Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. 2026/08/02 18:52:32 parsed 1 programs 2026/08/02 18:52:32 serving rpc on tcp://35813 [ 23.995206][ T24] audit: type=1400 audit(1785696752.820:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.019439][ T24] audit: type=1400 audit(1785696752.820:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.039225][ T24] audit: type=1400 audit(1785696752.820:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.627192][ T24] audit: type=1400 audit(1785696753.450:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.628218][ T293] cgroup: Unknown subsys name 'net' [ 24.649962][ T24] audit: type=1400 audit(1785696753.450:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.677862][ T24] audit: type=1400 audit(1785696753.480:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.678094][ T293] cgroup: Unknown subsys name 'devices' [ 24.823495][ T293] cgroup: Unknown subsys name 'hugetlb' [ 24.829537][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.002805][ T24] audit: type=1400 audit(1785696753.830:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.026032][ T24] audit: type=1400 audit(1785696753.830:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.031402][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.046720][ T24] audit: type=1400 audit(1785696753.830:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.075439][ T24] audit: type=1400 audit(1785696753.830:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.095749][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.579194][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 25.626277][ T305] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.919326][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.932035][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.939885][ T331] device bridge_slave_0 entered promiscuous mode [ 25.948258][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.955417][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.962826][ T331] device bridge_slave_1 entered promiscuous mode [ 26.052103][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.059390][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.066741][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.073890][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.132316][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.141193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.150154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.157803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.172458][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.180720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.195783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.205009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.213585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.221097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.229666][ T331] device veth0_vlan entered promiscuous mode [ 26.246947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.257839][ T331] device veth1_macvtap entered promiscuous mode [ 26.268688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/08/02 18:52:35 executed programs: 0 [ 26.278671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.449058][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.456188][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.463840][ T371] device bridge_slave_0 entered promiscuous mode [ 26.484626][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.491660][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.499092][ T371] device bridge_slave_1 entered promiscuous mode [ 26.513562][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.520758][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.528287][ T373] device bridge_slave_0 entered promiscuous mode [ 26.535322][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.542405][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.549701][ T373] device bridge_slave_1 entered promiscuous mode [ 26.586430][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.593687][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.601255][ T369] device bridge_slave_0 entered promiscuous mode [ 26.610790][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.618075][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.625869][ T369] device bridge_slave_1 entered promiscuous mode [ 26.647444][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.654764][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.662352][ T376] device bridge_slave_0 entered promiscuous mode [ 26.669336][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.676415][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.683927][ T376] device bridge_slave_1 entered promiscuous mode [ 26.758954][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.766191][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.773629][ T375] device bridge_slave_0 entered promiscuous mode [ 26.780608][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.787993][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.795467][ T375] device bridge_slave_1 entered promiscuous mode [ 26.971325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.979237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.987051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.995539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.024196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.032850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.041300][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.048357][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.056593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.065402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.073903][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.080934][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.088333][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.095973][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.103413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.111805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.120750][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.127785][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.135470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.143736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.151830][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.158925][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.166412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.174456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.182406][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.190476][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.198467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.205955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.213537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.221932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.234336][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.241436][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.249131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.256560][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.264006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.272331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.280552][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.287626][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.295086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.303575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.311825][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.319703][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.327293][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.336059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.344415][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.351450][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.358926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.367377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.375665][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.382735][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.390143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.398003][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.405774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.413593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.421270][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.454518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.464303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.472871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.481106][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.488156][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.496576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.504823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.512772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.520701][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.528667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.536858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.544894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.552969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.561001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.569273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.577243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.591534][ T369] device veth0_vlan entered promiscuous mode [ 27.599827][ T371] device veth0_vlan entered promiscuous mode [ 27.613572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.622603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.630860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.638570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.646147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.654288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.661787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.682264][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.698642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.706992][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.714678][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.722699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.730970][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.744535][ T371] device veth1_macvtap entered promiscuous mode [ 27.754681][ T373] device veth0_vlan entered promiscuous mode [ 27.761043][ T369] device veth1_macvtap entered promiscuous mode [ 27.771283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.779444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.788930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.796843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.804870][ T376] device veth0_vlan entered promiscuous mode [ 27.822613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.831114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.839634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.852504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.860914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.869665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.879305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.889455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.907750][ T375] device veth0_vlan entered promiscuous mode [ 27.921514][ T376] device veth1_macvtap entered promiscuous mode [ 27.928760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.937637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.946751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.954914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.962990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.974733][ T373] device veth1_macvtap entered promiscuous mode [ 27.987101][ T375] device veth1_macvtap entered promiscuous mode [ 28.005225][ T394] ================================================================== [ 28.013388][ T394] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 28.020047][ T394] Write of size 