Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. 2026/06/22 20:22:00 parsed 1 programs 2026/06/22 20:22:00 serving rpc on tcp://37879 [ 25.917196][ T24] audit: type=1400 audit(1782159720.840:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.938842][ T24] audit: type=1400 audit(1782159720.840:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.958753][ T24] audit: type=1400 audit(1782159720.840:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.854557][ T24] audit: type=1400 audit(1782159721.770:67): avc: denied { mounton } for pid=294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.858385][ T294] cgroup: Unknown subsys name 'net' [ 26.877445][ T24] audit: type=1400 audit(1782159721.780:68): avc: denied { mount } for pid=294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.904662][ T24] audit: type=1400 audit(1782159721.800:69): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.905203][ T294] cgroup: Unknown subsys name 'devices' [ 27.047328][ T294] cgroup: Unknown subsys name 'hugetlb' [ 27.052959][ T294] cgroup: Unknown subsys name 'rlimit' [ 27.202788][ T24] audit: type=1400 audit(1782159722.120:70): avc: denied { setattr } for pid=294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.226007][ T24] audit: type=1400 audit(1782159722.120:71): avc: denied { create } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.246926][ T24] audit: type=1400 audit(1782159722.120:72): avc: denied { write } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.267305][ T24] audit: type=1400 audit(1782159722.120:73): avc: denied { read } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.292235][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.332420][ T294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.835599][ T304] request_module fs-gadgetfs succeeded, but still no fs? [ 27.848156][ T305] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 28.137517][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.144614][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.153218][ T319] device bridge_slave_0 entered promiscuous mode [ 28.175116][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.197221][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.204758][ T319] device bridge_slave_1 entered promiscuous mode [ 28.414152][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.421296][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.428649][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.435739][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.512113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.525445][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.537453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.560787][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.569308][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.576399][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.583939][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.592379][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.599620][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.607248][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.615298][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.631247][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.643989][ T319] device veth0_vlan entered promiscuous mode [ 28.661062][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.670308][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.679015][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.692253][ T319] device veth1_macvtap entered promiscuous mode [ 28.700069][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/06/22 20:22:03 executed programs: 0 [ 28.711968][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.726004][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.929235][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.936475][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.943818][ T366] device bridge_slave_0 entered promiscuous mode [ 28.952202][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.959440][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.967060][ T366] device bridge_slave_1 entered promiscuous mode [ 29.006079][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.013239][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.020889][ T373] device bridge_slave_0 entered promiscuous mode [ 29.030604][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.037706][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.045136][ T373] device bridge_slave_1 entered promiscuous mode [ 29.063919][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.071117][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.078568][ T368] device bridge_slave_0 entered promiscuous mode [ 29.109556][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.116791][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.124255][ T368] device bridge_slave_1 entered promiscuous mode [ 29.141631][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.148751][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.156368][ T372] device bridge_slave_0 entered promiscuous mode [ 29.165884][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.172949][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.180497][ T372] device bridge_slave_1 entered promiscuous mode [ 29.198492][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.205622][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.213076][ T369] device bridge_slave_0 entered promiscuous mode [ 29.222618][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.229734][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.237282][ T369] device bridge_slave_1 entered promiscuous mode [ 29.415300][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.422404][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.429750][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.436853][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.450661][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.457845][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.465238][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.472315][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.484661][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.491767][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.499332][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.506386][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.522616][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.529717][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.580727][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.587982][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.595225][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.602838][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610397][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.617715][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.625060][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.633688][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.641196][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.648752][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.656166][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.686240][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.695750][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.704069][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.712897][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.720051][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.727771][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.736895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.745052][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.752244][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.759635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.767530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.775808][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782836][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.790243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.798691][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.805749][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.813120][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.821377][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.829737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.838090][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.845223][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.852777][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.860970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.868056][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.875753][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.883893][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.890975][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.898375][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.906701][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.914195][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.921969][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.944390][ T366] device veth0_vlan entered promiscuous mode [ 29.973090][ T368] device veth0_vlan entered promiscuous mode [ 29.979782][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.989992][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.998572][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.006489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.014164][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.022739][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.030924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.038670][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.046225][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.054208][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.062371][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.070412][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.078499][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.086159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.093577][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.102089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.110458][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.117720][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.140917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.149136][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.157744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.166449][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.174430][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.182824][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.191522][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.198700][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.221027][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.229109][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.238235][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.247080][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.255932][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.264163][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.275156][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.284044][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.297993][ T368] device veth1_macvtap entered promiscuous mode [ 30.306925][ T369] device veth0_vlan entered promiscuous mode [ 30.314792][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.323071][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.331625][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.339884][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.348006][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.360762][ T366] device veth1_macvtap entered promiscuous mode [ 