CR3: 000000012244e000 CR4: 00000000003506b0 [ 35.746793][ T440] ? clear_bhb_loop+0x50/0xa0 [ 35.754349][ T445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.759167][ T439] exit_to_user_mode_prepare+0x87/0xd0 [ 35.759193][ T439] syscall_exit_to_user_mode+0x1a/0x30 [ 35.759214][ T439] do_syscall_64+0x58/0xa0 [ 35.759235][ T439] ? clear_bhb_loop+0x50/0xa0 [ 35.759253][ T439] ? clear_bhb_loop+0x50/0xa0 [ 35.759289][ T439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.774655][ T431] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.779592][ T450] CPU: 1 PID: 450 Comm: syz.6.70 Tainted: G B W syzkaller #0 [ 35.784139][ T431] RBP: 0000000000008680 R08: 0000000000000001 R09: 0000000000000000 [ 35.787773][ T440] ? clear_bhb_loop+0x50/0xa0 [ 35.803235][ T445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.806882][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.814885][ T431] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 35.823328][ T439] RIP: 0033:0x7f9e3ae5fe59 [ 35.836781][ T431] R13: 00007fd00a95ffac R14: 00007fd00a95ffa8 R15: 00007fd00a95ffa0 [ 35.846935][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.854015][ T445] Call Trace: [ 35.858514][ T440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.882174][ T445] [ 35.883194][ T450] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 35.885704][ T445] pppol2tp_release+0x150/0x2b0 [ 35.906211][ T440] RIP: 0033:0x7fb3f1408e59 [ 35.910348][ T431] [ 35.914219][ T440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.918283][ T431] ---[ end trace 32cd58c628b00f3a ]--- [ 35.938465][ T439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.943242][ T450] RSP: 0018:ffffc90000b37d10 EFLAGS: 00010293 [ 35.962988][ T445] sock_close+0xb8/0x200 [ 35.963145][ T439] RSP: 002b:00007ffee26d9cd8 EFLAGS: 00000246 [ 35.969236][ T445] ? sock_mmap+0xa0/0xa0 [ 35.974317][ T440] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 [ 35.984115][ T445] __fput+0x22b/0x900 [ 35.995502][ T445] ____fput+0x15/0x20 [ 35.999621][ T445] task_work_run+0x127/0x190 [ 36.003552][ T440] ORIG_RAX: 00000000000001b4 [ 36.004612][ T450] [ 36.010921][ T439] ORIG_RAX: 00000000000001b4 [ 36.015134][ T445] exit_to_user_mode_loop+0xd0/0xe0 [ 36.016453][ T439] RAX: 0000000000000000 RBX: 00007ffee26d9dc0 RCX: 00007f9e3ae5fe59 [ 36.021493][ T445] exit_to_user_mode_prepare+0x87/0xd0 [ 36.029349][ T440] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 36.037419][ T450] RAX: ffffffff845dc087 RBX: ffff888118ac9000 RCX: ffff888118642780 [ 36.043200][ T439] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.052448][ T451] ------------[ cut here ]------------ [ 36.060008][ T440] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.064576][ T445] syscall_exit_to_user_mode+0x1a/0x30 [ 36.072592][ T439] RBP: 00000000000087f4 R08: 0000000000000001 R09: 0000000000000000 [ 36.079312][ T450] RDX: 0000000000000000 RSI: 000000002265ed90 RDI: 000000000c04eb7d [ 36.086782][ T440] RBP: 00000000000087fa R08: 0000000000000001 R09: 0000000000000000 [ 36.094953][ T451] WARNING: CPU: 0 PID: 451 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.102574][ T439] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 36.112542][ T445] do_syscall_64+0x58/0xa0 [ 36.120396][ T440] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 36.132573][ T445] ? clear_bhb_loop+0x50/0xa0 [ 36.132613][ T440] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 36.145318][ T450] RBP: ffffc90000b37d30 R08: ffff888118ac9083 R09: 1ffff11023159210 [ 36.145337][ T450] R10: dffffc0000000000 R11: ffffed1023159211 R12: dffffc0000000000 [ 36.153837][ T439] R13: 00007f9e3b0e7fac R14: 00007f9e3b0e7fa8 R15: 00007f9e3b0e7fa0 [ 36.162448][ T445] ? clear_bhb_loop+0x50/0xa0 [ 36.170529][ T440] [ 36.177203][ T445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.177551][ T439] [ 36.183119][ T445] RIP: 0033:0x7f4967647e59 [ 36.183138][ T445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.186761][ T440] ---[ end trace 32cd58c628b00f3b ]--- [ 36.190623][ T451] Modules linked in: [ 36.210576][ T439] ---[ end trace 32cd58c628b00f3c ]--- [ 36.215859][ T450] R13: dffffc0000000000 R14: 000000002265ed90 R15: ffff888117a60800 [ 36.233346][ T445] RSP: 002b:00007ffe9adc0fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.242104][ T450] FS: 000055557969a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.251254][ T445] RAX: 0000000000000000 RBX: 00007ffe9adc10c0 RCX: 00007f4967647e59 [ 36.261821][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.268601][ T445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.277474][ T451] [ 36.279842][ T451] CPU: 0 PID: 451 Comm: syz.5.71 Tainted: G B W syzkaller #0 [ 36.288607][ T450] CR2: 0000000000000000 CR3: 00000001224d4000 CR4: 00000000003506b0 [ 36.296819][ T445] RBP: 00000000000088ff R08: 0000000000000001 R09: 0000000000000000 [ 36.306470][ T453] ------------[ cut here ]------------ [ 36.311999][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.320589][ T453] WARNING: CPU: 0 PID: 453 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.330720][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.340886][ T445] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 36.349015][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.357211][ T451] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.363601][ T451] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 36.383972][ T445] R13: 00007f49678cffac R14: 00007f49678cffa8 R15: 00007f49678cffa0 [ 36.392152][ T450] Call Trace: [ 36.395576][ T453] Modules linked in: [ 36.399495][ T453] CPU: 0 PID: 453 Comm: syz.1.74 Tainted: G B W syzkaller #0 [ 36.408151][ T450] [ 36.411102][ T450] pppol2tp_release+0x150/0x2b0 [ 36.416136][ T445] [ 36.419179][ T445] ---[ end trace 32cd58c628b00f3d ]--- [ 36.424779][ T450] sock_close+0xb8/0x200 [ 36.429132][ T450] ? sock_mmap+0xa0/0xa0 [ 36.433421][ T450] __fput+0x22b/0x900 [ 36.438724][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.454158][ T451] RSP: 0018:ffffc90001c5fd10 EFLAGS: 00010293 [ 36.460554][ T450] ____fput+0x15/0x20 [ 36.464736][ T450] task_work_run+0x127/0x190 [ 36.469433][ T451] RAX: ffffffff845dc087 RBX: ffff8881192f4000 RCX: ffff888118643b40 [ 36.478181][ T450] exit_to_user_mode_loop+0xd0/0xe0 [ 36.483470][ T450] exit_to_user_mode_prepare+0x87/0xd0 [ 36.489224][ T453] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.495731][ T451] RDX: 0000000000000000 RSI: 000000001882f800 RDI: 000000000c04eb7d [ 36.503788][ T453] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 36.506101][ T459] ------------[ cut here ]------------ [ 36.529703][ T450] syscall_exit_to_user_mode+0x1a/0x30 [ 36.529900][ T459] WARNING: CPU: 1 PID: 459 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.538380][ T451] RBP: ffffc90001c5fd30 R08: ffff8881192f4083 R09: 1ffff1102325e810 [ 36.553869][ T450] do_syscall_64+0x58/0xa0 [ 36.558715][ T450] ? clear_bhb_loop+0x50/0xa0 [ 36.563431][ T450] ? clear_bhb_loop+0x50/0xa0 [ 36.569113][ T453] RSP: 0018:ffffc90001e07d10 EFLAGS: 00010293 [ 36.574251][ T459] Modules linked in: [ 36.575449][ T451] R10: dffffc0000000000 R11: ffffed102325e811 R12: dffffc0000000000 [ 36.575521][ T459] [ 36.579399][ T451] R13: dffffc0000000000 R14: 000000001882f800 R15: ffff888110b37400 [ 36.599037][ T453] RAX: ffffffff845dc087 RBX: ffff8881192f0000 RCX: ffff8881195ebb40 [ 36.607224][ T450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.613196][ T453] RDX: 0000000000000000 RSI: 000000001f8b04a0 RDI: 000000000c04eb7d [ 36.621425][ T450] RIP: 0033:0x7ff76c380e59 [ 36.624766][ T459] CPU: 1 PID: 459 Comm: syz.4.79 Tainted: G B W syzkaller #0 [ 36.626508][ T453] RBP: ffffc90001e07d30 R08: ffff8881192f0083 R09: 1ffff1102325e010 [ 36.635507][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.643936][ T451] FS: 00005555949b9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.661848][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.680432][ T459] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.683109][ T453] R10: dffffc0000000000 R11: ffffed102325e011 R12: dffffc0000000000 [ 36.693775][ T459] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 36.715921][ T451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.722792][ T451] CR2: 00002bc09fbff000 CR3: 000000011e808000 CR4: 00000000003506b0 [ 36.731647][ T450] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.740229][ T453] R13: dffffc0000000000 R14: 000000001f8b04a0 R15: ffff888113acbc00 [ 36.748282][ T451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.756520][ T450] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 36.764934][ T453] FS: 0000555558e1b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.776776][ T465] ------------[ cut here ]------------ [ 36.782290][ T465] WARNING: CPU: 1 PID: 465 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.784607][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.793316][ T459] RSP: 0018:ffffc900015c7d10 EFLAGS: 00010293 [ 36.799120][ T450] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.799137][ T450] RBP: 0000000000008b21 R08: 0000000000000001 R09: 0000000000000000 [ 36.799151][ T450] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 36.799165][ T450] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 36.799184][ T450] [ 36.799191][ T450] ---[ end trace 32cd58c628b00f3e ]--- [ 36.802116][ T451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.827862][ T459] [ 36.832898][ T453] CR2: 00002bc09fbff000 CR3: 0000000121fa2000 CR4: 00000000003506b0 [ 36.838710][ T465] Modules linked in: [ 36.846269][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.846286][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.846301][ T453] Call Trace: [ 36.846307][ T453] [ 36.846314][ T453] pppol2tp_release+0x150/0x2b0 [ 36.846342][ T453] sock_close+0xb8/0x200 [ 36.846361][ T453] ? sock_mmap+0xa0/0xa0 [ 36.855327][ T459] RAX: ffffffff845dc087 RBX: ffff88811a09b000 RCX: ffff88811a0a62c0 [ 36.867036][ T453] __fput+0x22b/0x900 [ 36.889377][ T465] [ 36.892316][ T451] Call Trace: [ 36.901658][ T459] RDX: 0000000000000000 RSI: 0000000019084400 RDI: 000000000c04eb7d [ 36.932868][ T453] ____fput+0x15/0x20 [ 36.935634][ T465] CPU: 1 PID: 465 Comm: syz.0.85 Tainted: G B W syzkaller #0 [ 36.938492][ T451] [ 36.948480][ T453] task_work_run+0x127/0x190 [ 36.953166][ T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.965794][ T451] pppol2tp_release+0x150/0x2b0 [ 36.970713][ T451] sock_close+0xb8/0x200 [ 36.976169][ T453] exit_to_user_mode_loop+0xd0/0xe0 [ 36.978063][ T465] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.987914][ T453] exit_to_user_mode_prepare+0x87/0xd0 [ 36.988668][ T459] RBP: ffffc900015c7d30 R08: ffff88811a09b083 