8 at addr ffff88811256c550 by task syz.0.17/394 [ 28.027651][ T394] [ 28.029980][ T394] CPU: 0 PID: 394 Comm: syz.0.17 Not tainted syzkaller #0 [ 28.037093][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.047131][ T394] Call Trace: [ 28.050407][ T394] __dump_stack+0x21/0x24 [ 28.054915][ T394] dump_stack_lvl+0x1a7/0x208 [ 28.059583][ T394] ? show_regs_print_info+0x18/0x18 [ 28.064805][ T394] ? thaw_kernel_threads+0x220/0x220 [ 28.070090][ T394] print_address_description+0x7f/0x2c0 [ 28.075739][ T394] ? mutex_lock+0x85/0xf0 [ 28.080060][ T394] kasan_report+0x100/0x140 [ 28.084553][ T394] ? mutex_lock+0x85/0xf0 [ 28.088872][ T394] kasan_check_range+0x249/0x2a0 [ 28.093793][ T394] __kasan_check_write+0x14/0x20 [ 28.098766][ T394] mutex_lock+0x85/0xf0 [ 28.102923][ T394] ? mutex_trylock+0xb0/0xb0 [ 28.107501][ T394] ? l2tp_session_put+0xb2/0x1a0 [ 28.112447][ T394] ? l2tp_session_delete+0x3a9/0x4a0 [ 28.117721][ T394] pppol2tp_release+0x178/0x2b0 [ 28.122576][ T394] sock_close+0xb8/0x200 [ 28.126796][ T394] ? sock_mmap+0xa0/0xa0 [ 28.131022][ T394] __fput+0x2dc/0x730 [ 28.134987][ T394] ____fput+0x15/0x20 [ 28.138971][ T394] task_work_run+0x127/0x190 [ 28.143631][ T394] do_exit+0xa7c/0x24e0 [ 28.147769][ T394] ? __kasan_check_write+0x14/0x20 [ 28.152862][ T394] ? switch_fpu_return+0x19c/0x330 [ 28.157966][ T394] ? put_task_struct+0x90/0x90 [ 28.162866][ T394] ? fpu__clear_all+0x20/0x20 [ 28.167544][ T394] ? __kasan_check_read+0x11/0x20 [ 28.172557][ T394] __x64_sys_exit+0x40/0x40 [ 28.177044][ T394] do_syscall_64+0x31/0x40 [ 28.181443][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.187316][ T394] RIP: 0033:0x7fc5e4d45019 [ 28.191713][ T394] Code: Unable to access opcode bytes at RIP 0x7fc5e4d44fef. [ 28.199108][ T394] RSP: 002b:00007fc5e4ba5ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 28.207509][ T394] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc5e4d45019 [ 28.215500][ T394] RDX: 00007fc5e4ba69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.223472][ T394] RBP: 00007fc5e4ddc00c R08: 0000000000000000 R09: 0000000000000058 [ 28.231452][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.239409][ T394] R13: 00007fc5e4fcd038 R14: 00007fc5e4fccfa0 R15: 00007ffe3b38ef78 [ 28.247479][ T394] [ 28.249791][ T394] Allocated by task 393: [ 28.254021][ T394] __kasan_kmalloc+0xd4/0x100 [ 28.258679][ T394] __kmalloc+0x19f/0x330 [ 28.262930][ T394] l2tp_session_create+0x39/0xb60 [ 28.267950][ T394] pppol2tp_connect+0xbf5/0x1640 [ 28.272878][ T394] __sys_connect+0x3ce/0x450 [ 28.277463][ T394] __x64_sys_connect+0x7a/0x90 [ 28.282215][ T394] do_syscall_64+0x31/0x40 [ 28.286611][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.292575][ T394] [ 28.294880][ T394] Freed by task 394: [ 28.298756][ T394] kasan_set_track+0x4a/0x70 [ 28.303324][ T394] kasan_set_free_info+0x23/0x40 [ 28.308246][ T394] ____kasan_slab_free+0x125/0x160 [ 28.313342][ T394] __kasan_slab_free+0x11/0x20 [ 28.318083][ T394] slab_free_freelist_hook+0xc5/0x190 [ 28.323434][ T394] kfree+0xc0/0x270 [ 28.327258][ T394] l2tp_session_put+0xb2/0x1a0 [ 28.332022][ T394] l2tp_session_delete+0x3a9/0x4a0 [ 28.337122][ T394] pppol2tp_release+0x169/0x2b0 [ 28.341952][ T394] sock_close+0xb8/0x200 [ 28.346173][ T394] __fput+0x2dc/0x730 [ 28.350136][ T394] ____fput+0x15/0x20 [ 28.354122][ T394] task_work_run+0x127/0x190 [ 28.358696][ T394] do_exit+0xa7c/0x24e0 [ 28.362834][ T394] __ia32_sys_exit+0x0/0x40 [ 28.367318][ T394] do_syscall_64+0x31/0x40 [ 28.372009][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.377902][ T394] [ 28.380217][ T394] The buggy address belongs to the object at ffff88811256c400 [ 28.380217][ T394] which belongs to the cache kmalloc-512 of size 512 [ 28.394367][ T394] The buggy address is located 336 bytes inside of [ 28.394367][ T394] 512-byte region [ffff88811256c400, ffff88811256c600) [ 28.407616][ T394] The buggy address belongs to the page: [ 28.413257][ T394] page:ffffea0004495b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11256c [ 28.423472][ T394] head:ffffea0004495b00 order:2 compound_mapcount:0 compound_pincount:0 [ 28.431869][ T394] flags: 0x4000000000010200(slab|head) [ 28.437313][ T394] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.445879][ T394] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 28.454475][ T394] page dumped because: kasan: bad access detected [ 28.460866][ T394] page_owner tracks the page as allocated [ 28.466621][ T394] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 371, ts 27822626847, free_ts 27769195036 [ 28.487004][ T394] prep_new_page+0x176/0x190 [ 28.491574][ T394] get_page_from_freelist+0x225f/0x23f0 [ 28.497098][ T394] __alloc_pages_nodemask+0x29a/0x640 [ 28.502467][ T394] new_slab+0x84/0x3f0 [ 28.506516][ T394] ___slab_alloc+0x2f8/0x4c0 [ 28.511100][ T394] __slab_alloc+0x63/0xa0 [ 28.515423][ T394] __kmalloc_track_caller+0x1e4/0x310 [ 28.520784][ T394] __alloc_skb+0xdc/0x520 [ 28.525098][ T394] netlink_sendmsg+0x693/0xb70 [ 28.529839][ T394] __sys_sendto+0x467/0x620 [ 28.534526][ T394] __x64_sys_sendto+0xe5/0x100 [ 28.539273][ T394] do_syscall_64+0x31/0x40 [ 28.543779][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.549740][ T394] page last free stack trace: [ 28.554432][ T394] __free_pages_ok+0x80b/0x830 [ 28.559185][ T394] __free_pages+0xd8/0x390 [ 28.563585][ T394] __free_slab+0xcf/0x190 [ 28.567897][ T394] unfreeze_partials+0x150/0x180 [ 28.572820][ T394] put_cpu_partial+0xc1/0x180 [ 28.577565][ T394] __slab_free+0x2c9/0x3a0 [ 28.582056][ T394] ___cache_free+0x10e/0x130 [ 28.586630][ T394] qlink_free+0x50/0x90 [ 28.590783][ T394] qlist_free_all+0x5f/0xb0 [ 28.595361][ T394] kasan_quarantine_reduce+0x14a/0x160 [ 28.600814][ T394] __kasan_slab_alloc+0x2f/0xe0 [ 28.605648][ T394] slab_post_alloc_hook+0x5d/0x2f0 [ 28.610841][ T394] kmem_cache_alloc+0x15a/0x2d0 [ 28.615713][ T394] sock_alloc_inode+0x1b/0xb0 [ 28.620371][ T394] new_inode_pseudo+0x62/0x210 [ 28.625115][ T394] __sock_create+0x12c/0x770 [ 28.629678][ T394] [ 28.632008][ T394] Memory state around the buggy address: [ 28.637664][ T394] ffff88811256c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.645717][ T394] ffff88811256c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.653762][ T394] >ffff88811256c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.661816][ T394] ^ [ 28.668475][ T394] ffff88811256c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.676781][ T394] ffff88811256c600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.684845][ T394] ================================================================== [ 28.692888][ T394] Disabling lock debugging due to kernel taint [ 28.703809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.722897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.731588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.739565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.749073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.757535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.769283][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.778539][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.799210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.809642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.836381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.846329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.857177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.866557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.878389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.887089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.897038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.910346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.946437][ T435] ------------[ cut here ]------------ [ 28.961377][ T435] WARNING: CPU: 0 PID: 435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.034800][ T435] Modules linked in: [ 29.054929][ T435] CPU: 0 PID: 435 Comm: syz.1.18 Tainted: G B syzkaller #0 [ 29.120711][ T477] ------------[ cut here ]------------ [ 29.131465][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.150363][ T486] ------------[ cut here ]------------ [ 29.173090][ T477] WARNING: CPU: 0 PID: 477 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.184687][ T435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.204688][ T486] WARNING: CPU: 1 PID: 486 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.217630][ T509] ------------[ cut here ]------------ [ 29.226024][ T477] Modules linked in: [ 29.231136][ T477] CPU: 1 PID: 477 Comm: syz.2.19 Tainted: G B syzkaller #0 [ 29.241138][ T486] Modules linked in: [ 29.241165][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.251776][ T509] WARNING: CPU: 0 PID: 509 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.257088][ T477] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.273535][ T477] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.274912][ T486] CPU: 0 PID: 486 Comm: syz.6.20 Tainted: G B syzkaller #0 [ 29.296967][ T477] RSP: 0018:ffffc90001047c40 EFLAGS: 00010293 [ 29.310089][ T435] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.327919][ T477] [ 29.343370][ T435] RSP: 0018:ffffc90000f47c40 EFLAGS: 00010293 [ 29.364133][ T587] ------------[ cut here ]------------ [ 29.371241][ T435] RAX: ffffffff842ec3a7 RBX: ffff88811218f800 RCX: ffff888113ac62c0 [ 29.385979][ T435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 29.388757][ T587] WARNING: CPU: 0 PID: 587 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.394462][ T435] RBP: ffffc90000f47c60 R08: ffff88811218f883 R09: 1ffff11022431f10 [ 29.394469][ T435] R10: dffffc0000000000 R11: ffffed1022431f11 R12: dffffc0000000000 [ 29.394475][ T435] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811376e800 [ 29.394482][ T435] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.394489][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.394495][ T435] CR2: 00007fc5e4d00130 CR3: 0000000128ef8000 CR4: 00000000003506a0 [ 29.394503][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.394515][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.394518][ T435] Call Trace: [ 29.394529][ T435] pppol2tp_release+0x150/0x2b0 [ 29.394538][ T435] sock_close+0xb8/0x200 [ 29.394545][ T435] ? sock_mmap+0xa0/0xa0 [ 29.394554][ T435] __fput+0x2dc/0x730 [ 29.394570][ T435] ____fput+0x15/0x20 [ 29.419430][ T477] RAX: ffffffff842ec3a7 RBX: ffff888114db0000 RCX: ffff8881154da780 [ 29.423384][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.449007][ T603] ------------[ cut here ]------------ [ 29.459988][ T486] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.494165][ T607] ------------[ cut here ]------------ [ 29.500992][ T486] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.531653][ T477] RDX: 0000000000000000 RSI: 00000000154b0000 RDI: 000000000c04eb7d [ 29.568202][ T486] RSP: 0018:ffffc900010cfc40 EFLAGS: 00010293 [ 29.575791][ T486] RAX: ffffffff842ec3a7 RBX: ffff8881155a2000 RCX: ffff888127f1bb40 [ 29.578528][ T587] Modules linked in: [ 29.585520][ T486] RDX: 0000000000000000 RSI: 00000000154b0a00 RDI: 000000000c04eb7d [ 29.597885][ T486] RBP: ffffc900010cfc60 R08: ffff8881155a2083 R09: 1ffff11022ab4410 [ 29.606979][ T486] R10: dffffc0000000000 R11: ffffed1022ab4411 R12: dffffc0000000000 [ 29.608520][ T477] RBP: ffffc90001047c60 R08: ffff888114db0083 R09: 1ffff110229b6010 [ 29.629102][ T486] R13: dffffc0000000000 R14: 00000000154b0a00 R15: ffff888114e79800 [ 29.630641][ T587] [ 29.640452][ T509] Modules linked in: [ 29.662043][ T435] task_work_run+0x127/0x190 [ 29.666781][ T435] do_exit+0xa7c/0x24e0 [ 29.667720][ T509] CPU: 0 PID: 509 Comm: syz.1.47 Tainted: G B syzkaller #0 [ 29.676550][ T603] WARNING: CPU: 1 PID: 603 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.693702][ T477] R10: dffffc0000000000 R11: ffffed10229b6011 R12: dffffc0000000000 [ 29.695245][ T587] CPU: 0 PID: 587 Comm: syz.4.80 Tainted: G B syzkaller #0 [ 29.701709][ T477] R13: dffffc0000000000 R14: 00000000154b0000 R15: ffff888114e04400 [ 29.701716][ T477] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.701723][ T477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.701728][ T477] CR2: 00007fc5e4ba5ff8 CR3: 000000012c313000 CR4: 00000000003506a0 [ 29.701741][ T477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.758890][ T435] ? __kasan_check_write+0x14/0x20 [ 29.771207][ T660] ------------[ cut here ]------------ [ 29.775589][ T607] WARNING: CPU: 1 PID: 607 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.787173][ T486] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.791272][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.809130][ T486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.822952][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.833630][ T603] Modules linked in: [ 29.837637][ T603] CPU: 1 PID: 603 Comm: syz.6.78 Tainted: G B syzkaller #0 [ 29.847842][ T435] ? switch_fpu_return+0x19c/0x330 [ 29.848484][ T587] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.857744][ T435] ? put_task_struct+0x90/0x90 [ 29.864858][ T660] WARNING: CPU: 1 PID: 660 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.881804][ T607] Modules linked in: [ 29.882124][ T587] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.887363][ T660] Modules linked in: [ 29.907524][ T509] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.918545][ T486] CR2: 00007fc5e4fccfac CR3: 0000000117837000 CR4: 00000000003506a0 [ 29.926782][ T587] RSP: 0018:ffffc9000197fc40 EFLAGS: 00010293 [ 29.929208][ T713] ------------[ cut here ]------------ [ 29.933242][ T587] RAX: ffffffff842ec3a7 RBX: ffff888115a3e800 RCX: ffff8881163062c0 [ 29.938418][ T713] WARNING: CPU: 1 PID: 713 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.958491][ T660] [ 29.959347][ T587] RDX: 0000000000000000 RSI: 000000001622c500 RDI: 000000000c04eb7d [ 29.961009][ T660] CPU: 1 PID: 660 Comm: syz.2.89 Tainted: G B syzkaller #0 [ 29.977489][ T587] RBP: ffffc9000197fc60 R08: ffff888115a3e883 R09: 1ffff11022b47d10 [ 29.978247][ T486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.986007][ T587] R10: dffffc0000000000 R11: ffffed1022b47d11 R12: dffffc0000000000 [ 29.994115][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.012828][ T587] R13: dffffc0000000000 R14: 000000001622c500 R15: ffff888116569c00 [ 30.012846][ T587] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.020816][ T607] CPU: 1 PID: 607 Comm: syz.1.79 Tainted: G B syzkaller #0 [ 30.030111][ T713] Modules linked in: [ 30.039851][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.054059][ T587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.055765][ T477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.062573][ T477] Call Trace: [ 30.073862][ T435] ? fpu__clear_all+0x20/0x20 [ 30.075130][ T587] CR2: 00007ffdb6824f90 CR3: 000000012b91d000 CR4: 00000000003506b0 [ 30.078579][ T435] ? __kasan_check_read+0x11/0x20 [ 30.078596][ T435] __x64_sys_exit+0x40/0x40 [ 30.086737][ T587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.091613][ T486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.104780][ T713] [ 30.112842][ T660] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.121004][ T660] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.121020][ T587] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.140874][ T435] do_syscall_64+0x31/0x40 [ 30.148941][ T603] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.153349][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.170638][ T477] pppol2tp_release+0x150/0x2b0 [ 30.175697][ T477] sock_close+0xb8/0x200 [ 30.179938][ T477] ? sock_mmap+0xa0/0xa0 [ 30.184270][ T509] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.184277][ T509] RSP: 0018:ffffc90000f97c40 EFLAGS: 00010293 [ 30.204421][ T486] Call Trace: [ 30.204437][ T486] pppol2tp_release+0x150/0x2b0 [ 30.204448][ T486] sock_close+0xb8/0x200 [ 30.204456][ T486] ? sock_mmap+0xa0/0xa0 [ 30.204466][ T486] __fput+0x2dc/0x730 [ 30.204476][ T486] ____fput+0x15/0x20 [ 30.204484][ T486] task_work_run+0x127/0x190 [ 30.204498][ T486] do_exit+0xa7c/0x24e0 [ 30.211727][ T587] Call Trace: [ 30.214441][ T486] ? __kasan_check_write+0x14/0x20 [ 30.219857][ T587] pppol2tp_release+0x150/0x2b0 [ 30.235237][ T435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.235245][ T435] RIP: 0033:0x7f52603bd019 [ 30.235250][ T435] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 30.235255][ T435] RSP: 002b:00007f526021def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.235273][ T435] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 30.244204][ T603] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.244210][ T603] RSP: 0018:ffffc900019efc40 EFLAGS: 00010293 [ 30.244222][ T603] RAX: ffffffff842ec3a7 RBX: ffff888117250800 RCX: ffff8881174e4f00 [ 30.244228][ T603] RDX: 0000000000000000 RSI: 0000000017014f00 RDI: 000000000c04eb7d [ 30.244243][ T603] RBP: ffffc900019efc60 R08: ffff888117250883 R09: 1ffff11022e4a110 [ 30.247797][ T660] RSP: 0018:ffffc9000186fc40 EFLAGS: 00010293 [ 30.257508][ T587] sock_close+0xb8/0x200 [ 30.275306][ T713] CPU: 1 PID: 713 Comm: syz.1.98 Tainted: G B syzkaller #0 [ 30.275312][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.275327][ T713] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.275337][ T713] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.275343][ T713] RSP: 0018:ffffc90001d3fc40 EFLAGS: 00010293 [ 30.275354][ T713] RAX: ffffffff842ec3a7 RBX: ffff88811706b800 RCX: ffff888118b60000 [ 30.275360][ T713] RDX: 0000000000000000 RSI: 0000000015f54400 RDI: 000000000c04eb7d [ 30.275367][ T713] RBP: ffffc90001d3fc60 R08: ffff88811706b883 R09: 1ffff11022e0d710 [ 30.275374][ T713] R10: dffffc0000000000 R11: ffffed1022e0d711 R12: dffffc0000000000 [ 30.275381][ T713] R13: dffffc0000000000 R14: 0000000015f54400 R15: ffff88811638f400 [ 30.275390][ T713] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.275397][ T713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.275402][ T713] CR2: 00007ffd70239c70 CR3: 000000000640f000 CR4: 00000000003506a0 [ 30.275416][ T713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.292247][ T603] R10: dffffc0000000000 R11: ffffed1022e4a111 R12: dffffc0000000000 [ 30.313440][ T486] ? switch_fpu_return+0x19c/0x330 [ 30.319580][ T509] RAX: ffffffff842ec3a7 RBX: ffff88812bfeb800 RCX: ffff888115a93b40 [ 30.327790][ T477] __fput+0x2dc/0x730 [ 30.336139][ T587] ? sock_mmap+0xa0/0xa0 [ 30.349998][ T660] [ 30.355453][ T587] __fput+0x2dc/0x730 [ 30.363477][ T477] ____fput+0x15/0x20 [ 30.399680][ T587] ____fput+0x15/0x20 [ 30.399700][ T587] task_work_run+0x127/0x190 [ 30.405937][ T486] ? put_task_struct+0x90/0x90 [ 30.414892][ T603] R13: dffffc0000000000 R14: 0000000017014f00 R15: ffff88811656a800 [ 30.422470][ T435] RDX: 00007f526021e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.430194][ T587] do_exit+0xa7c/0x24e0 [ 30.438176][ T509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 30.455085][ T607] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.455094][ T607] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.455101][ T607] RSP: 0018:ffffc900019ffc40 EFLAGS: 00010293 [ 30.455110][ T607] RAX: ffffffff842ec3a7 RBX: ffff888117478800 RCX: ffff88811731e2c0 [ 30.455116][ T607] RDX: 0000000000000000 RSI: 0000000016299f80 RDI: 000000000c04eb7d [ 30.455122][ T607] RBP: ffffc900019ffc60 R08: ffff888117478883 R09: 1ffff11022e8f110 [ 30.455129][ T607] R10: dffffc0000000000 R11: ffffed1022e8f111 R12: dffffc0000000000 [ 30.455134][ T607] R13: dffffc0000000000 R14: 0000000016299f80 R15: ffff88811656b800 [ 30.455141][ T607] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.455148][ T607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.455153][ T607] CR2: 00007ffdb6824f90 CR3: 000000012b91d000 CR4: 00000000003506b0 [ 30.455161][ T607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.455166][ T607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.455168][ T607] Call Trace: [ 30.455179][ T607] pppol2tp_release+0x150/0x2b0 [ 30.455197][ T607] sock_close+0xb8/0x200 [ 30.461969][ T660] RAX: ffffffff842ec3a7 RBX: ffff888117fae800 RCX: ffff8881181acf00 [ 30.470206][ T587] ? __kasan_check_write+0x14/0x20 [ 30.478408][ T660] RDX: 0000000000000000 RSI: 00000000156ea800 RDI: 000000000c04eb7d [ 30.488497][ T603] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.492812][ T435] RBP: 00007f526045400c R08: 0000000000000000 R09: 0000000000000058 [ 30.504700][ T603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.504717][ T603] CR2: 00007ffdb6824f90 CR3: 000000010d53c000 CR4: 00000000003506b0 [ 30.509110][ T486] ? fpu__clear_all+0x20/0x20 [ 30.523489][ T587] ? switch_fpu_return+0x19c/0x330 [ 30.528194][ T660] RBP: ffffc9000186fc60 R08: ffff888117fae883 R09: 1ffff11022ff5d10 [ 30.533293][ T607] ? sock_mmap+0xa0/0xa0 [ 30.541188][ T509] RBP: ffffc90000f97c60 R08: ffff88812bfeb883 R09: 1ffff110257fd710 [ 30.549205][ T587] ? put_task_struct+0x90/0x90 [ 30.553327][ T660] R10: dffffc0000000000 R11: ffffed1022ff5d11 R12: dffffc0000000000 [ 30.561253][ T603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.567632][ T477] task_work_run+0x127/0x190 [ 30.587610][ T587] ? fpu__clear_all+0x20/0x20 [ 30.595093][ T435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.603359][ T587] ? __kasan_check_read+0x11/0x20 [ 30.610818][ T713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.619062][ T587] __x64_sys_exit+0x40/0x40 [ 30.626886][ T486] ? __kasan_check_read+0x11/0x20 [ 30.634994][ T603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.644074][ T660] R13: dffffc0000000000 R14: 00000000156ea800 R15: ffff888112542c00 [ 30.650713][ T587] do_syscall_64+0x31/0x40 [ 30.658684][ T509] R10: dffffc0000000000 R11: ffffed10257fd711 R12: dffffc0000000000 [ 30.666912][ T603] Call Trace: [ 30.683572][ T660] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.683579][ T660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.683585][ T660] CR2: 00007ffd70239c70 CR3: 000000012b91d000 CR4: 00000000003506a0 [ 30.683593][ T660] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.683606][ T660] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.688469][ T607] __fput+0x2dc/0x730 [ 30.709350][ T435] R13: 00007f5260645038 R14: 00007f5260644fa0 R15: 00007fffd3b71e58 [ 30.709360][ T435] ---[ end trace 675d796f16e540a8 ]--- [ 30.709513][ T477] do_exit+0xa7c/0x24e0 [ 30.719675][ T587] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.727082][ T713] Call Trace: [ 30.738499][ T587] RIP: 0033:0x7f5a4c922019 [ 30.741895][ T509] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811571f800 [ 30.751574][ T587] Code: Unable to access opcode bytes at RIP 0x7f5a4c921fef. [ 30.760042][ T486] __x64_sys_exit+0x40/0x40 [ 30.760053][ T486] do_syscall_64+0x31/0x40 [ 30.760063][ T486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.760072][ T486] RIP: 0033:0x7f5e7320c019 [ 30.760093][ T486] Code: Unable to access opcode bytes at RIP 0x7f5e7320bfef. [ 30.760100][ T486] RSP: 002b:00007f5e7306cef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.760112][ T486] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e7320c019 [ 30.760118][ T486] RDX: 00007f5e7306d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.760124][ T486] RBP: 00007f5e732a300c R08: 0000000000000000 R09: 0000000000000058 [ 30.760129][ T486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.760136][ T486] R13: 00007f5e73494038 R14: 00007f5e73493fa0 R15: 00007fff24fe9fe8 [ 30.760144][ T486] ---[ end trace 675d796f16e540a9 ]--- [ 30.765077][ T660] Call Trace: [ 30.773884][ T603] pppol2tp_release+0x150/0x2b0 [ 30.786701][ T477] ? __kasan_check_write+0x14/0x20 [ 30.786712][ T477] ? switch_fpu_return+0x19c/0x330 [ 30.786722][ T477] ? put_task_struct+0x90/0x90 [ 30.786730][ T477] ? fpu__clear_all+0x20/0x20 [ 30.786739][ T477] ? __kasan_check_read+0x11/0x20 [ 30.786748][ T477] __x64_sys_exit+0x40/0x40 [ 30.786758][ T477] do_syscall_64+0x31/0x40 [ 30.786768][ T477] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.786776][ T477] RIP: 0033:0x7f0a08173019 [ 30.786782][ T477] Code: Unable to access opcode bytes at RIP 0x7f0a08172fef. [ 30.786787][ T477] RSP: 002b:00007f0a07fd3ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.786807][ T477] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0a08173019 [ 30.795178][ T587] RSP: 002b:00007f5a4c782ef8 EFLAGS: 00000246 [ 30.800133][ T660] pppol2tp_release+0x150/0x2b0 [ 30.805088][ T587] ORIG_RAX: 000000000000003c [ 30.826363][ T713] pppol2tp_release+0x150/0x2b0 [ 30.826374][ T713] sock_close+0xb8/0x200 [ 30.826383][ T713] ? sock_mmap+0xa0/0xa0 [ 30.826392][ T713] __fput+0x2dc/0x730 [ 30.826408][ T713] ____fput+0x15/0x20 [ 30.831086][ T587] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5a4c922019 [ 30.837322][ T477] RDX: 00007f0a07fd49c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.844995][ T587] RDX: 00007f5a4c7839c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.864929][ T713] task_work_run+0x127/0x190 [ 30.864940][ T713] do_exit+0xa7c/0x24e0 [ 30.864952][ T713] ? __kasan_check_write+0x14/0x20 [ 30.864963][ T713] ? switch_fpu_return+0x19c/0x330 [ 30.864972][ T713] ? put_task_struct+0x90/0x90 [ 30.864981][ T713] ? fpu__clear_all+0x20/0x20 [ 30.864991][ T713] ? __kasan_check_read+0x11/0x20 [ 30.865001][ T713] __x64_sys_exit+0x40/0x40 [ 30.865009][ T713] do_syscall_64+0x31/0x40 [ 30.865036][ T713] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.868662][ T603] sock_close+0xb8/0x200 [ 30.884288][ T660] sock_close+0xb8/0x200 [ 30.884297][ T660] ? sock_mmap+0xa0/0xa0 [ 30.884310][ T660] __fput+0x2dc/0x730 [ 30.884317][ T660] ____fput+0x15/0x20 [ 30.884326][ T660] task_work_run+0x127/0x190 [ 30.884336][ T660] do_exit+0xa7c/0x24e0 [ 30.884347][ T660] ? __kasan_check_write+0x14/0x20 [ 30.884358][ T660] ? switch_fpu_return+0x19c/0x330 [ 30.884368][ T660] ? put_task_struct+0x90/0x90 [ 30.884377][ T660] ? fpu__clear_all+0x20/0x20 [ 30.884387][ T660] ? __kasan_check_read+0x11/0x20 [ 30.884397][ T660] __x64_sys_exit+0x40/0x40 [ 30.884406][ T660] do_syscall_64+0x31/0x40 [ 30.884414][ T660] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.884430][ T660] RIP: 0033:0x7f0a08173019 [ 30.892722][ T587] RBP: 00007f5a4c9b900c R08: 0000000000000000 R09: 0000000000000058 [ 30.912685][ T509] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.912692][ T509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.912698][ T509] CR2: 00007ffd70239c70 CR3: 000000000640f000 CR4: 00000000003506a0 [ 30.912707][ T509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.912712][ T509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.912715][ T509] Call Trace: [ 30.912730][ T509] pppol2tp_release+0x150/0x2b0 [ 30.912739][ T509] sock_close+0xb8/0x200 [ 30.912747][ T509] ? sock_mmap+0xa0/0xa0 [ 30.912757][ T509] __fput+0x2dc/0x730 [ 30.912766][ T509] ____fput+0x15/0x20 [ 30.912799][ T509] task_work_run+0x127/0x190 [ 30.912808][ T509] do_exit+0xa7c/0x24e0 [ 30.912819][ T509] ? __kasan_check_write+0x14/0x20 [ 30.912829][ T509] ? switch_fpu_return+0x19c/0x330 [ 30.912837][ T509] ? put_task_struct+0x90/0x90 [ 30.912845][ T509] ? fpu__clear_all+0x20/0x20 [ 30.912854][ T509] ? __kasan_check_read+0x11/0x20 [ 30.912864][ T509] __x64_sys_exit+0x40/0x40 [ 30.912872][ T509] do_syscall_64+0x31/0x40 [ 30.912882][ T509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.912890][ T509] RIP: 0033:0x7f52603bd019 [ 30.912895][ T509] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 30.912900][ T509] RSP: 002b:00007f526021def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.912912][ T509] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 30.912918][ T509] RDX: 00007f526021e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.912923][ T509] RBP: 00007f526045400c R08: 0000000000000000 R09: 0000000000000058 [ 30.912935][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.922819][ T607] ____fput+0x15/0x20 [ 30.928573][ T477] RBP: 00007f0a0820a00c R08: 0000000000000000 R09: 0000000000000058 [ 30.933362][ T587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.938404][ T660] Code: Unable to access opcode bytes at RIP 0x7f0a08172fef. [ 30.945900][ T603] ? sock_mmap+0xa0/0xa0 [ 30.962775][ T509] R13: 00007f5260645038 R14: 00007f5260644fa0 R15: 00007fffd3b71e58 [ 30.962784][ T509] ---[ end trace 675d796f16e540aa ]--- [ 30.962928][ T713] RIP: 0033:0x7f52603bd019 [ 30.971718][ T587] R13: 00007f5a4cbaa038 R14: 00007f5a4cba9fa0 R15: 00007ffdb6826378 [ 30.977941][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.983396][ T607] task_work_run+0x127/0x190 [ 30.999284][ T477] R13: 00007f0a083fb038 R14: 00007f0a083fafa0 R15: 00007ffd7023b058 [ 31.007686][ T587] ---[ end trace 675d796f16e540ab ]--- [ 31.015897][ T713] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 31.024002][ T607] do_exit+0xa7c/0x24e0 [ 31.031724][ T660] RSP: 002b:00007f0a07fd3ef8 EFLAGS: 00000246 [ 31.040095][ T607] ? __kasan_check_write+0x14/0x20 [ 31.045567][ T603] __fput+0x2dc/0x730 [ 31.048853][ T607] ? switch_fpu_return+0x19c/0x330 [ 31.053664][ T603] ____fput+0x15/0x20 [ 31.073405][ T607] ? put_task_struct+0x90/0x90 [ 31.079427][ T713] RSP: 002b:00007f526021def8 EFLAGS: 00000246 [ 31.093235][ T607] ? fpu__clear_all+0x20/0x20 [ 31.097748][ T477] ---[ end trace 675d796f16e540ac ]--- [ 31.113464][ T607] ? __kasan_check_read+0x11/0x20 [ 31.121530][ T660] ORIG_RAX: 000000000000003c [ 31.155013][ T607] __x64_sys_exit+0x40/0x40 [ 31.155061][ T607] do_syscall_64+0x31/0x40 [ 31.155069][ T607] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.155078][ T607] RIP: 0033:0x7f52603bd019 [ 31.155083][ T607] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 31.155089][ T607] RSP: 002b:00007f526021def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.155101][ T607] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 31.155106][ T607] RDX: 00007f526021e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.155111][ T607] RBP: 00007f526045400c R08: 0000000000000000 R09: 0000000000000058 [ 31.155116][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.155122][ T607] R13: 00007f5260645038 R14: 00007f5260644fa0 R15: 00007fffd3b71e58 [ 31.155130][ T607] ---[ end trace 675d796f16e540ad ]--- [ 31.167231][ T713] ORIG_RAX: 000000000000003c [ 31.167238][ T713] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 31.167252][ T713] RDX: 00007f526021e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.175762][ T660] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0a08173019 [ 31.188048][ T603] task_work_run+0x127/0x190 [ 31.192404][ T660] RDX: 00007f0a07fd49c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.202544][ T603] do_exit+0xa7c/0x24e0 [ 31.202563][ T603] ? __kasan_check_write+0x14/0x20 [ 31.208112][ T660] RBP: 00007f0a0820a00c R08: 0000000000000000 R09: 0000000000000058 [ 31.212337][ T713] RBP: 00007f526045400c R08: 0000000000000000 R09: 0000000000000058 [ 31.217414][ T660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.232276][ T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.232283][ T713] R13: 00007f5260645038 R14: 00007f5260644fa0 R15: 00007fffd3b71e58 [ 31.232292][ T713] ---[ end trace 675d796f16e540ae ]--- [ 31.232427][ T603] ? switch_fpu_return+0x19c/0x330 [ 31.232437][ T603] ? put_task_struct+0x90/0x90 [ 31.232449][ T603] ? fpu__clear_all+0x20/0x20 [ 31.232463][ T603] ? __kasan_check_read+0x11/0x20 [ 31.232473][ T603] __x64_sys_exit+0x40/0x40 [ 31.232482][ T603] do_syscall_64+0x31/0x40 [ 31.232490][ T603] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.232498][ T603] RIP: 0033:0x7f5e7320c019 [ 31.232503][ T603] Code: Unable to access opcode bytes at RIP 0x7f5e7320bfef. [ 31.232510][ T603] RSP: 002b:00007f5e7306cef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.232522][ T603] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e7320c019 [ 31.232535][ T603] RDX: 00007f5e7306d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.237184][ T660] R13: 00007f0a083fb038 R14: 00007f0a083fafa0 R15: 00007ffd7023b058 2026/08/02 18:52:40 executed programs: 120 [ 31.253314][ T603] RBP: 00007f5e732a300c R08: 0000000000000000 R09: 0000000000000058 [ 31.258099][ T660] ---[ end trace 675d796f16e540af ]--- [ 31.272265][ T603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.272271][ T603] R13: 00007f5e73494038 R14: 00007f5e73493fa0 R15: 00007fff24fe9fe8 [ 31.272286][ T603] ---[ end trace 675d796f16e540b0 ]--- [ 31.974214][ T112] device bridge_slave_1 left promiscuous mode [ 31.980530][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.999391][ T112] device bridge_slave_0 left promiscuous mode [ 32.022182][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.046466][ T743] ------------[ cut here ]------------ [ 32.047375][ T742] ------------[ cut here ]------------ [ 32.053320][ T743] WARNING: CPU: 0 PID: 743 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.065856][ T748] ------------[ cut here ]------------ [ 32.067870][ T743] Modules linked in: [ 32.075402][ T744] ------------[ cut here ]------------ [ 32.076929][ T743] CPU: 0 PID: 743 Comm: syz.1.124 Tainted: G B W syzkaller #0 [ 32.084669][ T112] device veth1_macvtap left promiscuous mode [ 32.094582][ T743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.106433][ T745] ------------[ cut here ]------------ [ 32.110023][ T743] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.126606][ T742] WARNING: CPU: 0 PID: 742 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.148813][ T744] WARNING: CPU: 1 PID: 744 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.151034][ T743] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.161289][ T745] WARNING: CPU: 1 PID: 745 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.190519][ T742] Modules linked in: [ 32.190719][ T112] device veth0_vlan left promiscuous mode [ 32.206180][ T742] CPU: 0 PID: 742 Comm: syz.2.126 Tainted: G B W syzkaller #0 [ 32.212637][ T748] WARNING: CPU: 1 PID: 748 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.233405][ T744] Modules linked in: [ 32.239112][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.244962][ T745] Modules linked in: [ 32.254600][ T744] CPU: 0 PID: 744 Comm: syz.0.123 Tainted: G B W syzkaller #0 [ 32.260314][ T745] CPU: 1 PID: 745 Comm: syz.4.125 Tainted: G B W syzkaller #0 [ 32.273695][ T742] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.291332][ T748] Modules linked in: [ 32.295339][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.295358][ T744] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.295367][ T744] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.295374][ T744] RSP: 0018:ffffc90000bf7c40 EFLAGS: 00010293 [ 32.295386][ T744] RAX: ffffffff842ec3a7 RBX: ffff888119af0000 RCX: ffff88810deb0000 [ 32.295392][ T744] RDX: 0000000000000000 RSI: 00000000176c6d40 RDI: 000000000c04eb7d [ 32.295407][ T744] RBP: ffffc90000bf7c60 R08: ffff888119af0083 R09: 1ffff1102335e010 [ 32.320826][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.333114][ T748] CPU: 0 PID: 748 Comm: syz.6.122 Tainted: G B W syzkaller #0 [ 32.344124][ T743] RSP: 0018:ffffc90000e47c40 EFLAGS: 00010293 [ 32.348994][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.356726][ T742] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.363205][ T748] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.363221][ T748] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.384051][ T744] R10: dffffc0000000000 R11: ffffed102335e011 R12: dffffc0000000000 [ 32.391593][ T748] RSP: 0018:ffffc90000e77c40 EFLAGS: 00010293 [ 32.401191][ T745] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.419680][ T832] ------------[ cut here ]------------ [ 32.445953][ T742] RSP: 0018:ffffc90000e67c40 EFLAGS: 00010293 [ 32.458618][ T743] [ 32.480639][ T744] R13: dffffc0000000000 R14: 00000000176c6d40 R15: ffff888126687c00 [ 32.489002][ T745] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.500026][ T743] RAX: ffffffff842ec3a7 RBX: ffff888119af4000 RCX: ffff888114c30000 [ 32.517239][ T742] [ 32.519591][ T742] RAX: ffffffff842ec3a7 RBX: ffff888119af1800 RCX: ffff888114c33b40 [ 32.534400][ T744] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.541019][ T882] ------------[ cut here ]------------ [ 32.548246][ T745] RSP: 0018:ffffc90001cffc40 EFLAGS: 00010293 [ 32.550152][ T748] [ 32.557396][ T742] RDX: 0000000000000000 RSI: 00000000170c2300 RDI: 000000000c04eb7d [ 32.557460][ T745] RAX: ffffffff842ec3a7 RBX: ffff88812b886800 RCX: ffff888110f893c0 [ 32.568386][ T882] WARNING: CPU: 0 PID: 882 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.585272][ T832] WARNING: CPU: 0 PID: 832 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.599624][ T748] RAX: ffffffff842ec3a7 RBX: ffff88812b884800 RCX: ffff88812b8013c0 [ 32.606675][ T745] RDX: 0000000000000000 RSI: 0000000019f26d00 RDI: 000000000c04eb7d [ 32.608871][ T887] ------------[ cut here ]------------ [ 32.616365][ T744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.629816][ T748] RDX: 0000000000000000 RSI: 0000000019ef0a00 RDI: 000000000c04eb7d [ 32.638539][ T742] RBP: ffffc90000e67c60 R08: ffff888119af1883 R09: 1ffff1102335e310 [ 32.641981][ T743] RDX: 0000000000000000 RSI: 00000000170c0f00 RDI: 000000000c04eb7d [ 32.651978][ T748] RBP: ffffc90000e77c60 R08: ffff88812b884883 R09: 1ffff11025710910 [ 32.658890][ T887] WARNING: CPU: 1 PID: 887 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.670314][ T882] Modules linked in: [ 32.674189][ T832] Modules linked in: [ 32.681968][ T742] R10: dffffc0000000000 R11: ffffed102335e311 R12: dffffc0000000000 [ 32.685024][ T745] RBP: ffffc90001cffc60 R08: ffff88812b886883 R09: 1ffff11025710d10 [ 32.692934][ T748] R10: dffffc0000000000 R11: ffffed1025710911 R12: dffffc0000000000 [ 32.704709][ T745] R10: dffffc0000000000 R11: ffffed1025710d11 R12: dffffc0000000000 [ 32.709992][ T742] R13: dffffc0000000000 R14: 00000000170c2300 R15: ffff888119c2d400 [ 32.720423][ T743] RBP: ffffc90000e47c60 R08: ffff888119af4083 R09: 1ffff1102335e810 [ 32.727390][ T882] [ 32.736860][ T832] [ 32.739231][ T832] CPU: 0 PID: 832 Comm: syz.1.153 Tainted: G B W syzkaller #0 [ 32.741829][ T887] Modules linked in: [ 32.755096][ T890] ------------[ cut here ]------------ [ 32.755223][ T913] ------------[ cut here ]------------ [ 32.759820][ T887] [ 32.764824][ T882] CPU: 0 PID: 882 Comm: syz.0.170 Tainted: G B W syzkaller #0 [ 32.771377][ T906] ------------[ cut here ]------------ [ 32.772474][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.781016][ T906] WARNING: CPU: 1 PID: 906 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.786722][ T748] R13: dffffc0000000000 R14: 0000000019ef0a00 R15: ffff888126684800 [ 32.797203][ T890] WARNING: CPU: 1 PID: 890 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.807345][ T742] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.816360][ T743] R10: dffffc0000000000 R11: ffffed102335e811 R12: dffffc0000000000 [ 32.835693][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.845940][ T887] CPU: 1 PID: 887 Comm: syz.2.173 Tainted: G B W syzkaller #0 [ 32.854056][ T913] WARNING: CPU: 0 PID: 913 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.872949][ T832] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.879298][ T832] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.887742][ T906] Modules linked in: [ 32.899621][ T748] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.913040][ T742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.920345][ T882] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.924505][ T744] CR2: 00007f5a4cb754b8 CR3: 0000000106981000 CR4: 00000000003506a0 [ 32.926980][ T742] CR2: 000000ef626c3000 CR3: 00000001063c6000 CR4: 00000000003506b0 [ 32.934818][ T744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.944858][ T745] R13: dffffc0000000000 R14: 0000000019f26d00 R15: ffff888126685000 [ 32.964855][ T744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.965276][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.972917][ T744] Call Trace: [ 32.983032][ T913] Modules linked in: [ 32.986285][ T744] pppol2tp_release+0x150/0x2b0 [ 32.986301][ T744] sock_close+0xb8/0x200 [ 32.990176][ T913] CPU: 1 PID: 913 Comm: syz.6.171 Tainted: G B W syzkaller #0 [ 32.995745][ T744] ? sock_mmap+0xa0/0xa0 [ 33.006842][ T921] ------------[ cut here ]------------ [ 33.008474][ T744] __fput+0x2dc/0x730 [ 33.022739][ T744] ____fput+0x15/0x20 [ 33.026830][ T744] task_work_run+0x127/0x190 [ 33.031413][ T744] do_exit+0xa7c/0x24e0 [ 33.033780][ T890] Modules linked in: [ 33.036296][ T743] R13: dffffc0000000000 R14: 00000000170c0f00 R15: ffff888126685400 [ 33.036918][ T744] ? __kasan_check_write+0x14/0x20 [ 33.040487][ T743] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.050632][ T744] ? switch_fpu_return+0x19c/0x330 [ 33.058542][ T882] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.064559][ T906] [ 33.093089][ T744] ? put_task_struct+0x90/0x90 [ 33.104269][ T947] ------------[ cut here ]------------ [ 33.104973][ T744] ? fpu__clear_all+0x20/0x20 [ 33.109775][ T947] WARNING: CPU: 1 PID: 947 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.114646][ T744] ? __kasan_check_read+0x11/0x20 [ 33.124971][ T906] CPU: 1 PID: 906 Comm: syz.4.178 Tainted: G B W syzkaller #0 [ 33.129634][ T744] __x64_sys_exit+0x40/0x40 [ 33.145177][ T744] do_syscall_64+0x31/0x40 [ 33.149634][ T744] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.156253][ T744] RIP: 0033:0x7fc5e4d45019 [ 33.160701][ T744] Code: Unable to access opcode bytes at RIP 0x7fc5e4d44fef. [ 33.164021][ T742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.169252][ T744] RSP: 002b:00007fc5e4ba5ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.185847][ T744] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc5e4d45019 [ 33.186046][ T832] RSP: 0018:ffffc90000e97c40 EFLAGS: 00010293 [ 33.193930][ T744] RDX: 00007fc5e4ba69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.196185][ T745] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.200001][ T744] RBP: 00007fc5e4ddc00c R08: 0000000000000000 R09: 0000000000000058 [ 33.208372][ T921] WARNING: CPU: 1 PID: 921 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.217029][ T744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.217043][ T744] R13: 00007fc5e4fcd038 R14: 00007fc5e4fccfa0 R15: 00007ffe3b38ef78 [ 33.226160][ T955] ------------[ cut here ]------------ [ 33.236490][ T744] ---[ end trace 675d796f16e540b1 ]--- [ 33.263352][ T748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.263602][ T887] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.270039][ T748] CR2: 0000001b34063fff CR3: 000000012b91d000 CR4: 00000000003506b0 [ 33.283099][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.288782][ T748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.294983][ T745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.302581][ T955] WARNING: CPU: 0 PID: 955 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.302584][ T955] Modules linked in: [ 33.302598][ T955] CPU: 0 PID: 955 Comm: syz.0.194 Tainted: G B W syzkaller #0 [ 33.302610][ T955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.310458][ T832] [ 33.323422][ T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.333556][ T913] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.342335][ T960] ------------[ cut here ]------------ [ 33.349533][ T890] CPU: 1 PID: 890 Comm: syz.0.174 Tainted: G B W syzkaller #0 [ 33.379431][ T745] CR2: 00007f5a4cbabdac CR3: 0000000120676000 CR4: 00000000003506a0 [ 33.382167][ T921] Modules linked in: [ 33.392395][ T743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.404838][ T921] [ 33.407189][ T921] CPU: 0 PID: 921 Comm: syz.1.184 Tainted: G B W syzkaller #0 [ 33.414061][ T887] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.416016][ T882] RSP: 0018:ffffc90000e87c40 EFLAGS: 00010293 [ 33.436728][ T745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.436859][ T748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.444063][ T745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.455482][ T743] CR2: 00007f5261177060 CR3: 000000012c33f000 CR4: 00000000003506a0 [ 33.463882][ T968] ------------[ cut here ]------------ [ 33.468022][ T960] WARNING: CPU: 0 PID: 960 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.475321][ T832] RAX: ffffffff842ec3a7 RBX: ffff88811bd0e800 RCX: ffff888110f88000 [ 33.492098][ T947] Modules linked in: [ 33.499047][ T745] Call Trace: [ 33.503886][ T955] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.507271][ T913] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.513619][ T742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.532629][ T887] RSP: 0018:ffffc90001067c40 EFLAGS: 00010293 [ 33.540243][ T890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.541936][ T978] ------------[ cut here ]------------ [ 33.546609][ T745] pppol2tp_release+0x150/0x2b0 [ 33.558021][ T955] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.562952][ T887] [ 33.566833][ T748] Call Trace: [ 33.592398][ T906] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.592422][ T882] [ 33.599598][ T890] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.601048][ T882] RAX: ffffffff842ec3a7 RBX: ffff88811b296000 RCX: ffff88811cd3e2c0 [ 33.607795][ T906] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.616915][ T960] Modules linked in: [ 33.636975][ T921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.637091][ T968] WARNING: CPU: 1 PID: 968 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.641134][ T921] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.662605][ T832] RDX: 0000000000000000 RSI: 000000002d7b3860 RDI: 000000000c04eb7d [ 33.680896][ T890] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.681975][ T742] Call Trace: [ 33.704301][ T955] RSP: 0018:ffffc900014bfc40 EFLAGS: 00010293 [ 33.710395][ T955] RAX: ffffffff842ec3a7 RBX: ffff88811def8800 RCX: ffff88811b0acf00 [ 33.714561][ T745] sock_close+0xb8/0x200 [ 33.722809][ T947] CPU: 0 PID: 947 Comm: syz.6.189 Tainted: G B W syzkaller #0 [ 33.722816][ T947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.722831][ T947] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.722840][ T947] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.722847][ T947] RSP: 0018:ffffc90001347c40 EFLAGS: 00010293 [ 33.722858][ T947] RAX: ffffffff842ec3a7 RBX: ffff88811ded2800 RCX: ffff88811f142780 [ 33.722864][ T947] RDX: 0000000000000000 RSI: 000000001b2ff720 RDI: 000000000c04eb7d [ 33.722870][ T947] RBP: ffffc90001347c60 R08: ffff88811ded2883 R09: 1ffff11023bda510 [ 33.722876][ T947] R10: dffffc0000000000 R11: ffffed1023bda511 R12: dffffc0000000000 [ 33.722883][ T947] R13: dffffc0000000000 R14: 000000001b2ff720 R15: ffff888120672400 [ 33.732470][ T968] Modules linked in: [ 33.746546][ T955] RDX: 0000000000000000 RSI: 000000001dd81dc0 RDI: 000000000c04eb7d [ 33.748899][ T887] RAX: ffffffff842ec3a7 RBX: ffff88811d062000 RCX: ffff88811d9162c0 [ 33.784489][ T913] RSP: 0018:ffffc9000116fc40 EFLAGS: 00010293 [ 33.798414][ T832] RBP: ffffc90000e97c60 R08: ffff88811bd0e883 R09: 1ffff110237a1d10 [ 33.798422][ T832] R10: dffffc0000000000 R11: ffffed10237a1d11 R12: dffffc0000000000 [ 33.798428][ T832] R13: dffffc0000000000 R14: 000000002d7b3860 R15: ffff88811bcfe400 [ 33.798437][ T832] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.798452][ T832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.814165][ T960] [ 33.821392][ T745] ? sock_mmap+0xa0/0xa0 [ 33.845476][ T882] RDX: 0000000000000000 RSI: 0000000011ad5800 RDI: 000000000c04eb7d [ 33.868920][ T890] RSP: 0018:ffffc9000122fc40 EFLAGS: 00010293 [ 33.879581][ T921] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.886597][ T906] RSP: 0018:ffffc900012d7c40 EFLAGS: 00010293 [ 33.890624][ T960] CPU: 0 PID: 960 Comm: syz.2.188 Tainted: G B W syzkaller #0 [ 33.897941][ T743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.904754][ T947] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.923839][ T890] [ 33.931800][ T921] RSP: 0018:ffffc9000136fc40 EFLAGS: 00010293 [ 33.938877][ T968] [ 33.945936][ T742] pppol2tp_release+0x150/0x2b0 [ 33.971695][ T748] pppol2tp_release+0x150/0x2b0 [ 33.977729][ T955] RBP: ffffc900014bfc60 R08: ffff88811def8883 R09: 1ffff11023bdf110 [ 33.987514][ T913] [ 33.987759][ T906] [ 33.991587][ T921] [ 33.993866][ T906] RAX: ffffffff842ec3a7 RBX: ffff88811dc30800 RCX: ffff88811cc3bb40 [ 33.994798][ T748] sock_close+0xb8/0x200 [ 34.003204][ T745] __fput+0x2dc/0x730 [ 34.011107][ T890] RAX: ffffffff842ec3a7 RBX: ffff88811d063000 RCX: ffff88811d913b40 [ 34.011709][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.019909][ T978] WARNING: CPU: 1 PID: 978 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.030709][ T955] R10: dffffc0000000000 R11: ffffed1023bdf111 R12: dffffc0000000000 [ 34.039996][ T745] ____fput+0x15/0x20 [ 34.048186][ T921] RAX: ffffffff842ec3a7 RBX: ffff88811e1b0800 RCX: ffff88811e2f2780 [ 34.052211][ T968] CPU: 1 PID: 968 Comm: syz.6.195 Tainted: G B W syzkaller #0 [ 34.071076][ T913] RAX: ffffffff842ec3a7 RBX: ffff88811b011000 RCX: ffff88811e2f4f00 [ 34.082357][ T906] RDX: 0000000000000000 RSI: 000000001a7d2800 RDI: 000000000c04eb7d [ 34.086727][ T748] ? sock_mmap+0xa0/0xa0 [ 34.094939][ T882] RBP: ffffc90000e87c60 R08: ffff88811b296083 R09: 1ffff11023652c10 [ 34.105619][ T742] sock_close+0xb8/0x200 [ 34.108477][ T890] RDX: 0000000000000000 RSI: 000000001adba800 RDI: 000000000c04eb7d [ 34.109891][ T742] ? sock_mmap+0xa0/0xa0 [ 34.127205][ T913] RDX: 0000000000000000 RSI: 000000001a12c500 RDI: 000000000c04eb7d [ 34.136325][ T921] RDX: 0000000000000000 RSI: 000000001a12f200 RDI: 000000000c04eb7d [ 34.144431][ T882] R10: dffffc0000000000 R11: ffffed1023652c11 R12: dffffc0000000000 [ 34.153929][ T906] RBP: ffffc900012d7c60 R08: ffff88811dc30883 R09: 1ffff11023b86110 [ 34.161862][ T748] __fput+0x2dc/0x730 [ 34.166017][ T748] ____fput+0x15/0x20 [ 34.170011][ T748] task_work_run+0x127/0x190 [ 34.172729][ T978] Modules linked in: [ 34.174918][ T955] R13: dffffc0000000000 R14: 000000001dd81dc0 R15: ffff8881073fa400 [ 34.178715][ T978] CPU: 1 PID: 978 Comm: syz.1.193 Tainted: G B W syzkaller #0 [ 34.192790][ T960] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.202082][ T890] RBP: ffffc9000122fc60 R08: ffff88811d063083 R09: 1ffff11023a0c610 [ 34.205307][ T921] RBP: ffffc9000136fc60 R08: ffff88811e1b0883 R09: 1ffff11023c36110 [ 34.216154][ T745] task_work_run+0x127/0x190 [ 34.219545][ T947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.231655][ T960] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.236893][ T890] R10: dffffc0000000000 R11: ffffed1023a0c611 R12: dffffc0000000000 [ 34.253936][ T913] RBP: ffffc9000116fc60 R08: ffff88811b011083 R09: 1ffff11023602210 [ 34.267641][ T882] R13: dffffc0000000000 R14: 0000000011ad5800 R15: ffff88811a540400 [ 34.268935][ T887] RDX: 0000000000000000 RSI: 00000000182cc7e0 RDI: 000000000c04eb7d [ 34.277021][ T743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.284785][ T745] do_exit+0xa7c/0x24e0 [ 34.292172][ T882] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.305515][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.306156][ T906] R10: dffffc0000000000 R11: ffffed1023b86111 R12: dffffc0000000000 [ 34.320777][ T832] CR2: 000000ef62719000 CR3: 000000010d7f2000 CR4: 00000000003506a0 [ 34.332075][ T742] __fput+0x2dc/0x730 [ 34.337534][ T745] ? __kasan_check_write+0x14/0x20 [ 34.339216][ T742] ____fput+0x15/0x20 [ 34.342973][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.348793][ T947] CR2: 00007f5e73495dac CR3: 00000001298ee000 CR4: 00000000003506b0 [ 34.363071][ T745] ? switch_fpu_return+0x19c/0x330 [ 34.365671][ T832] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.378708][ T745] ? put_task_struct+0x90/0x90 [ 34.380438][ T742] task_work_run+0x127/0x190 [ 34.388468][ T955] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.389949][ T887] RBP: ffffc90001067c60 R08: ffff88811d062083 R09: 1ffff11023a0c410 [ 34.402121][ T748] do_exit+0xa7c/0x24e0 [ 34.406839][ T1036] ------------[ cut here ]------------ [ 34.414443][ T742] do_exit+0xa7c/0x24e0 [ 34.419285][ T742] ? __kasan_check_write+0x14/0x20 [ 34.420280][ T906] R13: dffffc0000000000 R14: 000000001a7d2800 R15: ffff88811ce58800 [ 34.424575][ T955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.435008][ T745] ? fpu__clear_all+0x20/0x20 [ 34.439982][ T921] R10: dffffc0000000000 R11: ffffed1023c36111 R12: dffffc0000000000 [ 34.453328][ T968] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.459687][ T968] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.477367][ T906] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.485556][ T960] RSP: 0018:ffffc900014efc40 EFLAGS: 00010293 [ 34.493507][ T978] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.495581][ T743] Call Trace: [ 34.500732][ T1036] WARNING: CPU: 1 PID: 1036 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.505058][ T882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.523356][ T913] R10: dffffc0000000000 R11: ffffed1023602211 R12: dffffc0000000000 [ 34.531354][ T913] R13: dffffc0000000000 R14: 000000001a12c500 R15: ffff88811f04a000 [ 34.533546][ T745] ? __kasan_check_read+0x11/0x20 [ 34.542965][ T742] ? switch_fpu_return+0x19c/0x330 [ 34.545063][ T978] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.549530][ T742] ? put_task_struct+0x90/0x90 [ 34.576156][ T890] R13: dffffc0000000000 R14: 000000001adba800 R15: ffff88811bcb5800 [ 34.584386][ T947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.593147][ T743] pppol2tp_release+0x150/0x2b0 [ 34.593437][ T1079] ------------[ cut here ]------------ [ 34.598011][ T743] sock_close+0xb8/0x200 [ 34.598020][ T743] ? sock_mmap+0xa0/0xa0 [ 34.598037][ T743] __fput+0x2dc/0x730 [ 34.603787][ T887] R10: dffffc0000000000 R11: ffffed1023a0c411 R12: dffffc0000000000 [ 34.615963][ T748] ? __kasan_check_write+0x14/0x20 [ 34.621503][ T906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.624621][ T921] R13: dffffc0000000000 R14: 000000001a12f200 R15: ffff88811f049c00 [ 34.630073][ T955] CR2: 00007f0a08f2d060 CR3: 000000010ddda000 CR4: 00000000003506b0 [ 34.646518][ T748] ? switch_fpu_return+0x19c/0x330 [ 34.657371][ T882] CR2: 00007fc5e4ba5ff8 CR3: 000000012e86f000 CR4: 00000000003506b0 [ 34.662559][ T745] __x64_sys_exit+0x40/0x40 [ 34.670077][ T745] do_syscall_64+0x31/0x40 [ 34.672970][ T1083] ------------[ cut here ]------------ [ 34.675125][ T1079] WARNING: CPU: 1 PID: 1079 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.690207][ T947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.693445][ T1083] WARNING: CPU: 0 PID: 1083 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.698949][ T887] R13: dffffc0000000000 R14: 00000000182cc7e0 R15: ffff88811bcb6c00 [ 34.710815][ T743] ____fput+0x15/0x20 [ 34.716605][ T890] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.720796][ T913] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.735745][ T906] CR2: 00007f5a4c8e2820 CR3: 0000000128a4d000 CR4: 00000000003506a0 [ 34.739473][ T1036] Modules linked in: [ 34.746647][ T832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.748401][ T960] RAX: ffffffff842ec3a7 RBX: ffff88811dec5000 RCX: ffff88811e240000 [ 34.750540][ T832] Call Trace: [ 34.750556][ T832] pppol2tp_release+0x150/0x2b0 [ 34.750578][ T832] sock_close+0xb8/0x200 [ 34.760629][ T882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.771494][ T890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.775425][ T921] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.779805][ T745] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.787685][ T960] RDX: 0000000000000000 RSI: 0000000026941000 RDI: 000000000c04eb7d [ 34.795089][ T890] CR2: 00007f5a4cbabdac CR3: 000000010d53c000 CR4: 00000000003506a0 [ 34.805980][ T748] ? put_task_struct+0x90/0x90 [ 34.809155][ T947] Call Trace: [ 34.817392][ T1036] [ 34.834303][ T906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.844468][ T832] ? sock_mmap+0xa0/0xa0 [ 34.846273][ T1083] Modules linked in: [ 34.852860][ T968] RSP: 0018:ffffc90001567c40 EFLAGS: 00010293 [ 34.853441][ T1079] Modules linked in: [ 34.861029][ T743] task_work_run+0x127/0x190 [ 34.866937][ T832] __fput+0x2dc/0x730 [ 34.867663][ T968] RAX: ffffffff842ec3a7 RBX: ffff88811d396800 RCX: ffff88811deae2c0 [ 34.871443][ T832] ____fput+0x15/0x20 [ 34.871452][ T832] task_work_run+0x127/0x190 [ 34.871467][ T832] do_exit+0xa7c/0x24e0 [ 34.880020][ T1083] CPU: 0 PID: 1083 Comm: syz.2.234 Tainted: G B W syzkaller #0 [ 34.883812][ T955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.888180][ T978] RSP: 0018:ffffc90001647c40 EFLAGS: 00010293 [ 34.893465][ T745] RIP: 0033:0x7f5a4c922019 [ 34.903027][ T960] RBP: ffffc900014efc60 R08: ffff88811dec5083 R09: 1ffff11023bd8a10 [ 34.910266][ T890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.919492][ T913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.919879][ T887] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.936047][ T921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.946612][ T906] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.951348][ T748] ? fpu__clear_all+0x20/0x20 [ 34.957985][ T890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.966157][ T882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.970863][ T1079] CPU: 1 PID: 1079 Comm: syz.4.231 Tainted: G B W syzkaller #0 [ 34.980707][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.987973][ T832] ? __kasan_check_write+0x14/0x20 [ 34.996188][ T1036] CPU: 0 PID: 1036 Comm: syz.0.214 Tainted: G B W syzkaller #0 [ 35.006086][ T906] Call Trace: [ 35.011761][ T947] pppol2tp_release+0x150/0x2b0 [ 35.019510][ T955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.026369][ T978] [ 35.032424][ T742] ? fpu__clear_all+0x20/0x20 [ 35.037373][ T913] CR2: 00007f5e732bf761 CR3: 0000000105bf8000 CR4: 00000000003506b0 [ 35.037869][ T745] Code: Unable to access opcode bytes at RIP 0x7f5a4c921fef. [ 35.042817][ T1113] ------------[ cut here ]------------ [ 35.050921][ T745] RSP: 002b:00007f5a4c782ef8 EFLAGS: 00000246 [ 35.059531][ T960] R10: dffffc0000000000 R11: ffffed1023bd8a11 R12: dffffc0000000000 [ 35.063615][ T968] RDX: 0000000000000000 RSI: 0000000000462330 RDI: 000000000c04eb7d [ 35.070606][ T921] CR2: 00007fc5e4d00130 CR3: 000000012c33f000 CR4: 00000000003506b0 [ 35.080250][ T742] ? __kasan_check_read+0x11/0x20 [ 35.086316][ T882] Call Trace: [ 35.096422][ T955] Call Trace: [ 35.107419][ T913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.109624][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.118828][ T1083] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.129667][ T890] Call Trace: [ 35.134618][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.135938][ T742] __x64_sys_exit+0x40/0x40 [ 35.151016][ T1113] WARNING: CPU: 0 PID: 1113 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.155658][ T832] ? switch_fpu_return+0x19c/0x330 [ 35.171451][ T882] pppol2tp_release+0x150/0x2b0 [ 35.172323][ T890] pppol2tp_release+0x150/0x2b0 [ 35.182376][ T978] RAX: ffffffff842ec3a7 RBX: ffff88810abc3800 RCX: ffff888100d993c0 [ 35.190719][ T947] sock_close+0xb8/0x200 [ 35.190729][ T955] pppol2tp_release+0x150/0x2b0 [ 35.190743][ T955] sock_close+0xb8/0x200 [ 35.205262][ T913] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.209213][ T743] do_exit+0xa7c/0x24e0 [ 35.215895][ T960] R13: dffffc0000000000 R14: 0000000026941000 R15: ffff888120718000 [ 35.224552][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.240620][ T882] sock_close+0xb8/0x200 [ 35.240631][ T906] pppol2tp_release+0x150/0x2b0 [ 35.240646][ T906] sock_close+0xb8/0x200 [ 35.248160][ T978] RDX: 0000000000000000 RSI: 000000001def3700 RDI: 000000000c04eb7d [ 35.254688][ T745] ORIG_RAX: 000000000000003c [ 35.262674][ T947] ? sock_mmap+0xa0/0xa0 [ 35.267300][ T743] ? __kasan_check_write+0x14/0x20 [ 35.271321][ T947] __fput+0x2dc/0x730 [ 35.276818][ T887] CR2: 000000ef627a2020 CR3: 000000010d629000 CR4: 00000000003506a0 [ 35.288877][ T890] sock_close+0xb8/0x200 [ 35.292179][ T1036] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.297134][ T968] RBP: ffffc90001567c60 R08: ffff88811d396883 R09: 1ffff11023a72d10 [ 35.303513][ T1083] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.311373][ T890] ? sock_mmap+0xa0/0xa0 [ 35.331326][ T882] ? sock_mmap+0xa0/0xa0 [ 35.331469][ T906] ? sock_mmap+0xa0/0xa0 [ 35.336840][ T1113] Modules linked in: [ 35.340344][ T1079] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.345375][ T921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.356392][ T832] ? put_task_struct+0x90/0x90 [ 35.358792][ T913] Call Trace: [ 35.375164][ T1036] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.377399][ T906] __fput+0x2dc/0x730 [ 35.399204][ T748] ? __kasan_check_read+0x11/0x20 [ 35.399405][ T742] do_syscall_64+0x31/0x40 [ 35.404495][ T1113] [ 35.408978][ T968] R10: dffffc0000000000 R11: ffffed1023a72d11 R12: dffffc0000000000 [ 35.419457][ T960] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.423444][ T745] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5a4c922019 [ 35.429645][ T748] __x64_sys_exit+0x40/0x40 [ 35.436640][ T742] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.450134][ T978] RBP: ffffc90001647c60 R08: ffff88810abc3883 R09: 1ffff11021578710 [ 35.454404][ T743] ? switch_fpu_return+0x19c/0x330 [ 35.462914][ T882] __fput+0x2dc/0x730 [ 35.464574][ T1159] ------------[ cut here ]------------ [ 35.467246][ T882] ____fput+0x15/0x20 [ 35.473054][ T968] R13: dffffc0000000000 R14: 0000000000462330 R15: ffff8881205bd800 [ 35.477825][ T947] ____fput+0x15/0x20 [ 35.484941][ T1079] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.505164][ T960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.516016][ T1179] ------------[ cut here ]------------ [ 35.521510][ T1179] WARNING: CPU: 0 PID: 1179 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.522894][ T743] ? put_task_struct+0x90/0x90 [ 35.533083][ T921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.536684][ T1159] WARNING: CPU: 1 PID: 1159 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.544928][ T913] pppol2tp_release+0x150/0x2b0 [ 35.555094][ T742] RIP: 0033:0x7f0a08173019 [ 35.561224][ T955] ? sock_mmap+0xa0/0xa0 [ 35.567640][ T745] RDX: 00007f5a4c7839c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.568680][ T832] ? fpu__clear_all+0x20/0x20 [ 35.576589][ T742] Code: Unable to access opcode bytes at RIP 0x7f0a08172fef. [ 35.581392][ T955] __fput+0x2dc/0x730 [ 35.588764][ T906] ____fput+0x15/0x20 [ 35.592877][ T887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.596667][ T968] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.604783][ T1113] CPU: 0 PID: 1113 Comm: syz.6.242 Tainted: G B W syzkaller #0 [ 35.613920][ T743] ? fpu__clear_all+0x20/0x20 [ 35.623485][ T1197] ------------[ cut here ]------------ [ 35.627305][ T906] task_work_run+0x127/0x190 [ 35.632724][ T960] CR2: 00007f0a07fd3ff8 CR3: 000000011d47c000 CR4: 00000000003506b0 [ 35.639099][ T1195] ------------[ cut here ]------------ [ 35.646357][ T882] task_work_run+0x127/0x190 [ 35.650717][ T890] __fput+0x2dc/0x730 [ 35.655391][ T748] do_syscall_64+0x31/0x40 [ 35.659569][ T745] RBP: 00007f5a4c9b900c R08: 0000000000000000 R09: 0000000000000058 [ 35.664740][ T1179] Modules linked in: [ 35.671757][ T947] task_work_run+0x127/0x190 [ 35.672139][ T890] ____fput+0x15/0x20 [ 35.675789][ T978] R10: dffffc0000000000 R11: ffffed1021578711 R12: dffffc0000000000 [ 35.680251][ T890] task_work_run+0x127/0x190 [ 35.684288][ T947] do_exit+0xa7c/0x24e0 [ 35.692253][ T1195] WARNING: CPU: 1 PID: 1195 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.703513][ T887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.712685][ T1203] ------------[ cut here ]------------ [ 35.719358][ T1197] WARNING: CPU: 0 PID: 1197 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.724955][ T742] RSP: 002b:00007f0a07fd3ef8 EFLAGS: 00000246 [ 35.734863][ T1079] RSP: 0018:ffffc90001aefc40 EFLAGS: 00010293 [ 35.738363][ T955] ____fput+0x15/0x20 [ 35.745155][ T1203] WARNING: CPU: 1 PID: 1203 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.749390][ T1179] [ 35.755351][ T743] ? __kasan_check_read+0x11/0x20 [ 35.761379][ T913] sock_close+0xb8/0x200 [ 35.763939][ T1083] RSP: 0018:ffffc90001947c40 EFLAGS: 00010293 [ 35.768624][ T913] ? sock_mmap+0xa0/0xa0 [ 35.774082][ T906] do_exit+0xa7c/0x24e0 [ 35.779211][ T1159] Modules linked in: [ 35.783510][ T1036] RSP: 0018:ffffc90001727c40 EFLAGS: 00010293 [ 35.790542][ T748] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.791395][ T1036] [ 35.800036][ T1159] [ 35.807451][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.809317][ T978] R13: dffffc0000000000 R14: 000000001def3700 R15: ffff8881071b3c00 [ 35.818188][ T1203] Modules linked in: [ 35.827416][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.828626][ T1208] ------------[ cut here ]------------ [ 35.831360][ T1113] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.841690][ T921] Call Trace: [ 35.853322][ T960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.860511][ T1079] [ 35.867369][ T906] ? __kasan_check_write+0x14/0x20 [ 35.868145][ T882] do_exit+0xa7c/0x24e0 [ 35.876857][ T745] R13: 00007f5a4cbaa038 R14: 00007f5a4cba9fa0 R15: 00007ffdb6826378 [ 35.876867][ T745] ---[ end trace 675d796f16e540b2 ]--- [ 35.877017][ T1079] RAX: ffffffff842ec3a7 RBX: ffff888104999800 RCX: ffff88812eccbb40 [ 35.885226][ T1179] CPU: 0 PID: 1179 Comm: syz.4.260 Tainted: G B W syzkaller #0 [ 35.907588][ T832] ? __kasan_check_read+0x11/0x20 [ 35.907778][ T968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.914007][ T1036] RAX: ffffffff842ec3a7 RBX: ffff88810b3be000 RCX: ffff8881187fbb40 [ 35.919642][ T887] Call Trace: [ 35.927469][ T742] ORIG_RAX: 000000000000003c [ 35.930652][ T748] RIP: 0033:0x7f5e7320c019 [ 35.935436][ T947] ? __kasan_check_write+0x14/0x20 [ 35.939785][ T955] task_work_run+0x127/0x190 [ 35.945028][ T743] __x64_sys_exit+0x40/0x40 [ 35.951971][ T913] __fput+0x2dc/0x730 [ 35.957907][ T913] ____fput+0x15/0x20 [ 35.958443][ T906] ? switch_fpu_return+0x19c/0x330 [ 35.962927][ T890] do_exit+0xa7c/0x24e0 [ 35.967284][ T1203] [ 35.971245][ T890] ? __kasan_check_write+0x14/0x20 [ 35.973635][ T1083] [ 35.979168][ T978] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.981085][ T832] __x64_sys_exit+0x40/0x40 [ 35.990112][ T968] CR2: 00007f5a4c8e2820 CR3: 000000010d629000 CR4: 00000000003506a0 [ 35.994690][ T1079] RDX: 0000000000000000 RSI: 000000000cd06460 RDI: 000000000c04eb7d [ 36.005343][ T960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.011513][ T1083] RAX: ffffffff842ec3a7 RBX: ffff88812e452000 RCX: ffff88812eeb2780 [ 36.021636][ T1195] Modules linked in: [ 36.027678][ T748] Code: Unable to access opcode bytes at RIP 0x7f5e7320bfef. [ 36.032547][ T1036] RDX: 0000000000000000 RSI: 000000001cd1c400 RDI: 000000000c04eb7d [ 36.039377][ T1159] CPU: 0 PID: 1159 Comm: syz.0.248 Tainted: G B W syzkaller #0 [ 36.047145][ T1197] Modules linked in: [ 36.055792][ T906] ? put_task_struct+0x90/0x90 [ 36.063201][ T1195] [ 36.067171][ T1195] CPU: 0 PID: 1195 Comm: syz.4.264 Tainted: G B W syzkaller #0 [ 36.069152][ T947] ? switch_fpu_return+0x19c/0x330 [ 36.076325][ T913] task_work_run+0x127/0x190 [ 36.083346][ T921] pppol2tp_release+0x150/0x2b0 [ 36.085970][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.090654][ T1208] WARNING: CPU: 1 PID: 1208 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.097340][ T1113] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.107455][ T1203] CPU: 1 PID: 1203 Comm: syz.1.268 Tainted: G B W syzkaller #0 [ 36.127874][ T955] do_exit+0xa7c/0x24e0 [ 36.136337][ T1079] RBP: ffffc90001aefc60 R08: ffff888104999883 R09: 1ffff11020933310 [ 36.140642][ T887] pppol2tp_release+0x150/0x2b0 [ 36.149459][ T1036] RBP: ffffc90001727c60 R08: ffff88810b3be083 R09: 1ffff11021677c10 [ 36.154532][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.162577][ T947] ? put_task_struct+0x90/0x90 [ 36.174363][ T882] ? __kasan_check_write+0x14/0x20 [ 36.180004][ T1232] ------------[ cut here ]------------ [ 36.182277][ T882] ? switch_fpu_return+0x19c/0x330 [ 36.187721][ T1036] R10: dffffc0000000000 R11: ffffed1021677c11 R12: dffffc0000000000 [ 36.196400][ T960] Call Trace: [ 36.203268][ T978] CR2: 00007f5261177060 CR3: 000000012c33f000 CR4: 00000000003506b0 [ 36.203739][ T921] sock_close+0xb8/0x200 [ 36.217517][ T968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.219458][ T742] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0a08173019 [ 36.229902][ T890] ? switch_fpu_return+0x19c/0x330 [ 36.237377][ T906] ? fpu__clear_all+0x20/0x20 [ 36.242116][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.247080][ T743] do_syscall_64+0x31/0x40 [ 36.253755][ T955] ? __kasan_check_write+0x14/0x20 [ 36.258208][ T1232] WARNING: CPU: 1 PID: 1232 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.263326][ T748] RSP: 002b:00007f5e7306cef8 EFLAGS: 00000246 [ 36.273394][ T906] ? __kasan_check_read+0x11/0x20 [ 36.279525][ T887] sock_close+0xb8/0x200 [ 36.289272][ T978] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.289857][ T1197] [ 36.297462][ T882] ? put_task_struct+0x90/0x90 [ 36.299780][ T832] do_syscall_64+0x31/0x40 [ 36.304572][ T913] do_exit+0xa7c/0x24e0 [ 36.309168][ T1036] R13: dffffc0000000000 R14: 000000001cd1c400 R15: ffff88812a7bc800 [ 36.314014][ T1244] ------------[ cut here ]------------ [ 36.321319][ T1197] CPU: 1 PID: 1197 Comm: syz.1.265 Tainted: G B W syzkaller #0 [ 36.327731][ T968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.335942][ T742] RDX: 00007f0a07fd49c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.343794][ T960] pppol2tp_release+0x150/0x2b0 [ 36.351710][ T1079] R10: dffffc0000000000 R11: ffffed1020933311 R12: dffffc0000000000 [ 36.357866][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.364833][ T947] ? fpu__clear_all+0x20/0x20 [ 36.375041][ T978] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.380404][ T1083] RDX: 0000000000000000 RSI: 000000000f1ea300 RDI: 000000000c04eb7d [ 36.388749][ T1179] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.395814][ T1247] ------------[ cut here ]------------ [ 36.401934][ T890] ? put_task_struct+0x90/0x90 [ 36.409171][ T832] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.412053][ T748] ORIG_RAX: 000000000000003c [ 36.418146][ T743] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.428260][ T887] ? sock_mmap+0xa0/0xa0 [ 36.433525][ T913] ? __kasan_check_write+0x14/0x20 [ 36.438692][ T913] ? switch_fpu_return+0x19c/0x330 [ 36.438702][ T921] ? sock_mmap+0xa0/0xa0 [ 36.438721][ T921] __fput+0x2dc/0x730 [ 36.446396][ T1244] WARNING: CPU: 0 PID: 1244 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.449259][ T1251] ------------[ cut here ]------------ [ 36.455176][ T882] ? fpu__clear_all+0x20/0x20 [ 36.466188][ T832] RIP: 0033:0x7f52603bd019 [ 36.470049][ T887] __fput+0x2dc/0x730 [ 36.472532][ T1232] Modules linked in: [ 36.478623][ T1195] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.480808][ T921] ____fput+0x15/0x20 [ 36.484934][ T913] ? put_task_struct+0x90/0x90 [ 36.491261][ T1208] Modules linked in: [ 36.497713][ T978] Call Trace: [ 36.503611][ T832] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 36.511004][ T887] ____fput+0x15/0x20 [ 36.515380][ T1036] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.518970][ T955] ? switch_fpu_return+0x19c/0x330 [ 36.527545][ T947] ? __kasan_check_read+0x11/0x20 [ 36.532977][ T1244] Modules linked in: [ 36.537949][ T1232] [ 36.541498][ T748] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e7320c019 [ 36.543976][ T906] __x64_sys_exit+0x40/0x40 [ 36.554358][ T960] sock_close+0xb8/0x200 [ 36.556673][ T921] task_work_run+0x127/0x190 [ 36.560688][ T960] ? sock_mmap+0xa0/0xa0 [ 36.565443][ T1113] RSP: 0018:ffffc90001c3fd68 EFLAGS: 00010293 [ 36.572899][ T890] ? fpu__clear_all+0x20/0x20 [ 36.575803][ T1208] [ 36.581155][ T968] Call Trace: [ 36.582791][ T743] RIP: 0033:0x7f52603bd019 [ 36.585930][ T968] pppol2tp_release+0x150/0x2b0 [ 36.590312][ T743] Code: Unable to access opcode bytes at RIP 0x7f52603bcfef. [ 36.595590][ T1195] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.603191][ T742] RBP: 00007f0a0820a00c R08: 0000000000000000 R09: 0000000000000058 [ 36.629370][ T978] pppol2tp_release+0x150/0x2b0 [ 36.630846][ T1079] R13: dffffc0000000000 R14: 000000000cd06460 R15: ffff88810dce9400 [ 36.643589][ T947] __x64_sys_exit+0x40/0x40 [ 36.645231][ T882] ? __kasan_check_read+0x11/0x20 [ 36.648101][ T947] do_syscall_64+0x31/0x40 [ 36.653256][ T913] ? fpu__clear_all+0x20/0x20 [ 36.657820][ T1247] WARNING: CPU: 1 PID: 1247 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.663239][ T978] sock_close+0xb8/0x200 [ 36.672828][ T1251] WARNING: CPU: 1 PID: 1251 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.677915][ T887] task_work_run+0x127/0x190 [ 36.687824][ T1264] ------------[ cut here ]------------ [ 36.691697][ T890] ? __kasan_check_read+0x11/0x20 [ 36.697151][ T1113] RAX: ffffffff842ec3a7 RBX: ffff88812bec5000 RCX: ffff88810bfd4f00 [ 36.702360][ T748] RDX: 00007f5e7306d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.710139][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.718282][ T955] ? put_task_struct+0x90/0x90 [ 36.728357][ T906] do_syscall_64+0x31/0x40 [ 36.735085][ T1083] RBP: ffffc90001947c60 R08: ffff88812e452083 R09: 1ffff11025c8a410 [ 36.737538][ T1232] CPU: 1 PID: 1232 Comm: syz.2.277 Tainted: G B W syzkaller #0 [ 36.746431][ T968] sock_close+0xb8/0x200 [ 36.754709][ T947] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.764810][ T906] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.770704][ T906] RIP: 0033:0x7f5a4c922019 [ 36.774084][ T1179] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.775342][ T1159] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.803041][ T978] ? sock_mmap+0xa0/0xa0 [ 36.807326][ T978] __fput+0x2dc/0x730 [ 36.811311][ T978] ____fput+0x15/0x20 [ 36.813293][ T1264] WARNING: CPU: 1 PID: 1264 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.824405][ T882] __x64_sys_exit+0x40/0x40 [ 36.825713][ T1113] RDX: 0000000000000000 RSI: 0000000007df7100 RDI: 000000000c04eb7d [ 36.837991][ T1079] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.848980][ T921] do_exit+0xa7c/0x24e0 [ 36.853359][ T1208] CPU: 1 PID: 1208 Comm: syz.2.263 Tainted: G B W syzkaller #0 [ 36.853466][ T887] do_exit+0xa7c/0x24e0 [ 36.862325][ T921] ? __kasan_check_write+0x14/0x20 [ 36.867225][ T913] ? __kasan_check_read+0x11/0x20 [ 36.874576][ T1251] Modules linked in: [ 36.878753][ T1036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.880770][ T921] ? switch_fpu_return+0x19c/0x330 [ 36.887306][ T748] RBP: 00007f5e732a300c R08: 0000000000000000 R09: 0000000000000058 [ 36.892996][ T947] RIP: 0033:0x7f5e7320c019 [ 36.900225][ T890] __x64_sys_exit+0x40/0x40 [ 36.905596][ T960] __fput+0x2dc/0x730 [ 36.913891][ T1244] CPU: 1 PID: 1244 Comm: syz.4.280 Tainted: G B W syzkaller #0 2026/08/02 18:52:45 executed programs: 291 [ 36.914858][ T1203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.922875][ T1247] Modules linked in: [ 36.922894][ T1247] CPU: 1 PID: 1247 Comm: syz.0.276 Tainted: G B W syzkaller #0 [ 36.922900][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.922923][ T1247] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.922940][ T1247] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.933582][ T1083] R10: dffffc0000000000 R11: ffffed1025c8a411 R12: dffffc0000000000 [ 36.946634][ T1264] Modules linked in: [ 36.956991][ T1179] RSP: 0018:ffffc90001d5fc40 EFLAGS: 00010293 [ 36.983409][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.991039][ T882] do_syscall_64+0x31/0x40 [ 36.994304][ T906] Code: Unable to access opcode bytes at RIP 0x7f5a4c921fef. [ 37.000715][ T968] ? sock_mmap+0xa0/0xa0 [ 37.015205][ T1113] RBP: ffffc90001c3fd88 R08: ffff88812bec5083 R09: 1ffff110257d8a10 [ 37.015212][ T1113] R10: dffffc0000000000 R11: ffffed10257d8a11 R12: dffffc0000000000 [ 37.015228][ T1113] R13: dffffc0000000000 R14: 0000000007df7100 R15: ffff88811cd47800 [ 37.024041][ T955] ? fpu__clear_all+0x20/0x20 [ 37.026974][ T960] ____fput+0x15/0x20 [ 37.036357][ T743] RSP: 002b:00007f526021def8 EFLAGS: 00000246 [ 37.042953][ T1079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.042970][ T1079] CR2: 00007f5260646dac CR3: 000000010d53c000 CR4: 00000000003506a0 [ 37.051409][ T1036] CR2: 00007f5260378130 CR3: 000000010d629000 CR4: 00000000003506a0 [ 37.061771][ T1295] ------------[ cut here ]------------ [ 37.066861][ T913] __x64_sys_exit+0x40/0x40 [ 37.076238][ T1298] ------------[ cut here ]------------ [ 37.086562][ T887] ? __kasan_check_write+0x14/0x20 [ 37.090858][ T1159] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.096518][ T743] ORIG_RAX: 000000000000003c [ 37.099484][ T947] Code: Unable to access opcode bytes at RIP 0x7f5e7320bfef. [ 37.099490][ T947] RSP: 002b:00007f5e7306cef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.105345][ T913] do_syscall_64+0x31/0x40 [ 37.121914][ T1197] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.129892][ T890] do_syscall_64+0x31/0x40 [ 37.134693][ T748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.143036][ T1232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.153956][ T1247] RSP: 0018:ffffc9000196fc40 EFLAGS: 00010293 [ 37.158935][ T1203] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.172746][ T1251] CPU: 1 PID: 1251 Comm: syz.4.281 Tainted: G B W syzkaller #0 [ 37.173759][ T882] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.183842][ T1294] ------------[ cut here ]------------ [ 37.198747][ T887] ? switch_fpu_return+0x19c/0x330 [ 37.205505][ T832] RSP: 002b:00007f526021def8 EFLAGS: 00000246 [ 37.212224][ T1179] [ 37.217798][ T1247] [ 37.221670][ T1179] RAX: ffffffff842ec3a7 RBX: ffff88810f950000 RCX: ffff88812b6bcf00 [ 37.227780][ T1113] FS: 0000555583357500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.230568][ T955] ? __kasan_check_read+0x11/0x20 [ 37.232627][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.241004][ T968] __fput+0x2dc/0x730 [ 37.249679][ T947] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e7320c019 [ 37.254657][ T955] __x64_sys_exit+0x40/0x40 [ 37.254674][ T955] do_syscall_64+0x31/0x40 [ 37.265035][ T743] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 37.272370][ T1232] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.278007][ T1159] RSP: 0018:ffffc900017efc40 EFLAGS: 00010293 [ 37.281321][ T1203] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.285994][ T1298] WARNING: CPU: 1 PID: 1298 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.294193][ T890] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.302690][ T1113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.316432][ T968] ____fput+0x15/0x20 [ 37.329553][ T1295] WARNING: CPU: 1 PID: 1295 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.342549][ T906] RSP: 002b:00007f5a4c782ef8 EFLAGS: 00000246 [ 37.343796][ T1036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.349941][ T906] ORIG_RAX: 000000000000003c [ 37.354007][ T1083] R13: dffffc0000000000 R14: 000000000f1ea300 R15: ffff88811cd46c00 [ 37.354017][ T1083] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.354023][ T1083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.354029][ T1083] CR2: 00007fc5e5aff060 CR3: 000000012c313000 CR4: 00000000003506a0 [ 37.354038][ T1083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.354043][ T1083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.354051][ T1083] Call Trace: [ 37.354066][ T1083] pppol2tp_release+0x150/0x2b0 [ 37.354084][ T1083] sock_close+0xb8/0x200 [ 37.365850][ T1208] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.370276][ T921] ? put_task_struct+0x90/0x90 [ 37.392129][ T882] RIP: 0033:0x7fc5e4d45019 [ 37.403952][ T1079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.410980][ T887] ? put_task_struct+0x90/0x90 [ 37.417227][ T1247] RAX: ffffffff842ec3a7 RBX: ffff88810ad9e000 RCX: ffff88812d9a0000 [ 37.429667][ T1203] RSP: 0018:ffffc90001e97c40 EFLAGS: 00010293 [ 37.433457][ T742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.439162][ T968] task_work_run+0x127/0x190 [ 37.439388][ T748] R13: 00007f5e73494038 R14: 00007f5e73493fa0 R15: 00007fff24fe9fe8 [ 37.445073][ T1179] RDX: 0000000000000000 RSI: 000000000ccf25e0 RDI: 000000000c04eb7d [ 37.450099][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.455904][ T1310] ------------[ cut here ]------------ [ 37.461235][ T742] R13: 00007f0a083fb038 R14: 00007f0a083fafa0 R15: 00007ffd7023b058 [ 37.467472][ T1203] [ 37.473005][ T1159] [ 37.481313][ T968] do_exit+0xa7c/0x24e0 [ 37.486518][ T913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.494936][ T1195] RSP: 0018:ffffc90001eb7c40 EFLAGS: 00010293 [ 37.499102][ T1264] [ 37.507320][ T955] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.515125][ T748] ---[ end trace 675d796f16e540b3 ]--- [ 37.542269][ T1232] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.544410][ T1244] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.547750][ T1232] RSP: 0018:ffffc900020c7c40 EFLAGS: 00010293 [ 37.555185][ T1036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.583375][ T906] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5a4c922019 [ 37.594452][ T1083] ? sock_mmap+0xa0/0xa0 [ 37.600761][ T960] task_work_run+0x127/0x190 [ 37.609229][ T1079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.614695][ T968] ? __kasan_check_write+0x14/0x20 [ 37.622624][ T832] ORIG_RAX: 000000000000003c [ 37.627023][ T1179] RBP: ffffc90001d5fc60 R08: ffff88810f950083 R09: 1ffff11021f2a010 [ 37.631391][ T832] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f52603bd019 [ 37.659103][ T1310] WARNING: CPU: 0 PID: 1310 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.667370][ T913] RIP: 0033:0x7f5e7320c019 [ 37.677356][ T882] Code: Unable to access opcode bytes at RIP 0x7fc5e4d44fef. [ 37.681618][ T742] ---[ end trace 675d796f16e540b4 ]--- [ 37.690379][ T978] task_work_run+0x127/0x190 [ 37.694413][ T1298] Modules linked in: [ 37.699303][ T743] RDX: 00007f526021e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.703054][ T913] Code: Unable to access opcode bytes at RIP 0x7f5e7320bfef. [ 37.703062][ T913] RSP: 002b:00007f5e7306cef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.703076][ T913] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e7320c019 [ 37.703082][ T913] RDX: 00007f5e7306d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.703089][ T913] RBP: 00007f5e732a300c R08: 0000000000000000 R09: 0000000000000058 [ 37.703095][ T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.703102][ T913] R13: 00007f5e73494038 R14: 00007f5e73493fa0 R15: 00007fff24fe9fe8 [ 37.703118][ T913] ---[ end trace 675d796f16e540b5 ]--- [ 37.712037][ T968] ? switch_fpu_return+0x19c/0x330 [ 37.719105][ T890] RIP: 0033:0x7fc5e4d45019 [ 37.729689][ T1195] [ 37.742566][ T1244] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.749250][ T1294] WARNING: CPU: 0 PID: 1294 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.752109][ T1113] CR2: 00007fc5e4b85d58 CR3: 0000000105bf8000 CR4: 00000000003506a0 [ 37.760198][ T1203] RAX: ffffffff842ec3a7 RBX: ffff88810ad35800 RCX: ffff88812c3a4f00 [ 37.770882][ T1247] RDX: 0000000000000000 RSI: 000000002a90ca00 RDI: 000000000c04eb7d [ 37.773673][ T1208] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.784555][ T1298] CPU: 1 PID: 1298 Comm: syz.4.294 Tainted: G B W syzkaller #0 [ 37.803165][ T1321] ------------[ cut here ]------------ [ 37.806906][ T1083] __fput+0x2dc/0x730 [ 37.816911][ T887] ? fpu__clear_all+0x20/0x20 [ 37.843293][ T1159] RAX: ffffffff842ec3a7 RBX: ffff88810f1a1800 RCX: ffff888128f9cf00 [ 37.859848][ T947] RDX: 00007f5e7306d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.869328][ T1332] ------------[ cut here ]------------ [ 37.875352][ T978] do_exit+0xa7c/0x24e0 [ 37.878364][ T1113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.883411][ T1251] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.890741][ T1332] WARNING: CPU: 1 PID: 1332 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.903159][ T1197] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.908355][ T1113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.908516][ T955] RIP: 0033:0x7fc5e4d45019 [ 37.917707][ T1079] Call Trace: [ 37.923280][ T947] RBP: 00007f5e732a300c R08: 0000000000000000 R09: 0000000000000058 [ 37.938208][ T1247] RBP: ffffc9000196fc60 R08: ffff88810ad9e083 R09: 1ffff110215b3c10 [ 37.955144][ T1197] RSP: 0018:ffffc90001bcfc40 EFLAGS: 00010293 [ 37.969911][ T1232] [ 37.972876][ T1179] R10: dffffc0000000000 R11: ffffed1021f2a011 R12: dffffc0000000000 [ 37.980230][ T1295] Modules linked in: [ 38.004854][ T1232] RAX: ffffffff842ec3a7 RBX: ffff88812cc08000 RCX: ffff888126294f00 [ 38.013408][ T978] ? __kasan_check_write+0x14/0x20 [ 38.017963][ T1113] Call Trace: [ 38.023493][ T968] ? put_task_struct+0x90/0x90