30.377383][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.385124][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.392791][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.401040][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.409641][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.418009][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.426160][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.434369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.442892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.451321][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.459657][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.468089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.476611][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.484882][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.492962][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.501192][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.508789][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.516365][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.523769][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.532583][ T373] device veth0_vlan entered promiscuous mode [ 30.539594][ T372] device veth0_vlan entered promiscuous mode [ 30.555553][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.567432][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.576394][ T391] ================================================================== [ 30.578065][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.584653][ T391] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 30.593501][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.599250][ T391] Write of size 8 at addr ffff8881133e6550 by task syz.2.19/391 [ 30.599253][ T391] [ 30.599298][ T391] CPU: 1 PID: 391 Comm: syz.2.19 Not tainted syzkaller #0 [ 30.624449][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.627637][ T373] device veth1_macvtap entered promiscuous mode [ 30.634536][ T391] Call Trace: [ 30.644107][ T391] __dump_stack+0x21/0x24 [ 30.648473][ T391] dump_stack_lvl+0x1a7/0x208 [ 30.653182][ T391] ? show_regs_print_info+0x18/0x18 [ 30.658416][ T391] ? thaw_kernel_threads+0x220/0x220 [ 30.663730][ T391] ? debug_smp_processor_id+0x17/0x20 [ 30.669370][ T391] print_address_description+0x7f/0x2c0 [ 30.675089][ T391] ? mutex_lock+0x85/0xf0 [ 30.679461][ T391] kasan_report+0x100/0x140 [ 30.683991][ T391] ? mutex_lock+0x85/0xf0 [ 30.688320][ T391] kasan_check_range+0x249/0x2a0 [ 30.693264][ T391] __kasan_check_write+0x14/0x20 [ 30.698202][ T391] mutex_lock+0x85/0xf0 [ 30.702361][ T391] ? mutex_trylock+0xb0/0xb0 [ 30.706950][ T391] ? l2tp_session_put+0xb2/0x1a0 [ 30.711890][ T391] ? l2tp_session_delete+0x3a9/0x4a0 [ 30.717176][ T391] pppol2tp_release+0x178/0x2b0 [ 30.722027][ T391] sock_close+0xb8/0x200 [ 30.726275][ T391] ? sock_mmap+0xa0/0xa0 [ 30.730538][ T391] __fput+0x2dc/0x730 [ 30.734519][ T391] ____fput+0x15/0x20 [ 30.738500][ T391] task_work_run+0x127/0x190 [ 30.743088][ T391] exit_to_user_mode_loop+0xcb/0xe0 [ 30.748329][ T391] exit_to_user_mode_prepare+0x76/0xa0 [ 30.753784][ T391] syscall_exit_to_user_mode+0x1d/0x40 [ 30.759240][ T391] do_syscall_64+0x3d/0x40 [ 30.763654][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.769540][ T391] RIP: 0033:0x7f35a44a7e59 [ 30.773953][ T391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.793566][ T391] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.802095][ T391] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 30.810078][ T391] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.818048][ T391] RBP: 0000000000007741 R08: 0000000000000001 R09: 0000000000000000 [ 30.826017][ T391] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 30.833989][ T391] R13: 00007f35a4720fac R14: 0000000000007775 R15: 00007f35a4720fa0 [ 30.841962][ T391] [ 30.844289][ T391] Allocated by task 392: [ 30.848538][ T391] __kasan_kmalloc+0xd4/0x100 [ 30.853217][ T391] __kmalloc+0x19f/0x330 [ 30.857472][ T391] l2tp_session_create+0x39/0xb60 [ 30.862496][ T391] pppol2tp_connect+0xbf5/0x1640 [ 30.867428][ T391] __sys_connect+0x3ce/0x450 [ 30.872015][ T391] __x64_sys_connect+0x7a/0x90 [ 30.876780][ T391] do_syscall_64+0x31/0x40 [ 30.881198][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.887084][ T391] [ 30.889419][ T391] Freed by task 391: [ 30.893313][ T391] kasan_set_track+0x4a/0x70 [ 30.897907][ T391] kasan_set_free_info+0x23/0x40 [ 30.902929][ T391] ____kasan_slab_free+0x125/0x160 [ 30.908044][ T391] __kasan_slab_free+0x11/0x20 [ 30.912806][ T391] slab_free_freelist_hook+0xc5/0x190 [ 30.918270][ T391] kfree+0xc0/0x270 [ 30.922088][ T391] l2tp_session_put+0xb2/0x1a0 [ 30.926854][ T391] l2tp_session_delete+0x3a9/0x4a0 [ 30.931959][ T391] pppol2tp_release+0x169/0x2b0 [ 30.936812][ T391] sock_close+0xb8/0x200 [ 30.941068][ T391] __fput+0x2dc/0x730 [ 30.945049][ T391] ____fput+0x15/0x20 [ 30.949034][ T391] task_work_run+0x127/0x190 [ 30.953623][ T391] exit_to_user_mode_loop+0xcb/0xe0 [ 30.958821][ T391] exit_to_user_mode_prepare+0x76/0xa0 [ 30.964280][ T391] syscall_exit_to_user_mode+0x1d/0x40 [ 30.969771][ T391] do_syscall_64+0x3d/0x40 [ 30.974297][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.980184][ T391] [ 30.982520][ T391] The buggy address belongs to the object at ffff8881133e6400 [ 30.982520][ T391] which belongs to the cache kmalloc-512 of size 512 [ 30.996577][ T391] The buggy address is located 336 bytes inside of [ 30.996577][ T391] 512-byte region [ffff8881133e6400, ffff8881133e6600) [ 31.009844][ T391] The buggy address belongs to the page: [ 31.015518][ T391] page:ffffea00044cf900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1133e4 [ 31.025776][ T391] head:ffffea00044cf900 order:2 compound_mapcount:0 compound_pincount:0 [ 31.034228][ T391] flags: 0x4000000000010200(slab|head) [ 31.039710][ T391] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 31.048314][ T391] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.057029][ T391] page dumped because: kasan: bad access detected [ 31.063463][ T391] page_owner tracks the page as allocated [ 31.069201][ T391] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 368, ts 30549670341, free_ts 30417592474 [ 31.089950][ T391] prep_new_page+0x176/0x190 [ 31.094580][ T391] get_page_from_freelist+0x225f/0x23f0 [ 31.100145][ T391] __alloc_pages_nodemask+0x29a/0x640 [ 31.105527][ T391] new_slab+0x84/0x3f0 [ 31.109607][ T391] ___slab_alloc+0x2f8/0x4c0 [ 31.114211][ T391] __slab_alloc+0x63/0xa0 [ 31.118561][ T391] __kmalloc+0x1f9/0x330 [ 31.122880][ T391] qdisc_alloc+0x79/0x720 [ 31.127248][ T391] qdisc_create_dflt+0x6b/0x390 [ 31.132111][ T391] dev_activate+0x292/0x11c0 [ 31.136713][ T391] __dev_open+0x3e9/0x500 [ 31.141060][ T391] __dev_change_flags+0x1e4/0x6a0 [ 31.146093][ T391] dev_change_flags+0x80/0x1a0 [ 31.150870][ T391] do_setlink+0xb19/0x29a0 [ 31.155303][ T391] rtnl_newlink+0x13e6/0x1830 [ 31.159997][ T391] rtnetlink_rcv_msg+0x9e9/0xca0 [ 31.164946][ T391] page last free stack trace: [ 31.169660][ T391] __free_pages_ok+0x80b/0x830 [ 31.174439][ T391] __free_pages+0xd8/0x390 [ 31.178869][ T391] __free_slab+0xcf/0x190 [ 31.183209][ T391] unfreeze_partials+0x150/0x180 [ 31.188162][ T391] put_cpu_partial+0xc1/0x180 [ 31.192848][ T391] __slab_free+0x2c9/0x3a0 [ 31.197359][ T391] ___cache_free+0x10e/0x130 [ 31.201966][ T391] qlink_free+0x50/0x90 [ 31.206138][ T391] qlist_free_all+0x5f/0xb0 [ 31.210661][ T391] kasan_quarantine_reduce+0x14a/0x160 [ 31.216131][ T391] __kasan_slab_alloc+0x2f/0xe0 [ 31.221009][ T391] slab_post_alloc_hook+0x5d/0x2f0 [ 31.226130][ T391] __kmalloc+0x17b/0x330 [ 31.230384][ T391] fib6_info_alloc+0x34/0xe0 [ 31.234983][ T391] ip6_route_info_create+0x4c7/0x1450 [ 31.240540][ T391] ip6_route_add+0x27/0x130 [ 31.245138][ T391] [ 31.247476][ T391] Memory state around the buggy address: [ 31.253123][ T391] ffff8881133e6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.261201][ T391] ffff8881133e6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.269278][ T391] >ffff8881133e6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.277349][ T391] ^ [ 31.284201][ T391] ffff8881133e6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.292285][ T391] ffff8881133e6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.300360][ T391] ================================================================== [ 31.308438][ T391] Disabling lock debugging due to kernel taint [ 31.321761][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 31.321773][ T24] audit: type=1400 audit(1782159726.240:108): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.357459][ T369] device veth1_macvtap entered promiscuous mode [ 31.372496][ T372] device veth1_macvtap entered promiscuous mode [ 31.387760][ T24] audit: type=1400 audit(1782159726.240:109): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.393924][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.420181][ T24] audit: type=1400 audit(1782159726.240:110): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.444649][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.453713][ T398] ------------[ cut here ]------------ [ 31.459293][ T398] WARNING: CPU: 0 PID: 398 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.468034][ T24] audit: type=1400 audit(1782159726.240:111): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.471802][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.491587][ T24] audit: type=1400 audit(1782159726.240:112): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.500165][ T398] Modules linked in: [ 31.518492][ T24] audit: type=1400 audit(1782159726.240:113): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.526563][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.555178][ T24] audit: type=1400 audit(1782159726.240:114): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.558675][ T398] [ 31.579573][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.582737][ T398] CPU: 0 PID: 398 Comm: syz.2.23 Tainted: G B syzkaller #0 [ 31.590625][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.608758][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.612701][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.629683][ T398] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.636433][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.646785][ T398] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 31.654727][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.668992][ T398] RSP: 0018:ffffc9000365fd68 EFLAGS: 00010293 [ 31.686314][ T410] ------------[ cut here ]------------ [ 31.691895][ T410] WARNING: CPU: 0 PID: 410 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.697933][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.702874][ T398] RAX: ffffffff842e97a7 RBX: ffff888114807800 RCX: ffff888114092780 [ 31.710956][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.717968][ T410] Modules linked in: [ 31.726459][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.730456][ T398] RDX: 0000000000000000 RSI: 0000000014804800 RDI: 000000000c04eb7d [ 31.741310][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.745866][ T410] CPU: 0 PID: 410 Comm: syz.5.29 Tainted: G B syzkaller #0 [ 31.761741][ T398] RBP: ffffc9000365fd88 R08: ffff888114807883 R09: 1ffff11022900f10 [ 31.772451][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.795082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.803202][ T410] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.809646][ T410] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 31.812840][ T398] R10: dffffc0000000000 R11: ffffed1022900f11 R12: dffffc0000000000 [ 31.837868][ T410] RSP: 0018:ffffc9000366fd68 EFLAGS: 00010293 [ 31.844180][ T410] RAX: ffffffff842e97a7 RBX: ffff888114344800 RCX: ffff888114b062c0 [ 31.844962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.853748][ T410] RDX: 0000000000000000 RSI: 0000000013a61f80 RDI: 000000000c04eb7d [ 31.864568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.876991][ T410] RBP: ffffc9000366fd88 R08: ffff888114344883 R09: 1ffff11022868910 [ 31.885062][ T410] R10: dffffc0000000000 R11: ffffed1022868911 R12: dffffc0000000000 [ 31.893552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.901862][ T410] R13: dffffc0000000000 R14: 0000000013a61f80 R15: ffff888114aaf800 [ 31.904772][ T398] R13: dffffc0000000000 R14: 0000000014804800 R15: ffff888114136c00 [ 31.915883][ T410] FS: 