R09: 1ffff11023413610 [ 36.993639][ T453] syscall_exit_to_user_mode+0x1a/0x30 [ 37.001711][ T465] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 37.007748][ T451] ? sock_mmap+0xa0/0xa0 [ 37.027378][ T459] R10: dffffc0000000000 R11: ffffed1023413611 R12: dffffc0000000000 [ 37.031141][ T453] do_syscall_64+0x58/0xa0 [ 37.039785][ T459] R13: dffffc0000000000 R14: 0000000019084400 R15: ffff888119087c00 [ 37.047629][ T453] ? clear_bhb_loop+0x50/0xa0 [ 37.052423][ T465] RSP: 0018:ffffc90001597d10 EFLAGS: 00010293 [ 37.057149][ T451] __fput+0x22b/0x900 [ 37.069470][ T470] ------------[ cut here ]------------ [ 37.075140][ T465] RAX: ffffffff845dc087 RBX: ffff88811a19d000 RCX: ffff88811a44e2c0 [ 37.079198][ T453] ? clear_bhb_loop+0x50/0xa0 [ 37.083184][ T465] RDX: 0000000000000000 RSI: 000000001e715a00 RDI: 000000000c04eb7d [ 37.088128][ T451] ____fput+0x15/0x20 [ 37.096684][ T459] FS: 000055555fd81500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.100219][ T453] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.109306][ T459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.115402][ T470] WARNING: CPU: 0 PID: 470 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.122454][ T465] RBP: ffffc90001597d30 R08: ffff88811a19d083 R09: 1ffff11023433a10 [ 37.134143][ T451] task_work_run+0x127/0x190 [ 37.140617][ T459] CR2: 0000000000000000 CR3: 000000011e856000 CR4: 00000000003506a0 [ 37.144465][ T451] exit_to_user_mode_loop+0xd0/0xe0 [ 37.152672][ T459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.157603][ T453] RIP: 0033:0x7f9e3ae5fe59 [ 37.165953][ T465] R10: dffffc0000000000 R11: ffffed1023433a11 R12: dffffc0000000000 [ 37.170000][ T470] Modules linked in: [ 37.178002][ T451] exit_to_user_mode_prepare+0x87/0xd0 [ 37.178012][ T459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.178031][ T451] syscall_exit_to_user_mode+0x1a/0x30 [ 37.181925][ T459] Call Trace: [ 37.181932][ T459] [ 37.187412][ T453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.197342][ T465] R13: dffffc0000000000 R14: 000000001e715a00 R15: ffff888119091c00 [ 37.203295][ T470] [ 37.204288][ T465] FS: 0000555574352500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.207141][ T470] CPU: 0 PID: 470 Comm: syz.6.90 Tainted: G B W syzkaller #0 [ 37.207164][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.207218][ T451] do_syscall_64+0x58/0xa0 [ 37.227538][ T459] pppol2tp_release+0x150/0x2b0 [ 37.235153][ T453] RSP: 002b:00007ffee26d9cd8 EFLAGS: 00000246 [ 37.237345][ T459] sock_close+0xb8/0x200 [ 37.246153][ T470] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.255109][ T465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.265050][ T453] ORIG_RAX: 00000000000001b4 [ 37.280193][ T465] CR2: 0000000000000000 CR3: 000000011e21c000 CR4: 00000000003506a0 [ 37.280216][ T465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.280230][ T465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.280245][ T465] Call Trace: [ 37.280250][ T465] [ 37.280258][ T465] pppol2tp_release+0x150/0x2b0 [ 37.280284][ T465] sock_close+0xb8/0x200 [ 37.280302][ T465] ? sock_mmap+0xa0/0xa0 [ 37.280327][ T465] __fput+0x22b/0x900 [ 37.280349][ T465] ____fput+0x15/0x20 [ 37.280368][ T465] task_work_run+0x127/0x190 [ 37.285275][ T470] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 37.292678][ T459] ? sock_mmap+0xa0/0xa0 [ 37.298274][ T453] RAX: 0000000000000000 RBX: 00007ffee26d9dc0 RCX: 00007f9e3ae5fe59 [ 37.310681][ T459] __fput+0x22b/0x900 [ 37.318663][ T451] ? clear_bhb_loop+0x50/0xa0 [ 37.326742][ T465] exit_to_user_mode_loop+0xd0/0xe0 [ 37.329980][ T470] RSP: 0018:ffffc90001777d10 EFLAGS: 00010293 [ 37.332724][ T465] exit_to_user_mode_prepare+0x87/0xd0 [ 37.337611][ T470] [ 37.342283][ T459] ____fput+0x15/0x20 [ 37.346298][ T451] ? clear_bhb_loop+0x50/0xa0 [ 37.350406][ T459] task_work_run+0x127/0x190 [ 37.354206][ T451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.359332][ T465] syscall_exit_to_user_mode+0x1a/0x30 [ 37.379204][ T453] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.383616][ T459] exit_to_user_mode_loop+0xd0/0xe0 [ 37.391075][ T470] RAX: ffffffff845dc087 RBX: ffff88811a3b1000 RCX: ffff88811a44cf00 [ 37.395306][ T459] exit_to_user_mode_prepare+0x87/0xd0 [ 37.399719][ T470] RDX: 0000000000000000 RSI: 0000000022795a40 RDI: 000000000c04eb7d [ 37.405030][ T459] syscall_exit_to_user_mode+0x1a/0x30 [ 37.411028][ T470] RBP: ffffc90001777d30 R08: ffff88811a3b1083 R09: 1ffff11023476210 [ 37.416767][ T465] do_syscall_64+0x58/0xa0 [ 37.418937][ T453] RBP: 0000000000008daf R08: 0000000000000001 R09: 0000000000000000 [ 37.422774][ T465] ? clear_bhb_loop+0x50/0xa0 [ 37.427503][ T470] R10: dffffc0000000000 R11: ffffed1023476211 R12: dffffc0000000000 [ 37.432649][ T459] do_syscall_64+0x58/0xa0 [ 37.438510][ T453] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 37.444320][ T465] ? clear_bhb_loop+0x50/0xa0 [ 37.451939][ T470] R13: dffffc0000000000 R14: 0000000022795a40 R15: ffff888110857800 [ 37.457239][ T451] RIP: 0033:0x7fd00a6d7e59 [ 37.465146][ T453] R13: 00007f9e3b0e7fac R14: 00007f9e3b0e7fa8 R15: 00007f9e3b0e7fa0 [ 37.470614][ T459] ? clear_bhb_loop+0x50/0xa0 [ 37.478641][ T470] FS: 000055557969a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.484248][ T451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.492113][ T453] [ 