0000555579f33500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.927600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.928074][ T416] ------------[ cut here ]------------ [ 31.936399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.942337][ T398] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.958472][ T410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.958481][ T410] CR2: 0000001b33f63fff CR3: 0000000114217000 CR4: 00000000003506b0 [ 31.958491][ T410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.958498][ T410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.958502][ T410] Call Trace: [ 31.958519][ T410] pppol2tp_release+0x150/0x2b0 [ 31.958531][ T410] sock_close+0xb8/0x200 [ 31.958542][ T410] ? sock_mmap+0xa0/0xa0 [ 31.958553][ T410] __fput+0x2dc/0x730 [ 31.958565][ T410] ____fput+0x15/0x20 [ 31.958575][ T410] task_work_run+0x127/0x190 [ 31.958588][ T410] exit_to_user_mode_loop+0xcb/0xe0 [ 31.958598][ T410] exit_to_user_mode_prepare+0x76/0xa0 [ 31.958610][ T410] syscall_exit_to_user_mode+0x1d/0x40 [ 31.958620][ T410] do_syscall_64+0x3d/0x40 [ 31.958630][ T410] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.958643][ T410] RIP: 0033:0x7fba6135ce59 [ 31.958653][ T410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.958659][ T410] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.958672][ T410] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 31.958679][ T410] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.958685][ T410] RBP: 0000000000007ba1 R08: 0000000000000001 R09: 0000000000000000 [ 31.958693][ T410] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 31.958700][ T410] R13: 00007fba615d5fac R14: 0000000000007bd4 R15: 00007fba615d5fa0 [ 31.958709][ T410] ---[ end trace 862fe4712b0394fc ]--- [ 31.959573][ T416] WARNING: CPU: 1 PID: 416 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.999307][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.007123][ T416] Modules linked in: [ 32.024618][ T398] CR2: 0000200000000000 CR3: 0000000114211000 CR4: 00000000003506b0 [ 32.029985][ T416] [ 32.055368][ T398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.079477][ T416] CPU: 1 PID: 416 Comm: syz.4.21 Tainted: G B W syzkaller #0 [ 32.093472][ T398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.096356][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.128809][ T398] Call Trace: [ 32.155285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.156308][ T416] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.164872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.206055][ T416] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 32.221849][ T398] pppol2tp_release+0x150/0x2b0 [ 32.242370][ T398] sock_close+0xb8/0x200 [ 32.248008][ T398] ? sock_mmap+0xa0/0xa0 [ 32.252322][ T398] __fput+0x2dc/0x730 [ 32.257132][ T398] ____fput+0x15/0x20 [ 32.261159][ T398] task_work_run+0x127/0x190 [ 32.266342][ T398] exit_to_user_mode_loop+0xcb/0xe0 [ 32.271593][ T398] exit_to_user_mode_prepare+0x76/0xa0 [ 32.280483][ T398] syscall_exit_to_user_mode+0x1d/0x40 [ 32.286141][ T398] do_syscall_64+0x3d/0x40 [ 32.290604][ T398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.296588][ T398] RIP: 0033:0x7f35a44a7e59 [ 32.301038][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.321172][ T398] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.329790][ T398] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 32.338463][ T398] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.348174][ T398] RBP: 0000000000007ab0 R08: 0000000000000001 R09: 0000000000000000 [ 32.358207][ T435] ------------[ cut here ]------------ [ 32.359597][ T398] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 32.371774][ T398] R13: 00007f35a4720fac R14: 0000000000007ae2 R15: 00007f35a4720fa0 [ 32.373745][ T435] WARNING: CPU: 0 PID: 435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.379827][ T398] ---[ end trace 862fe4712b0394fd ]--- [ 32.383084][ T416] RSP: 0018:ffffc900036dfd68 EFLAGS: 00010293 [ 32.417807][ T435] Modules linked in: [ 32.421783][ T435] CPU: 1 PID: 435 Comm: syz.0.17 Tainted: G B W syzkaller #0 [ 32.444836][ T416] RAX: ffffffff842e97a7 RBX: ffff88811550f800 RCX: ffff888114b02780 [ 32.460641][ T416] RDX: 0000000000000000 RSI: 0000000013b46200 RDI: 000000000c04eb7d [ 32.469669][ T453] ------------[ cut here ]------------ [ 32.475239][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.485813][ T453] WARNING: CPU: 1 PID: 453 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.496215][ T416] RBP: ffffc900036dfd88 R08: ffff88811550f883 R09: 1ffff11022aa1f10 [ 32.504224][ T416] R10: dffffc0000000000 R11: ffffed1022aa1f11 R12: dffffc0000000000 [ 32.512822][ T453] Modules linked in: [ 32.518231][ T435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.524681][ T453] CPU: 1 PID: 453 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 32.535200][ T435] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 32.558947][ T416] R13: dffffc0000000000 R14: 0000000013b46200 R15: ffff888115264000 [ 32.569443][ T463] ------------[ cut here ]------------ [ 32.574961][ T463] WARNING: CPU: 1 PID: 463 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.585317][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.598006][ T416] FS: 0000555562655500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.607344][ T453] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.613765][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.620756][ T435] RSP: 0018:ffffc9000379fd68 EFLAGS: 00010293 [ 32.627394][ T453] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 32.648238][ T416] CR2: 00007fba61232780 CR3: 000000012a14e000 CR4: 00000000003506a0 [ 32.660445][ T435] RAX: ffffffff842e97a7 RBX: ffff888115b0d800 RCX: ffff8881154793c0 [ 32.665612][ T463] Modules linked in: [ 32.669276][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.672551][ T463] CPU: 0 PID: 463 Comm: syz.5.44 Tainted: G B W syzkaller #0 [ 32.672558][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.672575][ T463] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.672608][ T463] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 32.682280][ T435] RDX: 0000000000000000 RSI: 0000000012740e60 RDI: 000000000c04eb7d [ 32.731054][ T463] RSP: 0018:ffffc900038dfd68 EFLAGS: 00010293 [ 32.735949][ T453] RSP: 0018:ffffc900037ffd68 EFLAGS: 00010293 [ 32.741549][ T463] RAX: ffffffff842e97a7 RBX: ffff888115df0800 RCX: ffff8881160113c0 [ 32.748132][ T453] RAX: ffffffff842e97a7 RBX: ffff888115df4000 RCX: ffff888115d23b40 [ 32.755572][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.768092][ T453] RDX: 0000000000000000 RSI: 00000000141aa180 RDI: 000000000c04eb7d [ 32.775828][ T463] RDX: 0000000000000000 RSI: 00000000141aa860 RDI: 000000000c04eb7d [ 32.787969][ T435] RBP: ffffc9000379fd88 R08: ffff888115b0d883 R09: 1ffff11022b61b10 [ 32.787978][ T435] R10: dffffc0000000000 R11: ffffed1022b61b11 R12: dffffc0000000000 [ 32.787987][ T435] R13: dffffc0000000000 R14: 0000000012740e60 R15: ffff8881159f1400 [ 32.787996][ T435] FS: 000055559501e500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.788031][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.800927][ T453] RBP: ffffc900037ffd88 R08: ffff888115df4083 R09: 1ffff11022bbe810 [ 32.806839][ T435] CR2: 00007fba61232780 CR3: 0000000112593000 CR4: 00000000003506a0 [ 32.845914][ T416] Call Trace: [ 32.849256][ T416] pppol2tp_release+0x150/0x2b0 [ 32.856330][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.863892][ T453] R10: dffffc0000000000 R11: ffffed1022bbe811 R12: dffffc0000000000 [ 32.864668][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.873552][ T416] sock_close+0xb8/0x200 [ 32.881207][ T435] Call Trace: [ 32.886565][ T453] R13: dffffc0000000000 R14: 00000000141aa180 R15: ffff888115b37000 [ 32.889045][ T435] pppol2tp_release+0x150/0x2b0 [ 32.896910][ T463] RBP: ffffc900038dfd88 R08: ffff888115df0883 R09: 1ffff11022bbe110 [ 32.903227][ T435] sock_close+0xb8/0x200 [ 32.910768][ T416] ? sock_mmap+0xa0/0xa0 [ 32.918800][ T435] ? sock_mmap+0xa0/0xa0 [ 32.923134][ T435] __fput+0x2dc/0x730 [ 32.927329][ T435] ____fput+0x15/0x20 [ 32.931440][ T435] task_work_run+0x127/0x190 [ 32.937400][ T453] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.939412][ T435] exit_to_user_mode_loop+0xcb/0xe0 [ 32.948038][ T416] __fput+0x2dc/0x730 [ 32.955621][ T435] exit_to_user_mode_prepare+0x76/0xa0 [ 32.955635][ T435] syscall_exit_to_user_mode+0x1d/0x40 [ 32.955645][ T435] do_syscall_64+0x3d/0x40 [ 32.955656][ T435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.962495][ T463] R10: dffffc0000000000 R11: ffffed1022bbe111 R12: dffffc0000000000 [ 32.966833][ T435] RIP: 0033:0x7fae2d625e59 [ 32.989984][ T463] R13: dffffc0000000000 R14: 00000000141aa860 R15: ffff888115787800 [ 32.990029][ T463] FS: 0000555579f33500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.003020][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.009636][ T416] ____fput+0x15/0x20 [ 33.018682][ T416] task_work_run+0x127/0x190 [ 33.019473][ T453] CR2: 00007f1572ef1060 CR3: 0000000112748000 CR4: 00000000003506b0 [ 33.023849][ T416] exit_to_user_mode_loop+0xcb/0xe0 [ 33.039943][ T435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.045090][ T463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.067351][ T416] exit_to_user_mode_prepare+0x76/0xa0 [ 33.075713][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.076026][ T416] syscall_exit_to_user_mode+0x1d/0x40 [ 33.093718][ T416] do_syscall_64+0x3d/0x40 [ 33.098357][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.099976][ T463] CR2: 0000555577e04908 CR3: 0000000115fd3000 CR4: 00000000003506b0 [ 33.107830][ T435] RSP: 002b:00007fff831075a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.115909][ T416] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.125615][ T453] Call Trace: [ 33.129710][ T416] RIP: 0033:0x7f7b3e2f0e59 [ 33.137154][ T463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.143758][ T453] pppol2tp_release+0x150/0x2b0 [ 33.153218][ T416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.168381][ T453] sock_close+0xb8/0x200 [ 33.175201][ T463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.178182][ T435] RAX: 0000000000000000 RBX: 00007fff83107690 RCX: 00007fae2d625e59 [ 33.186173][ T463] Call Trace: [ 33.196848][ T453] ? sock_mmap+0xa0/0xa0 [ 33.201209][ T453] __fput+0x2dc/0x730 [ 33.202592][ T416] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.207042][ T435] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.215172][ T463] pppol2tp_release+0x150/0x2b0 [ 33.222443][ T453] ____fput+0x15/0x20 [ 33.230262][ T416] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 33.239814][ T463] sock_close+0xb8/0x200 [ 33.244183][ T416] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.251272][ T453] task_work_run+0x127/0x190 [ 33.253536][ T463] ? sock_mmap+0xa0/0xa0 [ 33.257621][ T453] exit_to_user_mode_loop+0xcb/0xe0 [ 33.267148][ T463] __fput+0x2dc/0x730 [ 33.269656][ T435] RBP: 0000000000007e39 R08: 0000000000000001 R09: 0000000000000000 [ 33.271215][ T463] ____fput+0x15/0x20 [ 33.280670][ T453] exit_to_user_mode_prepare+0x76/0xa0 [ 33.285189][ T416] RBP: 0000000000007c85 R08: 0000000000000001 R09: 0000000000000000 [ 33.289237][ T435] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff831076d0 [ 33.299097][ T463] task_work_run+0x127/0x190 [ 33.306283][ T453] syscall_exit_to_user_mode+0x1d/0x40 [ 33.310781][ T416] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 33.315384][ T435] R13: 00007fae2d89efac R14: 0000000000007e74 R15: 00007fae2d89efa0 [ 33.325114][ T463] exit_to_user_mode_loop+0xcb/0xe0 [ 33.337522][ T416] R13: 00007f7b3e569fac R14: 0000000000007cc5 R15: 00007f7b3e569fa0 [ 33.350522][ T453] do_syscall_64+0x3d/0x40 [ 33.351498][ T463] exit_to_user_mode_prepare+0x76/0xa0 [ 33.360492][ T453] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.360548][ T453] RIP: 0033:0x7f35a44a7e59 [ 33.367473][ T416] ---[ end trace 862fe4712b0394fe ]--- [ 33.378108][ T435] ---[ end trace 862fe4712b0394ff ]--- [ 33.383806][ T453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.396471][ T463] syscall_exit_to_user_mode+0x1d/0x40 [ 33.414508][ T486] ------------[ cut here ]------------ [ 33.414529][ T488] ------------[ cut here ]------------ [ 33.425841][ T463] do_syscall_64+0x3d/0x40 [ 33.428514][ T486] WARNING: CPU: 1 PID: 486 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.431873][ T463] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.442662][ T453] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 [ 33.446405][ T486] Modules linked in: [ 33.448299][ T488] WARNING: CPU: 0 PID: 488 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.457021][ T486] [ 33.469261][ T453] ORIG_RAX: 00000000000001b4 [ 33.473979][ T453] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 33.482934][ T486] CPU: 1 PID: 486 Comm: syz.6.55 Tainted: G B W syzkaller #0 [ 33.491587][ T453] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.498294][ T463] RIP: 0033:0x7fba6135ce59 [ 33.504088][ T488] Modules linked in: [ 33.507874][ T453] RBP: 0000000000007ea8 R08: 0000000000000001 R09: 0000000000000000 [ 33.516337][ T488] CPU: 1 PID: 488 Comm: syz.4.56 Tainted: G B W syzkaller #0 [ 33.524864][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.529517][ T463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.535710][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.556660][ T463] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.574694][ T463] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 33.577403][ T453] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 33.583909][ T463] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.600154][ T453] R13: 00007f35a4720fac R14: 0000000000007eda R15: 00007f35a4720fa0 [ 33.608758][ T488] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.616681][ T453] ---[ end trace 862fe4712b039500 ]--- [ 33.622252][ T463] RBP: 0000000000007f14 R08: 0000000000000001 R09: 0000000000000000 [ 33.622324][ T486] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.636952][ T463] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 33.636961][ T463] R13: 00007fba615d5fac R14: 0000000000007f47 R15: 00007fba615d5fa0 [ 33.636971][ T463] ---[ end trace 862fe4712b039501 ]--- [ 33.637216][ T488] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 33.652987][ T486] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 33.699862][ T488] RSP: 0018:ffffc900038ffd68 EFLAGS: 00010293 [ 33.706814][ T488] RAX: ffffffff842e97a7 RBX: ffff888112648800 RCX: ffff8881167613c0 [ 33.727006][ T488] RDX: 0000000000000000 RSI: 00000000151ea900 RDI: 000000000c04eb7d [ 33.735262][ T488] RBP: ffffc900038ffd88 R08: ffff888112648883 R09: 1ffff110224c9110 [ 33.743418][ T488] R10: dffffc0000000000 R11: ffffed10224c9111 R12: dffffc0000000000 2026/06/22 20:22:08 executed programs: 57 [ 33.768018][ T488] R13: dffffc0000000000 R14: 00000000151ea900 R15: ffff888112675000 [ 33.776347][ T486] RSP: 0018:ffffc90003977d68 EFLAGS: 00010293 [ 33.786672][ T488] FS: 0000555562655500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.798518][ T486] RAX: ffffffff842e97a7 RBX: ffff888116d7e000 RCX: ffff888116c613c0 [ 33.807194][ T486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 33.822804][ T488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.831546][ T488] CR2: 00007f35a5253060 CR3: 00000001151e9000 CR4: 00000000003506a0 [ 33.842952][ T486] RBP: ffffc90003977d88 R08: ffff888116d7e083 R09: 1ffff11022dafc10 [ 33.856635][ T488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.865000][ T486] R10: dffffc0000000000 R11: ffffed1022dafc11 R12: dffffc0000000000 [ 33.868886][ T524] ------------[ cut here ]------------ [ 33.883661][ T488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.891884][ T486] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888112676400 [ 33.900258][ T488] Call Trace: [ 33.900829][ T528] ------------[ cut here ]------------ [ 33.903582][ T488] pppol2tp_release+0x150/0x2b0 [ 33.903627][ T488] sock_close+0xb8/0x200 [ 33.918455][ T524] WARNING: CPU: 0 PID: 524 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.918697][ T486] FS: 0000555577de9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.937828][ T488] ? sock_mmap+0xa0/0xa0 [ 33.942132][ T488] __fput+0x2dc/0x730 [ 33.946247][ T524] Modules linked in: [ 33.950357][ T524] CPU: 1 PID: 524 Comm: syz.0.73 Tainted: G B W syzkaller #0 [ 33.962405][ T528] WARNING: CPU: 0 PID: 528 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.973213][ T486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.980044][ T528] Modules linked in: [ 33.984106][ T528] CPU: 1 PID: 528 Comm: syz.5.76 Tainted: G B W syzkaller #0 [ 33.995216][ T488] ____fput+0x15/0x20 [ 33.997624][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.010205][ T524] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.010823][ T486] CR2: 00007f35a4309ff8 CR3: 0000000116e26000 CR4: 00000000003506a0 [ 34.024690][ T524] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 34.024699][ T524] RSP: 0018:ffffc90003bc7d68 EFLAGS: 00010293 [ 34.024712][ T524] RAX: ffffffff842e97a7 RBX: ffff888112f37800 RCX: ffff888117d7a780 [ 34.024720][ T524] RDX: 0000000000000000 RSI: 0000000017eb5500 RDI: 000000000c04eb7d [ 34.024729][ T524] RBP: ffffc90003bc7d88 R08: ffff888112f37883 R09: 1ffff110225e6f10 [ 34.024738][ T524] R10: dffffc0000000000 R11: ffffed10225e6f11 R12: dffffc0000000000 [ 34.024745][ T524] R13: dffffc0000000000 R14: 0000000017eb5500 R15: ffff8881172db400 [ 34.024756][ T524] FS: 000055559501e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.024782][ T524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.045415][ T488] task_work_run+0x127/0x190 [ 34.052854][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.058972][ T488] exit_to_user_mode_loop+0xcb/0xe0 [ 34.059018][ T488] exit_to_user_mode_prepare+0x76/0xa0 [ 34.067639][ T528] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.076535][ T524] CR2: 0000200000000000 CR3: 0000000117cb2000 CR4: 00000000003506b0 [ 34.105700][ T488] syscall_exit_to_user_mode+0x1d/0x40 [ 34.107940][ T486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.121593][ T488] do_syscall_64+0x3d/0x40 [ 34.121606][ T488] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.121617][ T488] RIP: 0033:0x7f7b3e2f0e59 [ 34.129009][ T486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.135844][ T528] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 34.139886][ T524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.151028][ T528] RSP: 0018:ffffc90003b5fd68 EFLAGS: 00010293 [ 34.153477][ T486] Call Trace: [ 34.161604][ T488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.166271][ T486] pppol2tp_release+0x150/0x2b0 [ 34.171373][ T528] [ 34.176870][ T524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.183769][ T488] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 [ 34.204480][ T9] device bridge_slave_1 left promiscuous mode [ 34.212107][ T528] RAX: ffffffff842e97a7 RBX: ffff888117e3d800 RCX: ffff888117d2cf00 [ 34.218066][ T486] sock_close+0xb8/0x200 [ 34.280809][ T528] RDX: 0000000000000000 RSI: 000000002bfdbe00 RDI: 000000000c04eb7d [ 34.289140][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.296839][ T528] RBP: ffffc90003b5fd88 R08: ffff888117e3d883 R09: 1ffff11022fc7b10 [ 34.297051][ T9] device bridge_slave_0 left promiscuous mode [ 34.311843][ T528] R10: dffffc0000000000 R11: ffffed1022fc7b11 R12: dffffc0000000000 [ 34.320039][ T528] R13: dffffc0000000000 R14: 000000002bfdbe00 R15: ffff888118027800 [ 34.328072][ T488] ORIG_RAX: 00000000000001b4 [ 34.328082][ T488] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 34.328089][ T488] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.333818][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.356727][ T524] Call Trace: [ 34.360074][ T524] pppol2tp_release+0x150/0x2b0 [ 34.364960][ T524] sock_close+0xb8/0x200 [ 34.369509][ T528] FS: 0000555579f33500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.378603][ T524] ? sock_mmap+0xa0/0xa0 [ 34.382922][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.389626][ T524] __fput+0x2dc/0x730 [ 34.390879][ T488] RBP: 0000000000008262 R08: 0000000000000001 R09: 0000000000000000 [ 34.394722][ T524] ____fput+0x15/0x20 [ 34.406711][ T9] device veth1_macvtap left promiscuous mode [ 34.412868][ T9] device veth0_vlan left promiscuous mode [ 34.418929][ T528] CR2: 00007f35a4309ff8 CR3: 0000000115a71000 CR4: 00000000003506a0 [ 34.437039][ T528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.440692][ T488] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 34.445245][ T524] task_work_run+0x127/0x190 [ 34.463288][ T486] ? sock_mmap+0xa0/0xa0 [ 34.473381][ T486] __fput+0x2dc/0x730 [ 34.477937][ T528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.486119][ T488] R13: 00007f7b3e569fac R14: 0000000000008294 R15: 00007f7b3e569fa0 [ 34.495709][ T486] ____fput+0x15/0x20 [ 34.495714][ T488] ---[ end trace 862fe4712b039502 ]--- [ 34.505581][ T486] task_work_run+0x127/0x190 [ 34.510215][ T486] exit_to_user_mode_loop+0xcb/0xe0 [ 34.515788][ T524] exit_to_user_mode_loop+0xcb/0xe0 [ 34.521033][ T524] exit_to_user_mode_prepare+0x76/0xa0 [ 34.527405][ T528] Call Trace: [ 34.530730][ T528] pppol2tp_release+0x150/0x2b0 [ 34.535906][ T486] exit_to_user_mode_prepare+0x76/0xa0 [ 34.541469][ T528] sock_close+0xb8/0x200 [ 34.556096][ T524] syscall_exit_to_user_mode+0x1d/0x40 [ 34.561738][ T524] do_syscall_64+0x3d/0x40 [ 34.571865][ T556] ------------[ cut here ]------------ [ 34.576419][ T528] ? sock_mmap+0xa0/0xa0 [ 34.579396][ T556] WARNING: CPU: 0 PID: 556 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.581720][ T486] syscall_exit_to_user_mode+0x1d/0x40 [ 34.597962][ T528] __fput+0x2dc/0x730 [ 34.601992][ T528] ____fput+0x15/0x20 [ 34.606512][ T524] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.611445][ T556] Modules linked in: [ 34.612519][ T528] task_work_run+0x127/0x190 [ 34.618725][ T556] [ 34.622334][ T524] RIP: 0033:0x7fae2d625e59 [ 34.627922][ T556] CPU: 0 PID: 556 Comm: syz.2.89 Tainted: G B W syzkaller #0 [ 34.628268][ T528] exit_to_user_mode_loop+0xcb/0xe0 [ 34.647227][ T560] ------------[ cut here ]------------ [ 34.652826][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.655614][ T524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.663897][ T560] WARNING: CPU: 0 PID: 560 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.692875][ T486] do_syscall_64+0x3d/0x40 [ 34.692888][ T528] exit_to_user_mode_prepare+0x76/0xa0 [ 34.692989][ T528] syscall_exit_to_user_mode+0x1d/0x40 [ 34.697866][ T486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.703195][ T528] do_syscall_64+0x3d/0x40 [ 34.710055][ T556] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.726133][ T486] RIP: 0033:0x7f1572145e59 [ 34.726305][ T528] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.730579][ T486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.730587][ T486] RSP: 002b:00007ffcd9982798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.746763][ T524] RSP: 002b:00007fff831075a8 EFLAGS: 00000246 [ 34.756294][ T556] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 34.756311][ T556] RSP: 0018:ffffc90003d37d68 EFLAGS: 00010293 [ 34.776164][ T528] RIP: 0033:0x7fba6135ce59 [ 34.790849][ T560] Modules linked in: [ 34.805277][ T524] ORIG_RAX: 00000000000001b4 [ 34.805310][ T524] RAX: 0000000000000000 RBX: 00007fff83107690 RCX: 00007fae2d625e59 [ 34.810040][ T486] RAX: 0000000000000000 RBX: 00007ffcd9982880 RCX: 00007f1572145e59 [ 34.810047][ T486] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.810054][ T486] RBP: 000000000000823e R08: 0000000000000001 R09: 0000000000000000 [ 34.810061][ T486] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007ffcd99828c0 [ 34.810069][ T486] R13: 00007f15723befac R14: 0000000000008291 R15: 00007f15723befa0 [ 34.810079][ T486] ---[ end trace 862fe4712b039503 ]--- [ 34.814782][ T560] CPU: 0 PID: 560 Comm: syz.4.91 Tainted: G B W syzkaller #0 [ 34.826233][ T524] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.864098][ T556] [ 34.869405][ T528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.875934][ T560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.883366][ T528] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 [ 34.903619][ T556] RAX: ffffffff842e97a7 RBX: ffff888118bd1800 