37.496513][ T465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.504586][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.509265][ T459] ? clear_bhb_loop+0x50/0xa0 [ 37.517708][ T453] ---[ end trace 32cd58c628b00f3f ]--- [ 37.521687][ T451] RSP: 002b:00007ffe47c054a8 EFLAGS: 00000246 [ 37.529731][ T470] CR2: 0000000000000000 CR3: 0000000122583000 CR4: 00000000003506b0 [ 37.534362][ T465] RIP: 0033:0x7fb3f1408e59 [ 37.545212][ T470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.546832][ T459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.574635][ T470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.588360][ T465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.594687][ T451] ORIG_RAX: 00000000000001b4 [ 37.602549][ T465] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 [ 37.611830][ T470] Call Trace: [ 37.614857][ T465] ORIG_RAX: 00000000000001b4 [ 37.619979][ T451] RAX: 0000000000000000 RBX: 00007ffe47c05590 RCX: 00007fd00a6d7e59 [ 37.628208][ T465] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 37.636302][ T470] [ 37.654549][ T459] RIP: 0033:0x7f4967647e59 [ 37.681833][ T451] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.692624][ T465] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.693603][ T451] RBP: 0000000000008c8b R08: 0000000000000001 R09: 0000000000000000 [ 37.718760][ T465] RBP: 0000000000008f85 R08: 0000000000000001 R09: 0000000000000000 [ 37.733294][ T470] pppol2tp_release+0x150/0x2b0 [ 37.742340][ T473] ------------[ cut here ]------------ [ 37.749077][ T451] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 37.753800][ T473] WARNING: CPU: 1 PID: 473 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.759714][ T470] sock_close+0xb8/0x200 [ 37.769145][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.779598][ T451] R13: 00007fd00a95ffac R14: 00007fd00a95ffa8 R15: 00007fd00a95ffa0 [ 37.781823][ T473] Modules linked in: [ 37.802238][ T470] ? sock_mmap+0xa0/0xa0 [ 37.810264][ T459] RSP: 002b:00007ffe9adc0fd8 EFLAGS: 00000246 [ 37.814054][ T470] __fput+0x22b/0x900 [ 37.827890][ T465] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 37.827908][ T465] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 37.837300][ T451] [ 37.847180][ T459] ORIG_RAX: 00000000000001b4 [ 37.847958][ T451] ---[ end trace 32cd58c628b00f40 ]--- [ 37.851875][ T459] RAX: 0000000000000000 RBX: 00007ffe9adc10c0 RCX: 00007f4967647e59 [ 37.858055][ T470] ____fput+0x15/0x20 [ 37.865437][ T465] [ 37.872378][ T465] ---[ end trace 32cd58c628b00f41 ]--- [ 37.877915][ T470] task_work_run+0x127/0x190 [ 37.883337][ T473] [ 37.885856][ T473] CPU: 1 PID: 473 Comm: syz.1.93 Tainted: G B W syzkaller #0 [ 37.895685][ T459] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.903695][ T459] RBP: 0000000000008e56 R08: 0000000000000001 R09: 0000000000000000 [ 37.909027][ T470] exit_to_user_mode_loop+0xd0/0xe0 [ 37.915531][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.927903][ T475] ------------[ cut here ]------------ [ 37.930676][ T470] exit_to_user_mode_prepare+0x87/0xd0 [ 37.933495][ T475] WARNING: CPU: 1 PID: 475 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.940206][ T470] syscall_exit_to_user_mode+0x1a/0x30 [ 37.949275][ T473] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.960988][ T459] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 37.969048][ T459] R13: 00007f49678cffac R14: 00007f49678cffa8 R15: 00007f49678cffa0 [ 37.977126][ T475] Modules linked in: [ 37.981046][ T475] CPU: 1 PID: 475 Comm: syz.0.95 Tainted: G B W syzkaller #0 [ 37.985448][ T470] do_syscall_64+0x58/0xa0 [ 37.989861][ T473] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 37.995616][ T470] ? clear_bhb_loop+0x50/0xa0 [ 38.015053][ T459] [ 38.021463][ T459] ---[ end trace 32cd58c628b00f42 ]--- [ 38.028119][ T475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.043978][ T473] RSP: 0018:ffffc900023dfd10 EFLAGS: 00010293 [ 38.050485][ T475] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.057329][ T470] ? clear_bhb_loop+0x50/0xa0 [ 38.058359][ T473] RAX: ffffffff845dc087 RBX: ffff888119f8b000 RCX: ffff88811a44bb40 [ 38.070377][ T470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.076941][ T475] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 38.094709][ T473] RDX: 0000000000000000 RSI: 00000000173a1f00 RDI: 000000000c04eb7d [ 38.097071][ T475] RSP: 0018:ffffc90001c5fd10 EFLAGS: 00010293 [ 38.110685][ T475] RAX: ffffffff845dc087 RBX: ffff888119f89000 RCX: ffff88811a9abb40 [ 38.118869][ T475] RDX: 0000000000000000 RSI: 000000000d61bed0 RDI: 000000000c04eb7d [ 38.127046][ T475] RBP: ffffc90001c5fd30 R08: ffff888119f89083 R09: 1ffff110233f1210 [ 38.135265][ T475] R10: dffffc0000000000 R11: ffffed10233f1211 R12: dffffc0000000000 [ 38.143268][ T475] R13: dffffc0000000000 R14: 000000000d61bed0 R15: ffff88811ab26000 [ 38.144704][ T470] RIP: 0033:0x7ff76c380e59 [ 38.151810][ T475] FS: 0000555574352500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.157799][ T470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.164969][ T473] RBP: ffffc900023dfd30 R08: ffff888119f8b083 R09: 1ffff110233f1610 [ 38.184815][ T475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.201156][ T479] ------------[ cut here ]------------ [ 38.206671][ T479] WARNING: CPU: 1 PID: 479 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.216784][ T470] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.222521][ T475] CR2: 0000000000000000 CR3: 0000000118a3c000 CR4: 00000000003506a0 [ 38.225894][ T473] R10: dffffc0000000000 R11: ffffed10233f1611 R12: dffffc0000000000 [ 38.233749][ T475] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.241995][ T479] Modules linked in: [ 38.249532][ T470] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 38.261580][ T479] [ 38.263928][ T479] CPU: 1 PID: 479 Comm: syz.5.99 Tainted: G B W syzkaller #0 [ 38.272608][ T473] R13: dffffc0000000000 R14: 00000000173a1f00 R15: ffff888113929800 [ 38.280800][ T473] FS: 0000555558e1b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.280833][ T475] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.290023][ T470] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.305920][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.316155][ T473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.322768][ T473] CR2: 0000000000000000 CR3: 000000011de1d000 CR4: 00000000003506a0 [ 38.330972][ T479] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.332720][ T475] Call Trace: [ 38.340753][ T470] RBP: 00000000000090aa R08: 0000000000000001 R09: 0000000000000000 [ 38.341698][ T473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.351307][ T475] [ 38.360021][ T479] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 38.380184][ T473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.388329][ T473] Call Trace: [ 38.389740][ T470] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 38.399117][ T473] [ 38.401164][ T475] pppol2tp_release+0x150/0x2b0 [ 38.403035][ T479] RSP: 0018:ffffc90002487d10 EFLAGS: 00010293 [ 38.407666][ T473] pppol2tp_release+0x150/0x2b0 [ 38.407897][ T470] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 38.417784][ T479] [ 38.431691][ T475] sock_close+0xb8/0x200 [ 38.434270][ T473] sock_close+0xb8/0x200 [ 38.436007][ T475] ? sock_mmap+0xa0/0xa0 [ 38.436028][ T475] __fput+0x22b/0x900 [ 38.436052][ T475] ____fput+0x15/0x20 [ 38.436070][ T475] task_work_run+0x127/0x190 [ 38.436089][ T475] exit_to_user_mode_loop+0xd0/0xe0 [ 38.444600][ T473] ? sock_mmap+0xa0/0xa0 [ 38.444626][ T473] __fput+0x22b/0x900 [ 38.471668][ T470] [ 38.474215][ T479] RAX: ffffffff845dc087 RBX: ffff888116b5a000 RCX: ffff88811a9162c0 [ 38.479288][ T470] ---[ end trace 32cd58c628b00f43 ]--- [ 38.484181][ T479] RDX: 0000000000000000 RSI: 0000000022795c40 RDI: 000000000c04eb7d [ 38.489568][ T486] ------------[ cut here ]------------ [ 38.497425][ T473] ____fput+0x15/0x20 [ 38.503602][ T475] exit_to_user_mode_prepare+0x87/0xd0 [ 38.506106][ T479] RBP: ffffc90002487d30 R08: ffff888116b5a083 R09: 1ffff11022d6b410 [ 38.511574][ T475] syscall_exit_to_user_mode+0x1a/0x30 [ 38.511599][ T475] do_syscall_64+0x58/0xa0 [ 38.520259][ T473] task_work_run+0x127/0x190 [ 38.528159][ T475] ? clear_bhb_loop+0x50/0xa0 [ 38.535814][ T473] exit_to_user_mode_loop+0xd0/0xe0 [ 38.544139][ T473] exit_to_user_mode_prepare+0x87/0xd0 [ 38.549978][ T473] syscall_exit_to_user_mode+0x1a/0x30 [ 38.555660][ T486] WARNING: CPU: 1 PID: 486 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.570111][ T479] R10: dffffc0000000000 R11: ffffed1022d6b411 R12: dffffc0000000000 [ 38.579103][ T486] Modules linked in: [ 38.580110][ T475] ? clear_bhb_loop+0x50/0xa0 [ 38.583135][ T473] do_syscall_64+0x58/0xa0 [ 38.592369][ T486] CPU: 1 PID: 486 Comm: syz.4.106 Tainted: G B W syzkaller #0 [ 38.601179][ T479] R13: dffffc0000000000 R14: 0000000022795c40 R15: ffff88811a9fc400 [ 38.609327][ T473] ? clear_bhb_loop+0x50/0xa0 [ 38.614128][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.621546][ T475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.628313][ T473] ? clear_bhb_loop+0x50/0xa0 [ 38.630910][ T475] RIP: 0033:0x7fb3f1408e59 [ 38.638548][ T479] FS: 00005555949b9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.641138][ T475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.649197][ T489] ------------[ cut here ]------------ [ 38.668498][ T486] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.673687][ T473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.680197][ T475] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.686471][ T479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.695442][ T486] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 38.701946][ T479] CR2: 0000000000000000 CR3: 000000011ac2c000 CR4: 00000000003506a0 [ 38.721171][ T475] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 38.729944][ T473] RIP: 0033:0x7f9e3ae5fe59 [ 38.737306][ T489] WARNING: CPU: 0 PID: 489 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.742134][ T473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.751809][ T475] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.771735][ T479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.779334][ T489] Modules linked in: [ 38.779348][ T489] CPU: 0 PID: 489 Comm: syz.6.109 Tainted: G B W syzkaller #0 [ 38.787936][ T479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.791389][ T486] RSP: 0018:ffffc90001597d10 EFLAGS: 00010293 [ 38.801148][ T473] RSP: 002b:00007ffee26d9cd8 EFLAGS: 00000246 [ 38.808165][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.815339][ T479] Call Trace: [ 38.820338][ T486] [ 38.830898][ T473] ORIG_RAX: 00000000000001b4 [ 38.833739][ T475] RBP: 00000000000093f7 R08: 0000000000000001 R09: 0000000000000000 [ 38.836386][ T473] RAX: 0000000000000000 RBX: 00007ffee26d9dc0 RCX: 00007f9e3ae5fe59 [ 38.840702][ T489] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.849168][ T479] [ 38.856779][ T475] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 38.863509][ T473] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.865996][ T486] RAX: ffffffff845dc087 RBX: ffff88811ae1a000 RCX: ffff8881188a3b40 [ 38.882130][ T479] pppol2tp_release+0x150/0x2b0 [ 38.890408][ T475] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 38.896127][ T473] RBP: 0000000000009333 R08: 0000000000000001 R09: 0000000000000000 [ 38.903182][ T489] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 38.911686][ T479] sock_close+0xb8/0x200 [ 38.931100][ T475] [ 38.935858][ T473] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 38.938282][ T475] ---[ end trace 32cd58c628b00f44 ]--- [ 38.946802][ T473] R13: 00007f9e3b0e7fac R14: 00007f9e3b0e7fa8 R15: 00007f9e3b0e7fa0 [ 38.951864][ T486] RDX: 0000000000000000 RSI: 000000001aec2b60 RDI: 000000000c04eb7d [ 38.960668][ T479] ? sock_mmap+0xa0/0xa0 [ 38.972667][ T473] [ 38.975855][ T473] ---[ end trace 32cd58c628b00f45 ]--- [ 38.983508][ T489] RSP: 0018:ffffc90001777d10 EFLAGS: 00010293 [ 38.989658][ T479] __fput+0x22b/0x900 [ 38.993709][ T479] ____fput+0x15/0x20 [ 38.995912][ T489] RAX: ffffffff845dc087 RBX: ffff88811aab3000 RCX: ffff88811c430000 [ 39.005970][ T489] RDX: 0000000000000000 RSI: 000000001b70c800 RDI: 000000000c04eb7d [ 39.013998][ T479] task_work_run+0x127/0x190 [ 39.018945][ T479] exit_to_user_mode_loop+0xd0/0xe0 [ 39.024265][ T479] exit_to_user_mode_prepare+0x87/0xd0 [ 39.030076][ T479] syscall_exit_to_user_mode+0x1a/0x30 [ 39.035800][ T479] do_syscall_64+0x58/0xa0 [ 39.040058][ T491] ------------[ cut here ]------------ [ 39.043874][ T479] ? clear_bhb_loop+0x50/0xa0 [ 39.050541][ T486] RBP: ffffc90001597d30 R08: ffff88811ae1a083 R09: 1ffff110235c3410 [ 39.051287][ T479] ? clear_bhb_loop+0x50/0xa0 [ 39.066101][ T486] R10: dffffc0000000000 R11: ffffed10235c3411 R12: dffffc0000000000 [ 39.068097][ T489] RBP: ffffc90001777d30 R08: ffff88811aab3083 R09: 1ffff11023556610 [ 39.074232][ T491] WARNING: CPU: 0 PID: 491 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.086717][ T479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.093258][ T486] R13: dffffc0000000000 R14: 000000001aec2b60 R15: ffff88811af5c800 [ 39.098746][ T479] RIP: 0033:0x7fd00a6d7e59 [ 39.106953][ T486] FS: 000055555fd81500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.118714][ T489] R10: dffffc0000000000 R11: ffffed1023556611 R12: dffffc0000000000 [ 39.127802][ T479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.141486][ T491] Modules linked in: [ 39.147603][ T489] R13: dffffc0000000000 R14: 000000001b70c800 R15: ffff888112782000 [ 39.155914][ T494] ------------[ cut here ]------------ [ 39.161231][ T479] RSP: 002b:00007ffe47c054a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.165512][ T491] [ 39.173575][ T489] FS: 000055557969a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.176634][ T486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.184957][ T494] WARNING: CPU: 1 PID: 494 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.191910][ T491] CPU: 0 PID: 491 Comm: syz.1.111 Tainted: G B W syzkaller #0 [ 39.201980][ T479] RAX: 0000000000000000 RBX: 00007ffe47c05590 RCX: 00007fd00a6d7e59 [ 39.210543][ T486] CR2: 00007fb3f21c3060 CR3: 000000011b48c000 CR4: 00000000003506b0 [ 39.218082][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.226528][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.232790][ T479] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.243027][ T486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.250851][ T489] CR2: 000055557436d908 CR3: 000000011b4c1000 CR4: 00000000003506a0 [ 39.261726][ T491] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.266897][ T494] Modules linked in: [ 39.273629][ T486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.277239][ T479] RBP: 0000000000009516 R08: 0000000000000001 R09: 0000000000000000 [ 39.285570][ T491] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 39.293182][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.313122][ T486] Call Trace: [ 39.320758][ T479] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 39.324324][ T494] CPU: 0 PID: 494 Comm: syz.0.114 Tainted: G B W syzkaller #0 [ 39.332099][ T479] R13: 00007fd00a95ffac R14: 00007fd00a95ffa8 R15: 00007fd00a95ffa0 [ 39.341022][ T486] [ 39.348869][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.351652][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.362070][ T479] [ 39.370099][ T486] pppol2tp_release+0x150/0x2b0 [ 39.373177][ T489] Call Trace: [ 39.377610][ T491] RSP: 0018:ffffc900023c7d10 EFLAGS: 00010293 [ 39.381009][ T489] [ 39.389927][ T486] sock_close+0xb8/0x200 [ 39.390343][ T479] ---[ end trace 32cd58c628b00f46 ]--- [ 39.399736][ T489] pppol2tp_release+0x150/0x2b0 [ 39.399956][ T491] RAX: ffffffff845dc087 RBX: ffff88811c3e2000 RCX: ffff8881188a2780 [ 39.404724][ T494] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.412682][ T486] ? sock_mmap+0xa0/0xa0 [ 39.419417][ T489] sock_close+0xb8/0x200 [ 39.423500][ T486] __fput+0x22b/0x900 [ 39.431826][ T491] RDX: 0000000000000000 