RCX: ffff888118d1bb40 [ 34.925971][ T524] RBP: 0000000000008415 R08: 0000000000000001 R09: 0000000000000000 [ 34.935927][ T524] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff831076d0 [ 34.944210][ T524] R13: 00007fae2d89efac R14: 0000000000008449 R15: 00007fae2d89efa0 [ 34.952240][ T556] RDX: 0000000000000000 RSI: 00000000180a0b20 RDI: 000000000c04eb7d [ 34.952249][ T556] RBP: ffffc90003d37d88 R08: ffff888118bd1883 R09: 1ffff1102317a310 [ 34.952257][ T556] R10: dffffc0000000000 R11: ffffed102317a311 R12: dffffc0000000000 [ 34.952265][ T556] R13: dffffc0000000000 R14: 00000000180a0b20 R15: ffff888118a11800 [ 34.952276][ T556] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.952283][ T556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.952309][ T556] CR2: 00007f15723c0dac CR3: 000000011816e000 CR4: 00000000003506b0 [ 34.962953][ T528] ORIG_RAX: 00000000000001b4 [ 34.968871][ T560] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.977875][ T524] ---[ end trace 862fe4712b039504 ]--- [ 34.985338][ T556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.994344][ T528] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 35.003286][ T560] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 35.016334][ T528] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.040376][ T556] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.041863][ T528] RBP: 000000000000843c R08: 0000000000000001 R09: 0000000000000000 [ 35.062772][ T560] RSP: 0018:ffffc90003c4fd68 EFLAGS: 00010293 [ 35.074013][ T528] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 35.080244][ T556] Call Trace: [ 35.089730][ T528] R13: 00007fba615d5fac R14: 0000000000008470 R15: 00007fba615d5fa0 [ 35.126599][ T575] ------------[ cut here ]------------ [ 35.127705][ T556] pppol2tp_release+0x150/0x2b0 [ 35.132281][ T575] WARNING: CPU: 1 PID: 575 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.146620][ T560] [ 35.148320][ T528] ---[ end trace 862fe4712b039505 ]--- [ 35.155037][ T560] RAX: ffffffff842e97a7 RBX: ffff888119400800 RCX: ffff888118f90000 [ 35.160053][ T575] Modules linked in: [ 35.168251][ T556] sock_close+0xb8/0x200 [ 35.176019][ T578] ------------[ cut here ]------------ [ 35.181550][ T578] WARNING: CPU: 1 PID: 578 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.192131][ T556] ? sock_mmap+0xa0/0xa0 [ 35.196704][ T575] CPU: 1 PID: 575 Comm: syz.0.99 Tainted: G B W syzkaller #0 [ 35.205330][ T556] __fput+0x2dc/0x730 [ 35.209635][ T575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.216456][ T560] RDX: 0000000000000000 RSI: 00000000180a0220 RDI: 000000000c04eb7d [ 35.223349][ T556] ____fput+0x15/0x20 [ 35.232317][ T578] Modules linked in: [ 35.236464][ T578] CPU: 1 PID: 578 Comm: syz.5.101 Tainted: G B W syzkaller #0 [ 35.245213][ T575] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.251830][ T556] task_work_run+0x127/0x190 [ 35.255819][ T560] RBP: ffffc90003c4fd88 R08: ffff888119400883 R09: 1ffff11023280110 [ 35.257536][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.266757][ T560] R10: dffffc0000000000 R11: ffffed1023280111 R12: dffffc0000000000 [ 35.285894][ T575] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 35.307467][ T560] R13: dffffc0000000000 R14: 00000000180a0220 R15: ffff888118b15000 [ 35.310829][ T556] exit_to_user_mode_loop+0xcb/0xe0 [ 35.316220][ T578] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.322715][ T556] exit_to_user_mode_prepare+0x76/0xa0 [ 35.341846][ T560] FS: 0000555562655500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.345540][ T575] RSP: 0018:ffffc90003d9fd68 EFLAGS: 00010293 [ 35.361347][ T556] syscall_exit_to_user_mode+0x1d/0x40 [ 35.367741][ T575] RAX: ffffffff842e97a7 RBX: ffff8881149c8000 RCX: ffff888118ecbb40 [ 35.375507][ T578] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 35.376544][ T556] do_syscall_64+0x3d/0x40 [ 35.399873][ T560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.399908][ T560] CR2: 0000200000000000 CR3: 0000000118830000 CR4: 00000000003506b0 [ 35.407680][ T575] RDX: 0000000000000000 RSI: 0000000029f94a20 RDI: 000000000c04eb7d [ 35.422743][ T575] RBP: ffffc90003d9fd88 R08: ffff8881149c8083 R09: 1ffff11022939010 [ 35.426909][ T560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.432638][ T556] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.445304][ T575] R10: dffffc0000000000 R11: ffffed1022939011 R12: dffffc0000000000 [ 35.453370][ T560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.453375][ T560] Call Trace: [ 35.453393][ T560] pppol2tp_release+0x150/0x2b0 [ 35.453438][ T560] sock_close+0xb8/0x200 [ 35.474310][ T556] RIP: 0033:0x7f35a44a7e59 [ 35.474874][ T578] RSP: 0018:ffffc90003b5fd68 EFLAGS: 00010293 [ 35.479477][ T560] ? sock_mmap+0xa0/0xa0 [ 35.484939][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.506334][ T578] [ 35.510755][ T575] R13: dffffc0000000000 R14: 0000000029f94a20 R15: ffff888119491000 [ 35.518240][ T560] __fput+0x2dc/0x730 [ 35.520874][ T575] FS: 000055559501e500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.524153][ T578] RAX: ffffffff842e97a7 RBX: ffff88811490e800 RCX: ffff888118ec8000 [ 35.533604][ T556] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 [ 35.541085][ T575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.545627][ T560] ____fput+0x15/0x20 [ 35.548310][ T556] ORIG_RAX: 00000000000001b4 [ 35.554290][ T560] task_work_run+0x127/0x190 [ 35.558217][ T575] CR2: 00007f1571fa7ff8 CR3: 0000000117cb0000 CR4: 00000000003506a0 [ 35.564314][ T578] RDX: 0000000000000000 RSI: 0000000029f94d00 RDI: 000000000c04eb7d [ 35.568780][ T556] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 35.576154][ T560] exit_to_user_mode_loop+0xcb/0xe0 [ 35.584562][ T575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.592613][ T578] RBP: ffffc90003b5fd88 R08: ffff88811490e883 R09: 1ffff11022921d10 [ 35.597724][ T575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.606081][ T560] exit_to_user_mode_prepare+0x76/0xa0 [ 35.621116][ T556] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.637090][ T556] RBP: 00000000000086e2 R08: 0000000000000001 R09: 0000000000000000 [ 35.637670][ T578] R10: dffffc0000000000 R11: ffffed1022921d11 R12: dffffc0000000000 [ 35.653154][ T556] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 35.653163][ T556] R13: 00007f35a4720fac R14: 000000000000871a R15: 00007f35a4720fa0 [ 35.653172][ T556] ---[ end trace 862fe4712b039506 ]--- [ 35.653357][ T575] Call Trace: [ 35.678926][ T575] pppol2tp_release+0x150/0x2b0 [ 35.682860][ T560] syscall_exit_to_user_mode+0x1d/0x40 [ 35.688686][ T575] sock_close+0xb8/0x200 [ 35.695893][ T575] ? sock_mmap+0xa0/0xa0 [ 35.700248][ T575] __fput+0x2dc/0x730 [ 35.704935][ T595] ------------[ cut here ]------------ [ 35.710661][ T560] do_syscall_64+0x3d/0x40 [ 35.716185][ T578] R13: dffffc0000000000 R14: 0000000029f94d00 R15: ffff888119bfe400 [ 35.716517][ T575] ____fput+0x15/0x20 [ 35.728519][ T595] WARNING: CPU: 1 PID: 595 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.734587][ T560] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.739555][ T575] task_work_run+0x127/0x190 [ 35.749394][ T578] FS: 0000555579f33500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.750464][ T595] Modules linked in: [ 35.758815][ T575] exit_to_user_mode_loop+0xcb/0xe0 [ 35.760277][ T560] RIP: 0033:0x7f7b3e2f0e59 [ 35.763508][ T575] exit_to_user_mode_prepare+0x76/0xa0 [ 35.768708][ T578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.773877][ T595] [ 35.778195][ T560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.785328][ T575] syscall_exit_to_user_mode+0x1d/0x40 [ 35.787546][ T578] CR2: 00007f35a4722dac CR3: 00000001199a4000 CR4: 00000000003506b0 [ 35.807709][ T595] CPU: 1 PID: 595 Comm: syz.6.108 Tainted: G B W syzkaller #0 [ 35.813113][ T560] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 [ 35.831669][ T575] do_syscall_64+0x3d/0x40 [ 35.834786][ T560] ORIG_RAX: 00000000000001b4 [ 35.845486][ T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.848153][ T578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.858112][ T575] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.865889][ T560] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 35.872555][ T595] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.881006][ T578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.886837][ T575] RIP: 0033:0x7fae2d625e59 [ 35.893883][ T560] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.898997][ T595] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 35.917717][ T578] Call Trace: [ 35.930279][ T575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.935764][ T560] RBP: 000000000000872c R08: 0000000000000001 R09: 0000000000000000 [ 35.950937][ T575] RSP: 002b:00007fff831075a8 EFLAGS: 00000246 [ 35.958885][ T595] RSP: 0018:ffffc90003977d68 EFLAGS: 00010293 [ 35.960171][ T578] pppol2tp_release+0x150/0x2b0 [ 35.966885][ T595] [ 35.971982][ T578] sock_close+0xb8/0x200 [ 35.982857][ T575] ORIG_RAX: 00000000000001b4 [ 35.987671][ T560] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 35.987698][ T560] R13: 00007f7b3e569fac R14: 0000000000008760 R15: 00007f7b3e569fa0 [ 35.996706][ T595] RAX: ffffffff842e97a7 RBX: ffff888119869800 RCX: ffff88811a1062c0 [ 36.004932][ T578] ? sock_mmap+0xa0/0xa0 [ 36.012435][ T575] RAX: 0000000000000000 RBX: 00007fff83107690 RCX: 00007fae2d625e59 [ 36.017028][ T578] __fput+0x2dc/0x730 [ 36.028416][ T575] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.037013][ T595] RDX: 0000000000000000 RSI: 0000000029f94300 RDI: 000000000c04eb7d [ 36.039570][ T560] ---[ end trace 862fe4712b039507 ]--- [ 36.046048][ T595] RBP: ffffc90003977d88 R08: ffff888119869883 R09: 1ffff1102330d310 [ 36.059245][ T578] ____fput+0x15/0x20 [ 36.063198][ T575] RBP: 0000000000008912 R08: 0000000000000001 R09: 0000000000000000 [ 36.071328][ T578] task_work_run+0x127/0x190 [ 36.071342][ T578] exit_to_user_mode_loop+0xcb/0xe0 [ 36.071353][ T578] exit_to_user_mode_prepare+0x76/0xa0 [ 36.071373][ T578] syscall_exit_to_user_mode+0x1d/0x40 [ 36.071383][ T578] do_syscall_64+0x3d/0x40 [ 36.071424][ T578] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.077939][ T595] R10: dffffc0000000000 R11: ffffed102330d311 R12: dffffc0000000000 [ 36.094243][ T578] RIP: 0033:0x7fba6135ce59 [ 36.106024][ T575] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff831076d0 [ 36.124832][ T607] ------------[ cut here ]------------ [ 36.131019][ T609] ------------[ cut here ]------------ [ 36.136686][ T607] WARNING: CPU: 0 PID: 607 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.137787][ T575] R13: 00007fae2d89efac R14: 0000000000008944 R15: 00007fae2d89efa0 [ 36.147559][ T609] WARNING: CPU: 0 PID: 609 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.156263][ T595] R13: dffffc0000000000 R14: 0000000029f94300 R15: ffff888119dcbc00 [ 36.167073][ T578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.174207][ T575] ---[ end trace 862fe4712b039508 ]--- [ 36.192856][ T607] Modules linked in: [ 36.199416][ T595] FS: 0000555577de9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.202616][ T607] CPU: 0 PID: 607 Comm: syz.4.115 Tainted: G B W syzkaller #0 [ 36.215840][ T595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.225759][ T609] Modules linked in: [ 36.231006][ T609] CPU: 0 PID: 609 Comm: syz.2.114 Tainted: G B W syzkaller #0 [ 36.241234][ T595] CR2: 000055555bc7c4e8 CR3: 000000011a5fd000 CR4: 00000000003506a0 [ 36.244651][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.260878][ T595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.260886][ T578] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.270059][ T595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.278103][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.296880][ T609] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.304732][ T595] Call Trace: [ 36.308380][ T595] pppol2tp_release+0x150/0x2b0 [ 36.308760][ T609] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 36.313323][ T595] sock_close+0xb8/0x200 [ 36.333121][ T578] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 36.333129][ T578] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.333135][ T578] RBP: 0000000000008943 R08: 0000000000000001 R09: 0000000000000000 [ 36.333143][ T578] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 36.333149][ T578] R13: 00007fba615d5fac R14: 0000000000008976 R15: 00007fba615d5fa0 [ 36.333164][ T578] ---[ end trace 862fe4712b039509 ]--- [ 36.361475][ T595] ? sock_mmap+0xa0/0xa0 [ 36.361487][ T595] __fput+0x2dc/0x730 [ 36.361499][ T595] ____fput+0x15/0x20 [ 36.361510][ T595] task_work_run+0x127/0x190 [ 36.361523][ T595] exit_to_user_mode_loop+0xcb/0xe0 [ 36.361533][ T595] exit_to_user_mode_prepare+0x76/0xa0 [ 36.361546][ T595] syscall_exit_to_user_mode+0x1d/0x40 [ 36.361555][ T595] do_syscall_64+0x3d/0x40 [ 36.361566][ T595] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.361575][ T595] RIP: 0033:0x7f1572145e59 [ 36.361586][ T595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.361593][ T595] RSP: 002b:00007ffcd9982798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.361606][ T595] RAX: 0000000000000000 RBX: 00007ffcd9982880 RCX: 00007f1572145e59 [ 36.361631][ T595] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.379129][ T609] RSP: 0018:ffffc90003fc7d68 EFLAGS: 00010293 [ 36.384119][ T607] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.387704][ T609] [ 36.426723][ T607] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 36.430485][ T595] RBP: 0000000000008b53 R08: 0000000000000001 R09: 0000000000000000 [ 36.432844][ T607] RSP: 0018:ffffc900036dfd68 EFLAGS: 00010293 [ 36.456111][ T595] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007ffcd99828c0 [ 36.467613][ T607] [ 36.479968][ T595] R13: 00007f15723befac R14: 0000000000008b87 R15: 00007f15723befa0 [ 36.497962][ T607] RAX: ffffffff842e97a7 RBX: ffff88811aad9800 RCX: ffff88811a7cbb40 [ 36.513946][ T595] ---[ end trace 862fe4712b03950a ]--- [ 36.549013][ T607] RDX: 0000000000000000 RSI: 000000001a6fcce0 RDI: 000000000c04eb7d [ 36.560629][ T609] RAX: ffffffff842e97a7 RBX: ffff88811aada800 RCX: ffff88811a7ccf00 [ 36.581638][ T609] RDX: 0000000000000000 RSI: 000000001a9f8000 RDI: 000000000c04eb7d [ 36.590258][ T623] ------------[ cut here ]------------ [ 36.596047][ T623] WARNING: CPU: 0 PID: 623 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.606379][ T609] RBP: ffffc90003fc7d88 R08: ffff88811aada883 R09: 1ffff1102355b510 [ 36.612998][ T607] RBP: ffffc900036dfd88 R08: ffff88811aad9883 R09: 1ffff1102355b310 [ 36.614411][ T609] R10: dffffc0000000000 R11: ffffed102355b511 R12: dffffc0000000000 [ 36.631567][ T623] Modules linked in: [ 36.635576][ T623] CPU: 0 PID: 623 Comm: syz.5.122 Tainted: G B W syzkaller #0 [ 36.644230][ T607] R10: dffffc0000000000 R11: ffffed102355b311 R12: dffffc0000000000 [ 36.644581][ T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.662611][ T609] R13: dffffc0000000000 R14: 000000001a9f8000 R15: ffff88811a4fc800 [ 36.670782][ T623] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.677672][ T609] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.684618][ T607] R13: dffffc0000000000 R14: 000000001a6fcce0 R15: ffff88811a9f8000 [ 36.686927][ T623] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 36.715047][ T607] FS: 0000555562655500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.724308][ T609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.730981][ T609] CR2: 00007fba61232780 CR3: 0000000118832000 CR4: 00000000003506b0 [ 36.739048][ T607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.745693][ T609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.753699][ T609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.762345][ T623] RSP: 0018:ffffc9000408fd68 EFLAGS: 00010293 [ 36.768500][ T607] CR2: 00007fba61232780 CR3: 00000001182cf000 CR4: 00000000003506b0 [ 36.777214][ T623] RAX: ffffffff842e97a7 RBX: ffff88811bb81000 RCX: ffff88811a5be2c0 [ 36.785224][ T623] RDX: 0000000000000000 RSI: 000000001a2e7540 RDI: 000000000c04eb7d [ 36.793342][ T607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.801375][ T609] Call Trace: [ 36.804698][ T609] pppol2tp_release+0x150/0x2b0 [ 36.809598][ T623] RBP: ffffc9000408fd88 R08: ffff88811bb81083 R09: 1ffff11023770210 [ 36.817671][ T609] sock_close+0xb8/0x200 [ 36.817678][ T607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.817689][ T607] Call Trace: [ 36.822063][ T609] ? sock_mmap+0xa0/0xa0 [ 36.822075][ T609] __fput+0x2dc/0x730 [ 36.822119][ T609] ____fput+0x15/0x20 [ 36.839202][ T607] pppol2tp_release+0x150/0x2b0 [ 36.844370][ T623] R10: dffffc0000000000 R11: ffffed1023770211 R12: dffffc0000000000 [ 36.859406][ T607] sock_close+0xb8/0x200 [ 36.859688][ T609] task_work_run+0x127/0x190 [ 36.863950][ T607] ? sock_mmap+0xa0/0xa0 [ 36.868464][ T623] R13: dffffc0000000000 R14: 000000001a2e7540 R15: ffff88811a9cc000 [ 36.880685][ T609] exit_to_user_mode_loop+0xcb/0xe0 [ 36.885951][ T607] __fput+0x2dc/0x730 [ 36.886344][ T623] FS: 0000555579f33500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.890002][ T607] ____fput+0x15/0x20 [ 36.899455][ T609] exit_to_user_mode_prepare+0x76/0xa0 [ 36.908656][ T609] syscall_exit_to_user_mode+0x1d/0x40 [ 36.914185][ T623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.921094][ T609] do_syscall_64+0x3d/0x40 [ 36.925612][ T607] task_work_run+0x127/0x190 [ 36.925946][ T623] CR2: 00007fba61232780 CR3: 000000011a667000 CR4: 00000000003506b0 [ 36.930285][ T607] exit_to_user_mode_loop+0xcb/0xe0 [ 36.938699][ T609] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.949655][ T609] RIP: 0033:0x7f35a44a7e59 [ 36.954101][ T609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.973824][ T607] exit_to_user_mode_prepare+0x76/0xa0 [ 36.974449][ T623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.987504][ T607] syscall_exit_to_user_mode+0x1d/0x40 [ 36.993198][ T607] do_syscall_64+0x3d/0x40 [ 36.997739][ T623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.998291][ T607] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.011923][ T607] RIP: 0033:0x7f7b3e2f0e59 [ 37.016544][ T607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.036343][ T623] Call Trace: [ 37.036727][ T609] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.039665][ T623] pppol2tp_release+0x150/0x2b0 [ 37.039703][ T623] sock_close+0xb8/0x200 [ 37.048581][ T609] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 37.065406][ T623] ? sock_mmap+0xa0/0xa0 [ 37.065552][ T607] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 [ 37.069679][ T623] __fput+0x2dc/0x730 [ 37.069685][ T607] ORIG_RAX: 00000000000001b4 [ 37.069715][ T607] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 37.092613][ T623] ____fput+0x15/0x20 [ 37.093911][ T609] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.104715][ T623] task_work_run+0x127/0x190 [ 37.104883][ T609] RBP: 0000000000008cf7 R08: 0000000000000001 R09: 0000000000000000 [ 37.117398][ T623] exit_to_user_mode_loop+0xcb/0xe0 [ 37.118059][ T609] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 37.122676][ T623] exit_to_user_mode_prepare+0x76/0xa0 [ 37.131267][ T607] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.144355][ T609] R13: 00007f35a4720fac R14: 0000000000008d2a R15: 00007f35a4720fa0 [ 37.152404][ T623] syscall_exit_to_user_mode+0x1d/0x40 [ 37.152442][ T623] do_syscall_64+0x3d/0x40 [ 37.158896][ T607] RBP: 0000000000008cf2 R08: 0000000000000001 R09: 0000000000000000 [ 37.170923][ T609] ---[ end trace 862fe4712b03950b ]--- [ 37.176602][ T607] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 37.185510][ T623] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.191454][ T607] R13: 00007f7b3e569fac R14: 0000000000008d2b R15: 00007f7b3e569fa0 [ 37.199708][ T607] ---[ end trace 862fe4712b03950c ]--- [ 37.202531][ T623] RIP: 0033:0x7fba6135ce59 [ 37.223204][ T623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.245318][ T628] ------------[ cut here ]------------ [ 37.250341][ T631] ------------[ cut here ]------------ [ 37.255853][ T628] WARNING: CPU: 1 PID: 628 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.267060][ T632] ------------[ cut here ]------------ [ 37.269705][ T623] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.273311][ T632] WARNING: CPU: 0 PID: 632 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.291585][ T628] Modules linked in: [ 37.297849][ T631] WARNING: CPU: 0 PID: 631 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.300817][ T628] CPU: 1 PID: 628 Comm: syz.6.125 Tainted: G B W syzkaller #0 [ 37.315248][ T631] Modules linked in: [ 37.317630][ T623] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 37.321405][ T631] CPU: 0 PID: 631 Comm: syz.4.127 Tainted: G B W syzkaller #0 [ 37.335681][ T623] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.348343][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.351261][ T632] Modules linked in: [ 37.362944][ T632] CPU: 0 PID: 632 Comm: syz.2.128 Tainted: G B W syzkaller #0 [ 37.368280][ T623] RBP: 0000000000008ec1 R08: 0000000000000001 R09: 0000000000000000 [ 37.381894][ T628] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.383322][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.389464][ T623] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 37.399824][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.408265][ T628] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 37.419400][ T631] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.439882][ T623] R13: 00007fba615d5fac R14: 0000000000008ef4 R15: 00007fba615d5fa0 [ 37.445115][ T632] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.453673][ T623] ---[ end trace 862fe4712b03950d ]--- [ 37.460248][ T631] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 37.465800][ T628] RSP: 0018:ffffc90004017d68 EFLAGS: 00010293 [ 37.486549][ T632] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 37.501012][ T628] [ 37.515467][ T631] RSP: 0018:ffffc90003977d68 EFLAGS: 00010293 [ 37.521663][ T631] RAX: ffffffff842e97a7 RBX: ffff88811bec2000 RCX: ffff88811aa013c0 [ 37.530899][ T628] RAX: ffffffff842e97a7 RBX: ffff88811bec0800 RCX: ffff88811b0da780 [ 37.539359][ T628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 37.544938][ T632] RSP: 0018:ffffc90000cf7d68 EFLAGS: 00010293 [ 37.553688][ T631] RDX: 0000000000000000 RSI: 000000001c81b300 RDI: 000000000c04eb7d [ 37.564287][ T632] RAX: ffffffff842e97a7 RBX: ffff88810eb2e000 RCX: ffff88811aa04f00 [ 37.569390][ T628] RBP: ffffc90004017d88 R08: ffff88811bec0883 R09: 1ffff110237d8110 [ 37.580631][ T631] RBP: ffffc90003977d88 R08: ffff88811bec2083 R09: 1ffff110237d8410 [ 37.589157][ T631] R10: dffffc0000000000 R11: ffffed10237d8411 R12: dffffc0000000000 [ 37.601672][ T628] R10: dffffc0000000000 R11: ffffed10237d8111 R12: dffffc0000000000 [ 37.610255][ T649] ------------[ cut here ]------------ [ 37.612588][ T632] RDX: 0000000000000000 RSI: 0000000018a74080 RDI: 000000000c04eb7d [ 37.623959][ T631] R13: dffffc0000000000 R14: 000000001c81b300 R15: ffff88811b937400 [ 37.623971][ T631] FS: 0000555562655500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.623979][ T631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.623987][ T631] CR2: 0000200000000000 CR3: 000000010ee4e000 CR4: 00000000003506a0 [ 37.623997][ T631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.624005][ T631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.624009][ T631] Call Trace: [ 37.624076][ T631] pppol2tp_release+0x150/0x2b0 [ 37.655657][ T649] WARNING: CPU: 0 PID: 649 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.671812][ T631] sock_close+0xb8/0x200 [ 37.671823][ T631] ? sock_mmap+0xa0/0xa0 [ 37.671843][ T631] __fput+0x2dc/0x730 [ 37.671882][ T631] ____fput+0x15/0x20 [ 37.675460][ T628] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888113045000 [ 37.680957][ T631] task_work_run+0x127/0x190 [ 37.701298][ T632] RBP: ffffc90000cf7d88 R08: ffff88810eb2e083 R09: 1ffff11021d65c10 [ 37.715882][ T649] Modules linked in: [ 37.729333][ T631] exit_to_user_mode_loop+0xcb/0xe0 [ 37.736613][ T628] FS: 0000555577de9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.739515][ T649] [ 37.750128][ T649] CPU: 1 PID: 649 Comm: syz.0.135 Tainted: G B W syzkaller #0 [ 37.750392][ T632] R10: dffffc0000000000 R11: ffffed1021d65c11 R12: dffffc0000000000 [ 37.767072][ T631] exit_to_user_mode_prepare+0x76/0xa0 [ 37.767122][ T631] syscall_exit_to_user_mode+0x1d/0x40 [ 37.779140][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.789402][ T628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.790136][ T631] do_syscall_64+0x3d/0x40 [ 37.799672][ T628] CR2: 00007fba61232780 CR3: 000000010eec9000 CR4: 00000000003506b0 [ 37.806706][ T649] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.815080][ T649] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 37.815823][ T631] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.838020][ T649] RSP: 0018:ffffc90000d87d68 EFLAGS: 00010293 [ 37.843869][ T632] R13: dffffc0000000000 R14: 0000000018a74080 R15: ffff88811ae99400 [ 37.851376][ T649] RAX: ffffffff842e97a7 RBX: ffff88811c8d2800 RCX: ffff88811c8c4f00 [ 37.863357][ T628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.863845][ T649] RDX: 0000000000000000 RSI: 000000001c8d1800 RDI: 000000000c04eb7d [ 37.871863][ T632] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.881975][ T649] RBP: ffffc90000d87d88 R08: ffff88811c8d2883 R09: 1ffff1102391a510 [ 37.888899][ T631] RIP: 0033:0x7f7b3e2f0e59 [ 37.898127][ T649] R10: dffffc0000000000 R11: ffffed102391a511 R12: dffffc0000000000 [ 37.901526][ T628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.921646][ T649] R13: dffffc0000000000 R14: 000000001c8d1800 R15: ffff88811b34f800 [ 37.923160][ T632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.936409][ T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.956138][ T628] Call Trace: [ 37.959471][ T628] pppol2tp_release+0x150/0x2b0 [ 37.964793][ T628] sock_close+0xb8/0x200 [ 37.966237][ T649] FS: 000055559501e500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.970442][ T632] CR2: 00007fba6140f270 CR3: 000000011207a000 CR4: 00000000003506b0 [ 37.986225][ T631] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.986407][ T649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.994665][ T631] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 37.994678][ T631] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.994685][ T631] RBP: 0000000000009158 R08: 0000000000000001 R09: 0000000000000000 [ 37.994693][ T631] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 37.994726][ T631] R13: 00007f7b3e569fac R14: 000000000000918b R15: 00007f7b3e569fa0 [ 38.035910][ T649] CR2: 00007fba62108060 CR3: 000000011d06b000 CR4: 00000000003506a0 [ 38.043037][ T628] ? sock_mmap+0xa0/0xa0 [ 38.054380][ T632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.062622][ T628] __fput+0x2dc/0x730 [ 38.066819][ T628] ____fput+0x15/0x20 [ 38.070839][ T628] task_work_run+0x127/0x190 [ 38.075686][ T632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.083156][ T649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.083782][ T632] Call Trace: [ 38.092902][ T667] ------------[ cut here ]------------ [ 38.096016][ T628] exit_to_user_mode_loop+0xcb/0xe0 [ 38.101390][ T649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.106189][ T632] pppol2tp_release+0x150/0x2b0 [ 38.116913][ T667] WARNING: CPU: 1 PID: 667 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.119954][ T628] exit_to_user_mode_prepare+0x76/0xa0 [ 38.129122][ T649] Call Trace: [ 38.135259][ T628] syscall_exit_to_user_mode+0x1d/0x40 [ 38.138035][ T667] Modules linked in: [ 38.143602][ T632] sock_close+0xb8/0x200 [ 38.147357][ T649] pppol2tp_release+0x150/0x2b0 [ 38.151497][ T628] do_syscall_64+0x3d/0x40 [ 38.151539][ T628] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.156593][ T667] CPU: 1 PID: 667 Comm: syz.5.144 Tainted: G B W syzkaller #0 [ 38.162128][ T632] ? sock_mmap+0xa0/0xa0 [ 38.167223][ T631] ---[ end trace 862fe4712b03950e ]--- [ 38.175863][ T628] RIP: 0033:0x7f1572145e59 [ 38.190064][ T649] sock_close+0xb8/0x200 [ 38.190335][ T632] __fput+0x2dc/0x730 [ 38.194370][ T649] ? sock_mmap+0xa0/0xa0 [ 38.199117][ T628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.203432][ T667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.223484][ T632] ____fput+0x15/0x20 [ 38.232979][ T649] __fput+0x2dc/0x730 [ 38.237708][ T632] task_work_run+0x127/0x190 [ 38.241014][ T649] ____fput+0x15/0x20 [ 38.246400][ T632] exit_to_user_mode_loop+0xcb/0xe0 [ 38.250338][ T649] task_work_run+0x127/0x190 [ 38.255947][ T628] RSP: 002b:00007ffcd9982798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.260103][ T667] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.271700][ T632] exit_to_user_mode_prepare+0x76/0xa0 [ 38.274812][ T649] exit_to_user_mode_loop+0xcb/0xe0 [ 38.286906][ T632] syscall_exit_to_user_mode+0x1d/0x40 [ 38.292423][ T632] do_syscall_64+0x3d/0x40 [ 38.297111][ T628] RAX: 0000000000000000 RBX: 00007ffcd9982880 RCX: 00007f1572145e59 [ 38.301591][ T649] exit_to_user_mode_prepare+0x76/0xa0 [ 38.306034][ T628] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.311030][ T667] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 38.319422][ T632] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.341472][ T649] syscall_exit_to_user_mode+0x1d/0x40 [ 38.347083][ T628] RBP: 0000000000009143 R08: 0000000000000001 R09: 0000000000000000 [ 38.350486][ T649] do_syscall_64+0x3d/0x40 [ 38.362741][ T667] RSP: 0018:ffffc90000d47d68 EFLAGS: 00010293 [ 38.369041][ T632] RIP: 0033:0x7f35a44a7e59 [ 38.373496][ T632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.381842][ T649] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.397374][ T628] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007ffcd99828c0 [ 38.399414][ T667] RAX: ffffffff842e97a7 RBX: ffff88811de66000 RCX: ffff88811a570000 [ 38.418130][ T628] R13: 00007f15723befac R14: 000000000000918b R15: 00007f15723befa0 [ 38.426127][ T649] RIP: 0033:0x7fae2d625e59 [ 38.430632][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.436185][ T632] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 [ 38.453486][ T628] ---[ end trace 862fe4712b03950f ]--- [ 38.459008][ T667] RDX: 0000000000000000 RSI: 00000000141fd3f0 RDI: 000000000c04eb7d [ 38.475513][ T677] ------------[ cut here ]------------ [ 38.481118][ T632] ORIG_RAX: 00000000000001b4 [ 38.486548][ T632] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 38.494741][ T677] WARNING: CPU: 0 PID: 677 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.503965][ T667] RBP: ffffc90000d47d88 R08: ffff88811de66083 R09: 1ffff11023bccc10 [ 38.512867][ T649] RSP: 002b:00007fff831075a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.514194][ T632] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.522279][ T667] R10: dffffc0000000000 R11: ffffed1023bccc11 R12: dffffc0000000000 [ 38.538685][ T677] Modules linked in: [ 38.542640][ T677] CPU: 0 PID: 677 Comm: syz.4.149 Tainted: G B W syzkaller #0 [ 38.551632][ T632] RBP: 0000000000009158 R08: 0000000000000001 R09: 0000000000000000 [ 38.553236][ T649] RAX: 0000000000000000 RBX: 00007fff83107690 RCX: 00007fae2d625e59 [ 38.560785][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.568343][ T667] R13: dffffc0000000000 R14: 00000000141fd3f0 R15: ffff88811bce1800 [ 38.579558][ T632] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 38.587825][ T649] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.594886][ T677] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.605825][ T667] FS: 0000555579f33500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.610220][ T632] R13: 00007f35a4720fac R14: 00000000000091a1 R15: 00007f35a4720fa0 [ 38.618055][ T667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.626286][ T677] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 38.632948][ T649] RBP: 00000000000092bd R08: 0000000000000001 R09: 0000000000000000 [ 38.660038][ T632] ---[ end trace 862fe4712b039510 ]--- [ 38.669833][ T684] ------------[ cut here ]------------ [ 38.676863][ T667] CR2: 0000200000000000 CR3: 000000011b302000 CR4: 00000000003506a0 [ 38.685000][ T667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.685248][ T684] WARNING: CPU: 0 PID: 684 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.693203][ T667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.711189][ T649] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff831076d0 [ 38.719382][ T684] Modules linked in: [ 38.724891][ T667] Call Trace: [ 38.730103][ T684] CPU: 1 PID: 684 Comm: syz.6.152 Tainted: G B W syzkaller #0 [ 38.739141][ T677] RSP: 0018:ffffc90000d27d68 EFLAGS: 00010293 [ 38.742794][ T667] pppol2tp_release+0x150/0x2b0 [ 38.750165][ T677] RAX: ffffffff842e97a7 RBX: ffff88811d7c1800 RCX: ffff88811b343b40 [ 38.758354][ T677] RDX: 0000000000000000 RSI: 000000001c904460 RDI: 000000000c04eb7d [ 38.758846][ T649] R13: 00007fae2d89efac R14: 00000000000092f0 R15: 00007fae2d89efa0 [ 38.767517][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.778611][ T667] sock_close+0xb8/0x200 [ 38.789455][ T649] ---[ end trace 862fe4712b039511 ]--- [ 38.796032][ T677] RBP: ffffc90000d27d88 R08: ffff88811d7c1883 R09: 1ffff11023af8310 [ 38.804131][ T684] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.804490][ T667] ? sock_mmap+0xa0/0xa0 [ 38.811249][ T684] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 38.822056][ T667] __fput+0x2dc/0x730 2026/06/22 20:22:13 executed programs: 148 [ 38.841646][ T677] R10: dffffc0000000000 R11: ffffed1023af8311 R12: dffffc0000000000 [ 38.850423][ T677] R13: dffffc0000000000 R14: 000000001c904460 R15: ffff88811be87400 [ 38.860757][ T677] FS: 0000555562655500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 38.870441][ T684] RSP: 0018:ffffc9000408fd68 EFLAGS: 00010293 [ 38.875833][ T667] ____fput+0x15/0x20 [ 38.877601][ T677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.892078][ T684] RAX: ffffffff842e97a7 RBX: ffff88811d575800 RCX: ffff88811bed13c0 [ 38.897723][ T667] task_work_run+0x127/0x190 [ 38.909925][ T684] RDX: 0000000000000000 RSI: 000000001a7f2020 RDI: 000000000c04eb7d [ 38.915027][ T667] exit_to_user_mode_loop+0xcb/0xe0 [ 38.920753][ T677] CR2: 0000001b33b63fff CR3: 000000011d05a000 CR4: 00000000003506b0 [ 38.925178][ T667] exit_to_user_mode_prepare+0x76/0xa0 [ 38.936266][ T684] RBP: ffffc9000408fd88 R08: ffff88811d575883 R09: 1ffff11023aaeb10 [ 38.947182][ T684] R10: dffffc0000000000 R11: ffffed1023aaeb11 R12: dffffc0000000000 [ 38.955218][ T684] R13: dffffc0000000000 R14: 000000001a7f2020 R15: ffff88811a8c0400 [ 38.971344][ T677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.979766][ T677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.981322][ T667] syscall_exit_to_user_mode+0x1d/0x40 [ 38.989678][ T684] FS: 0000555577de9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.009129][ T677] Call Trace: [ 39.016191][ T677] pppol2tp_release+0x150/0x2b0 [ 39.022766][ T677] sock_close+0xb8/0x200 [ 39.029816][ T684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.036623][ T667] do_syscall_64+0x3d/0x40 [ 39.040995][ T677] ? sock_mmap+0xa0/0xa0 [ 39.046145][ T677] __fput+0x2dc/0x730 [ 39.050459][ T713] ------------[ cut here ]------------ [ 39.053192][ T667] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.056626][ T684] CR2: 0000200000000000 CR3: 0000000120f57000 CR4: 00000000003506b0 [ 39.070180][ T677] ____fput+0x15/0x20 [ 39.074298][ T677] task_work_run+0x127/0x190 [ 39.075751][ T667] RIP: 0033:0x7fba6135ce59 [ 39.081761][ T713] WARNING: CPU: 0 PID: 713 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.093759][ T677] exit_to_user_mode_loop+0xcb/0xe0 [ 39.099216][ T667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.101515][ T684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.123949][ T667] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.127848][ T713] Modules linked in: [ 39.135540][ T677] exit_to_user_mode_prepare+0x76/0xa0 [ 39.145170][ T677] syscall_exit_to_user_mode+0x1d/0x40 [ 39.150941][ T713] [ 39.154196][ T713] CPU: 0 PID: 713 Comm: syz.2.168 Tainted: G B W syzkaller #0 [ 39.163182][ T677] do_syscall_64+0x3d/0x40 [ 39.163579][ T667] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 39.168301][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.186653][ T677] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.195594][ T684] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.198393][ T667] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.203758][ T677] RIP: 0033:0x7f7b3e2f0e59 [ 39.224118][ T723] ------------[ cut here ]------------ [ 39.225592][ T684] Call Trace: [ 39.230024][ T723] WARNING: CPU: 1 PID: 723 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.233041][ T684] pppol2tp_release+0x150/0x2b0 [ 39.233093][ T684] sock_close+0xb8/0x200 [ 39.244927][ T667] RBP: 000000000000949d R08: 0000000000000001 R09: 0000000000000000 [ 39.255808][ T713] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.260774][ T723] Modules linked in: [ 39.266877][ T677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.267209][ T667] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffd86df6dd0 [ 39.290824][ T677] RSP: 002b:00007ffc6d0a64b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.290838][ T677] RAX: 0000000000000000 RBX: 00007ffc6d0a65a0 RCX: 00007f7b3e2f0e59 [ 39.290845][ T677] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.290869][ T677] RBP: 0000000000009627 R08: 0000000000000001 R09: 0000000000000000 [ 39.299393][ T667] R13: 00007fba615d5fac R14: 00000000000094d1 R15: 00007fba615d5fa0 [ 39.307887][ T723] [ 39.315906][ T667] ---[ end trace 862fe4712b039512 ]--- [ 39.324238][ T713] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 39.346796][ T684] ? sock_mmap+0xa0/0xa0 [ 39.348599][ T723] CPU: 0 PID: 723 Comm: syz.0.172 Tainted: G B W syzkaller #0 [ 39.388126][ T677] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc6d0a65e0 [ 39.396075][ T684] __fput+0x2dc/0x730 [ 39.396845][ T677] R13: 00007f7b3e569fac R14: 0000000000009659 R15: 00007f7b3e569fa0 [ 39.400208][ T684] ____fput+0x15/0x20 [ 39.408558][ T713] RSP: 0018:ffffc90000e7fd68 EFLAGS: 00010293 [ 39.414279][ T684] task_work_run+0x127/0x190 [ 39.418980][ T677] ---[ end trace 862fe4712b039513 ]--- [ 39.428896][ T713] RAX: ffffffff842e97a7 RBX: ffff88811aed9800 RCX: ffff88811db5bb40 [ 39.438229][ T713] RDX: 0000000000000000 RSI: 000000002d091618 RDI: 000000000c04eb7d [ 39.449800][ T729] ------------[ cut here ]------------ [ 39.458022][ T684] exit_to_user_mode_loop+0xcb/0xe0 [ 39.463343][ T684] exit_to_user_mode_prepare+0x76/0xa0 [ 39.466073][ T729] WARNING: CPU: 0 PID: 729 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.470498][ T684] syscall_exit_to_user_mode+0x1d/0x40 [ 39.479838][ T713] RBP: ffffc90000e7fd88 R08: ffff88811aed9883 R09: 1ffff110235db310 [ 39.492846][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.503878][ T729] Modules linked in: [ 39.508338][ T713] R10: dffffc0000000000 R11: ffffed10235db311 R12: dffffc0000000000 [ 39.515689][ T729] CPU: 1 PID: 729 Comm: syz.5.175 Tainted: G B W syzkaller #0 [ 39.517250][ T723] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.527894][ T684] do_syscall_64+0x3d/0x40 [ 39.532521][ T713] R13: dffffc0000000000 R14: 000000002d091618 R15: ffff88811cf7fc00 [ 39.538222][ T729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.544903][ T723] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 39.555036][ T684] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.574948][ T713] FS: 000055555bc7c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.580281][ T684] RIP: 0033:0x7f1572145e59 [ 39.589244][ T713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.594366][ T729] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.600626][ T713] CR2: 00007f7b3e152ff8 CR3: 0000000120d5d000 CR4: 00000000003506b0 [ 39.614646][ T723] RSP: 0018:ffffc90000e2fd68 EFLAGS: 00010293 [ 39.620947][ T723] RAX: ffffffff842e97a7 RBX: ffff888100f95000 RCX: ffff88811f2f62c0 [ 39.629238][ T713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.630010][ T684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.637622][ T723] RDX: 0000000000000000 RSI: 000000001c904080 RDI: 000000000c04eb7d [ 39.665086][ T729] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 39.669210][ T684] RSP: 002b:00007ffcd9982798 EFLAGS: 00000246 [ 39.684829][ T713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.699134][ T713] Call Trace: [ 39.704996][ T684] ORIG_RAX: 00000000000001b4 [ 39.708940][ T713] pppol2tp_release+0x150/0x2b0 [ 39.711753][ T684] RAX: 0000000000000000 RBX: 00007ffcd9982880 RCX: 00007f1572145e59 [ 39.714724][ T729] RSP: 0018:ffffc90005997d68 EFLAGS: 00010293 [ 39.723006][ T723] RBP: ffffc90000e2fd88 R08: ffff888100f95083 R09: 1ffff110201f2a10 [ 39.723920][ T684] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.729652][ T713] sock_close+0xb8/0x200 [ 39.740237][ T684] RBP: 00000000000096e9 R08: 0000000000000001 R09: 0000000000000000 [ 39.745483][ T723] R10: dffffc0000000000 R11: ffffed10201f2a11 R12: dffffc0000000000 [ 39.751665][ T684] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007ffcd99828c0 [ 39.757525][ T729] [ 39.775960][ T713] ? sock_mmap+0xa0/0xa0 [ 39.776004][ T723] R13: dffffc0000000000 R14: 000000001c904080 R15: ffff888107bbf000 [ 39.788762][ T713] __fput+0x2dc/0x730 [ 39.792882][ T729] RAX: ffffffff842e97a7 RBX: ffff88811b3cb800 RCX: ffff888105bb2780 [ 39.797080][ T713] ____fput+0x15/0x20 [ 39.801233][ T723] FS: 000055559501e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.807236][ T684] R13: 00007f15723befac R14: 000000000000971c R15: 00007f15723befa0 [ 39.818023][ T729] RDX: 0000000000000000 RSI: 000000001dbce5e0 RDI: 000000000c04eb7d [ 39.824889][ T713] task_work_run+0x127/0x190 [ 39.835280][ T713] exit_to_user_mode_loop+0xcb/0xe0 [ 39.840409][ T723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.847229][ T729] RBP: ffffc90005997d88 R08: ffff88811b3cb883 R09: 1ffff11023679710 [ 39.855788][ T713] exit_to_user_mode_prepare+0x76/0xa0 [ 39.861403][ T723] CR2: 0000200000000000 CR3: 000000011da22000 CR4: 00000000003506b0 [ 39.861422][ T684] ---[ end trace 862fe4712b039514 ]--- [ 39.875644][ T741] ------------[ cut here ]------------ [ 39.875994][ T713] syscall_exit_to_user_mode+0x1d/0x40 [ 39.887301][ T729] R10: dffffc0000000000 R11: ffffed1023679711 R12: dffffc0000000000 [ 39.889973][ T713] do_syscall_64+0x3d/0x40 [ 39.900957][ T741] WARNING: CPU: 0 PID: 741 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.911253][ T713] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.912438][ T723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.920542][ T729] R13: dffffc0000000000 R14: 000000001dbce5e0 R15: ffff888100fc2000 [ 39.925612][ T741] Modules linked in: [ 39.934774][ T713] RIP: 0033:0x7f35a44a7e59 [ 39.937989][ T723] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.942804][ T729] FS: 0000555579f33500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.950827][ T741] CPU: 0 PID: 741 Comm: syz.4.181 Tainted: G B W syzkaller #0 [ 39.960870][ T713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.970410][ T723] Call Trace: [ 39.988295][ T729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.996245][ T741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.998283][ T729] CR2: 0000001b33963fff CR3: 0000000116340000 CR4: 00000000003506a0 [ 40.016265][ T741] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.022731][ T723] pppol2tp_release+0x150/0x2b0 [ 40.027552][ T713] RSP: 002b:00007ffd901010f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.028957][ T741] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 40.036476][ T713] RAX: 0000000000000000 RBX: 00007ffd901011e0 RCX: 00007f35a44a7e59 [ 40.058545][ T723] sock_close+0xb8/0x200 [ 40.064819][ T729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.068688][ T723] ? sock_mmap+0xa0/0xa0 [ 40.080985][ T723] __fput+0x2dc/0x730 [ 40.085011][ T723] ____fput+0x15/0x20 [ 40.092172][ T713] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.093014][ T741] RSP: 0018:ffffc90000fefd68 EFLAGS: 00010293 [ 40.100529][ T723] task_work_run+0x127/0x190 [ 40.112385][ T741] [ 40.114759][ T741] RAX: ffffffff842e97a7 RBX: ffff88811d1c8800 RCX: ffff888105bb62c0 [ 40.116457][ T729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.123483][ T723] exit_to_user_mode_loop+0xcb/0xe0 [ 40.131899][ T713] RBP: 000000000000985b R08: 0000000000000001 R09: 0000000000000000 [ 40.139840][ T741] RDX: 0000000000000000 RSI: 000000001cc1c000 RDI: 000000000c04eb7d [ 40.149984][ T713] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffd90101220 [ 40.153128][ T723] exit_to_user_mode_prepare+0x76/0xa0 [ 40.160349][ T729] Call Trace: [ 40.166666][ T749] ------------[ cut here ]------------ [ 40.169122][ T729] pppol2tp_release+0x150/0x2b0 [ 40.174451][ T749] WARNING: CPU: 0 PID: 749 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.179858][ T713] R13: 00007f35a4720fac R14: 000000000000988f R15: 00007f35a4720fa0 [ 40.190104][ T741] RBP: ffffc90000fefd88 R08: ffff88811d1c8883 R09: 1ffff11023a39110 [ 40.198101][ T729] sock_close+0xb8/0x200 [ 40.206362][ T723] syscall_exit_to_user_mode+0x1d/0x40 [ 40.210496][ T713] ---[ end trace 862fe4712b039515 ]--- [ 40.215864][ T723] do_syscall_64+0x3d/0x40 [ 40.221420][ T729] ? sock_mmap+0xa0/0xa0 [ 40.225831][ T741] R10: dffffc0000000000 R11: ffffed1023a39111 R12: dffffc0000000000 [ 40.230375][ T729] __fput+0x2dc/0x730 [ 40.241291][ T749] Modules linked in: [ 40.245879][ T723] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.251869][ T749] CPU: 0 PID: 749 Comm: syz.6.185 Tainted: G B W syzkaller #0 [ 40.260825][ T723] RIP: 0033:0x7fae2d625e59 [ 40.265329][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.274079][ T729] ____fput+0x15/0x20 [ 40.289528][ T741] R13: dffffc0000000000 R14: 000000001cc1c000 R15: ffff88810953c000 [ 40.290381][ T729] task_work_run+0x127/0x190 [ 40.298030][ T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.304297][ T729] exit_to_user_mode_loop+0xcb/0xe0 [ 40.312689][ T741] FS: 0000555562655500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.319435][ T729] exit_to_user_mode_prepare+0x76/0xa0 [ 40.328207][ T723] RSP: 002b:00007fff831075a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.334071][ T729] syscall_exit_to_user_mode+0x1d/0x40 [ 40.341372][ T749] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.347357][ T729] do_syscall_64+0x3d/0x40 [ 40.353435][ T741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.364097][ T749] Code: 5d c3 e8 7c 0a 36 fd be 02 00 00 00 eb 0a e8 70 0a 36 fd be 01 00 00 00 4c 89 f7 e8 23 75 0f fe e9 0f ff ff ff e8 59 0a 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 0a 36 fd 4c 89 f7 be 03 [ 40.382565][ T729] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.384109][ T723] RAX: 0000000000000000 RBX: 00007fff83107690 RCX: 00007fae2d625e59 [ 40.396611][ T729] RIP: 0033:0x7fba6135ce59 [ 40.398395][ T741] CR2: 0000200000000000 CR3: 000000011d34b000 CR4: 00000000003506b0 [ 40.410336][ T723] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.418370][ T749] RSP: 0018:ffffc90000d47d68 EFLAGS: 00010293 [ 40.424477][ T749] RAX: ffffffff842e97a7 RBX: ffff88810ae32000 RCX: ffff888109822780 [ 40.428803][ T729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.433041][ T741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.461079][ T723] RBP: 0000000000009913 R08: 0000000000000001 R09: 0000000000000000 [ 40.469216][ T723] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff831076d0 [ 40.477459][ T749] RDX: 0000000000000000 RSI: 000000001c874c00 RDI: 000000000c04eb7d [ 40.486544][ T729] RSP: 002b:00007ffd86df6ca8 EFLAGS: 00000246 [ 40.486619][ T723] R13: 00007fae2d89efac R14: 0000000000009946 R15: 00007fae2d89efa0 [ 40.486793][ T729] ORIG_RAX: 00000000000001b4 [ 40.493097][ T749] RBP: ffffc90000d47d88 R08: ffff88810ae32083 R09: 1ffff110215c6410 [ 40.502964][ T729] RAX: 0000000000000000 RBX: 00007ffd86df6d90 RCX: 00007fba6135ce59 [ 40.505563][ T723] ---[ end trace 862fe4712b039516 ]--- [ 40.506089][ T741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.535463][ T749] R10: dffffc0000000000 R11: ffffed10215c6411 R12: dffffc0000000000 [ 40.543473][ T749] R13: dffffc0000000000 R14: 000000001c874c00 R15: ffff88810ada1000 [ 40.551774][ T741] Call Trace: [ 40.560796][ T741] pppol2tp_release+0x150/0x2b0 [ 40.571366][ T749] FS: 0000555577de9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.575775][ T729] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.581766][ T762] ------------[ cut here ]------------ [ 40.594255][ T741] sock_close+0xb8/0x200 [ 40.598777][ T741] ? sock_mmap+0xa0/0xa0