RSI: 000000001c524400 RDI: 000000000c04eb7d [ 39.441470][ T494] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 39.450462][ T486] ____fput+0x15/0x20 [ 39.464594][ T489] ? sock_mmap+0xa0/0xa0 [ 39.469435][ T489] __fput+0x22b/0x900 [ 39.474877][ T489] ____fput+0x15/0x20 [ 39.477417][ T491] RBP: ffffc900023c7d30 R08: ffff88811c3e2083 R09: 1ffff1102387c410 [ 39.479924][ T489] task_work_run+0x127/0x190 [ 39.491103][ T491] R10: dffffc0000000000 R11: ffffed102387c411 R12: dffffc0000000000 [ 39.492544][ T494] RSP: 0018:ffffc900025dfd10 EFLAGS: 00010293 [ 39.499860][ T489] exit_to_user_mode_loop+0xd0/0xe0 [ 39.502507][ T486] task_work_run+0x127/0x190 [ 39.512904][ T494] [ 39.518449][ T489] exit_to_user_mode_prepare+0x87/0xd0 [ 39.524082][ T494] RAX: ffffffff845dc087 RBX: ffff88811c3e5000 RCX: ffff88811b6e62c0 [ 39.532304][ T491] R13: dffffc0000000000 R14: 000000001c524400 R15: ffff88811c4d7400 [ 39.532367][ T489] syscall_exit_to_user_mode+0x1a/0x30 2026/07/07 17:25:08 executed programs: 110 [ 39.543966][ T491] FS: 0000555558e1b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.550790][ T494] RDX: 0000000000000000 RSI: 000000001c509800 RDI: 000000000c04eb7d [ 39.564187][ T489] do_syscall_64+0x58/0xa0 [ 39.568983][ T494] RBP: ffffc900025dfd30 R08: ffff88811c3e5083 R09: 1ffff1102387ca10 [ 39.572274][ T486] exit_to_user_mode_loop+0xd0/0xe0 [ 39.577707][ T489] ? clear_bhb_loop+0x50/0xa0 [ 39.583106][ T486] exit_to_user_mode_prepare+0x87/0xd0 [ 39.587846][ T494] R10: dffffc0000000000 R11: ffffed102387ca11 R12: dffffc0000000000 [ 39.596205][ T491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.607440][ T489] ? clear_bhb_loop+0x50/0xa0 [ 39.612159][ T489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.618793][ T486] syscall_exit_to_user_mode+0x1a/0x30 [ 39.624309][ T486] do_syscall_64+0x58/0xa0 [ 39.628957][ T491] CR2: 0000000000000000 CR3: 000000011dcfa000 CR4: 00000000003506b0 [ 39.629492][ T494] R13: dffffc0000000000 R14: 000000001c509800 R15: ffff88811c4d5800 [ 39.637489][ T486] ? clear_bhb_loop+0x50/0xa0 [ 39.645896][ T489] RIP: 0033:0x7ff76c380e59 [ 39.650248][ T491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.662848][ T486] ? clear_bhb_loop+0x50/0xa0 [ 39.667572][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.687484][ T491] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.690388][ T494] FS: 0000555574352500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.695976][ T491] Call Trace: [ 39.707952][ T486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.713872][ T486] RIP: 0033:0x7f4967647e59 [ 39.718334][ T494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.718351][ T494] CR2: 00007ffe47c03f60 CR3: 000000011c4b7000 CR4: 00000000003506a0 [ 39.725617][ T491] [ 39.736024][ T491] pppol2tp_release+0x150/0x2b0 [ 39.740915][ T491] sock_close+0xb8/0x200 [ 39.745218][ T494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.745723][ T486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.753206][ T494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.753222][ T494] Call Trace: [ 39.753229][ T494] [ 39.773649][ T491] ? sock_mmap+0xa0/0xa0 [ 39.791524][ T489] RSP: 002b:00007ffea14464b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.800271][ T489] RAX: 0000000000000000 RBX: 00007ffea14465a0 RCX: 00007ff76c380e59 [ 39.808415][ T491] __fput+0x22b/0x900 [ 39.812439][ T491] ____fput+0x15/0x20 [ 39.816585][ T494] pppol2tp_release+0x150/0x2b0 [ 39.817086][ T489] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.821468][ T494] sock_close+0xb8/0x200 [ 39.829820][ T491] task_work_run+0x127/0x190 [ 39.833761][ T486] RSP: 002b:00007ffe9adc0fd8 EFLAGS: 00000246 [ 39.838718][ T489] RBP: 00000000000096c0 R08: 0000000000000001 R09: 0000000000000000 [ 39.853010][ T491] exit_to_user_mode_loop+0xd0/0xe0 [ 39.858275][ T494] ? sock_mmap+0xa0/0xa0 [ 39.858566][ T491] exit_to_user_mode_prepare+0x87/0xd0 [ 39.862558][ T494] __fput+0x22b/0x900 [ 39.868433][ T489] R10: 0000001b32720000 R11: 0000000000000246 R12: 0000000000000000 [ 39.874292][ T486] ORIG_RAX: 00000000000001b4 [ 39.882846][ T491] syscall_exit_to_user_mode+0x1a/0x30 [ 39.890364][ T491] do_syscall_64+0x58/0xa0 [ 39.894985][ T491] ? clear_bhb_loop+0x50/0xa0 [ 39.899700][ T491] ? clear_bhb_loop+0x50/0xa0 [ 39.899733][ T494] ____fput+0x15/0x20 [ 39.908584][ T486] RAX: 0000000000000000 RBX: 00007ffe9adc10c0 RCX: 00007f4967647e59 [ 39.908896][ T489] R13: 00007ff76c608fac R14: 00007ff76c608fa8 R15: 00007ff76c608fa0 [ 39.917265][ T494] task_work_run+0x127/0x190 [ 39.929433][ T491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.934650][ T486] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.935786][ T491] RIP: 0033:0x7f9e3ae5fe59 [ 39.946218][ T494] exit_to_user_mode_loop+0xd0/0xe0 [ 39.948425][ T489] [ 39.953089][ T494] exit_to_user_mode_prepare+0x87/0xd0 [ 39.956417][ T491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.974566][ T486] RBP: 000000000000962a R08: 0000000000000001 R09: 0000000000000000 [ 39.989251][ T494] syscall_exit_to_user_mode+0x1a/0x30 [ 39.995159][ T489] ---[ end trace 32cd58c628b00f47 ]--- [ 39.998532][ T494] do_syscall_64+0x58/0xa0 [ 40.021963][ T494] ? clear_bhb_loop+0x50/0xa0 [ 40.033247][ T494] ? clear_bhb_loop+0x50/0xa0 [ 40.038129][ T505] ------------[ cut here ]------------ [ 40.042587][ T486] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 40.047247][ T491] RSP: 002b:00007ffee26d9cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.056113][ T494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.062820][ T505] WARNING: CPU: 0 PID: 505 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.076794][ T491] RAX: 0000000000000000 RBX: 00007ffee26d9dc0 RCX: 00007f9e3ae5fe59 [ 40.084737][ T486] R13: 00007f49678cffac R14: 00007f49678cffa8 R15: 00007f49678cffa0 [ 40.091854][ T505] Modules linked in: [ 40.095758][ T494] RIP: 0033:0x7fb3f1408e59 [ 40.097306][ T491] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.101171][ T494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.109683][ T505] CPU: 0 PID: 505 Comm: syz.6.124 Tainted: G B W syzkaller #0 [ 40.132395][ T486] [ 40.140706][ T491] RBP: 0000000000009849 R08: 0000000000000001 R09: 0000000000000000 [ 40.150246][ T486] ---[ end trace 32cd58c628b00f48 ]--- [ 40.156259][ T491] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 40.164267][ T491] R13: 00007f9e3b0e7fac R14: 00007f9e3b0e7fa8 R15: 00007f9e3b0e7fa0 [ 40.169622][ T494] RSP: 002b:00007ffdb4d2baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.173637][ T508] ------------[ cut here ]------------ [ 40.180955][ T505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.198653][ T491] [ 40.204281][ T494] RAX: 0000000000000000 RBX: 00007ffdb4d2bbe0 RCX: 00007fb3f1408e59 [ 40.212457][ T491] ---[ end trace 32cd58c628b00f49 ]--- [ 40.218933][ T494] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.227030][ T505] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.233439][ T505] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 40.257277][ T508] WARNING: CPU: 0 PID: 508 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.257846][ T494] RBP: 00000000000098be R08: 0000000000000001 R09: 0000000000000000 [ 40.277985][ T512] ------------[ cut here ]------------ [ 40.283561][ T512] WARNING: CPU: 1 PID: 512 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.293725][ T494] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 40.301788][ T505] RSP: 0018:ffffc90001777d10 EFLAGS: 00010293 [ 40.308728][ T512] Modules linked in: [ 40.310507][ T508] Modules linked in: [ 40.312733][ T505] RAX: ffffffff845dc087 RBX: ffff88811d37e000 RCX: ffff88811b6e3b40 [ 40.323896][ T508] CPU: 0 PID: 508 Comm: syz.5.127 Tainted: G B W syzkaller #0 [ 40.325429][ T494] R13: 00007fb3f1690fac R14: 00007fb3f1690fa8 R15: 00007fb3f1690fa0 [ 40.334451][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.342096][ T512] CPU: 1 PID: 512 Comm: syz.4.132 Tainted: G B W syzkaller #0 [ 40.360703][ T505] RDX: 0000000000000000 RSI: 000000000f4c8e00 RDI: 000000000c04eb7d [ 40.368896][ T494] [ 40.371964][ T494] ---[ end trace 32cd58c628b00f4a ]--- [ 40.377482][ T505] RBP: ffffc90001777d30 R08: ffff88811d37e083 R09: 1ffff11023a6fc10 [ 40.379543][ T508] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.389061][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.392486][ T508] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 40.409779][ T505] R10: dffffc0000000000 R11: ffffed1023a6fc11 R12: dffffc0000000000 [ 40.433182][ T512] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.442398][ T517] ------------[ cut here ]------------ [ 40.449702][ T517] WARNING: CPU: 1 PID: 517 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.459854][ T512] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 40.460620][ T518] ------------[ cut here ]------------ [ 40.479567][ T505] R13: dffffc0000000000 R14: 000000000f4c8e00 R15: ffff88811d05a000 [ 40.493770][ T517] Modules linked in: [ 40.496577][ T508] RSP: 0018:ffffc90000ab7d10 EFLAGS: 00010293 [ 40.498110][ T517] CPU: 1 PID: 517 Comm: syz.1.136 Tainted: G B W syzkaller #0 [ 40.503885][ T508] RAX: ffffffff845dc087 RBX: ffff88811d378000 RCX: ffff88811a634f00 [ 40.513292][ T512] RSP: 0018:ffffc90001597d10 EFLAGS: 00010293 [ 40.520707][ T505] FS: 000055557969a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.521419][ T508] RDX: 0000000000000000 RSI: 000000001c5ae570 RDI: 000000000c04eb7d [ 40.527216][ T505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.536370][ T508] RBP: ffffc90000ab7d30 R08: ffff88811d378083 R09: 1ffff11023a6f010 [ 40.544152][ T512] [ 40.550801][ T518] WARNING: CPU: 0 PID: 518 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.559180][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.561070][ T508] R10: dffffc0000000000 R11: ffffed1023a6f011 R12: dffffc0000000000 [ 40.571161][ T505] CR2: 00007fb3f21c3060 CR3: 000000011d031000 CR4: 00000000003506a0 [ 40.581122][ T518] Modules linked in: [ 40.589136][ T517] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.597178][ T518] [ 40.601274][ T512] RAX: ffffffff845dc087 RBX: ffff88811c500000 RCX: ffff88811a6313c0 [ 40.607447][ T508] R13: dffffc0000000000 R14: 000000001c5ae570 R15: ffff88811d065c00 [ 40.609769][ T512] RDX: 0000000000000000 RSI: 00000000153a5500 RDI: 000000000c04eb7d [ 40.617758][ T518] CPU: 0 PID: 518 Comm: syz.0.137 Tainted: G B W syzkaller #0 [ 40.625923][ T517] Code: 5d c3 e8 8c ec 0b fd be 02 00 00 00 eb 0a e8 80 ec 0b fd be 01 00 00 00 4c 89 f7 e8 b3 5c f2 fd e9 0f ff ff ff e8 69 ec 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 ec 0b fd 4c 89 f7 be 03 [ 40.633874][ T508] FS: 00005555949b9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000