Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2026/08/26 05:22:28 parsed 1 programs 2026/08/26 05:22:28 serving rpc on tcp://38959 [ 23.627249][ T24] audit: type=1400 audit(1787721748.729:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.647995][ T24] audit: type=1400 audit(1787721748.729:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.667583][ T24] audit: type=1400 audit(1787721748.729:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.224308][ T24] audit: type=1400 audit(1787721749.329:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.225299][ T293] cgroup: Unknown subsys name 'net' [ 24.246967][ T24] audit: type=1400 audit(1787721749.329:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.274191][ T24] audit: type=1400 audit(1787721749.369:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.274390][ T293] cgroup: Unknown subsys name 'devices' [ 24.451259][ T293] cgroup: Unknown subsys name 'hugetlb' [ 24.456857][ T293] cgroup: Unknown subsys name 'rlimit' [ 24.569850][ T24] audit: type=1400 audit(1787721749.679:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.593015][ T24] audit: type=1400 audit(1787721749.679:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.600200][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.613346][ T24] audit: type=1400 audit(1787721749.679:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.642171][ T24] audit: type=1400 audit(1787721749.679:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.642194][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.038786][ T301] request_module fs-gadgetfs succeeded, but still no fs? [ 25.049054][ T301] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.232738][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.239948][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.247467][ T323] device bridge_slave_0 entered promiscuous mode [ 25.254905][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.261984][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.269231][ T323] device bridge_slave_1 entered promiscuous mode [ 25.300763][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.307792][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.315070][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.322090][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.338449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.346126][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.353546][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.361859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.370069][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.377078][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.385915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.394112][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.401137][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.411877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.421653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.433827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.444089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.452465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.460166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.468786][ T323] device veth0_vlan entered promiscuous mode [ 25.477632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.486406][ T323] device veth1_macvtap entered promiscuous mode [ 25.494821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.505258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/08/26 05:22:31 executed programs: 0 [ 26.032937][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.040101][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.047469][ T365] device bridge_slave_0 entered promiscuous mode [ 26.057432][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.064493][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.071804][ T365] device bridge_slave_1 entered promiscuous mode [ 26.103577][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.110623][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.117866][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.124889][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.143680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.151135][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.158220][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.166809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.175252][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.182291][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.191037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.199143][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.206171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.219502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.227557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.236175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.244426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.254028][ T49] device bridge_slave_1 left promiscuous mode [ 26.260468][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.267783][ T49] device bridge_slave_0 left promiscuous mode [ 26.274022][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.281771][ T49] device veth1_macvtap left promiscuous mode [ 26.287751][ T49] device veth0_vlan left promiscuous mode [ 26.356055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.364385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.375196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.383223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.391169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.398739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.407230][ T365] device veth0_vlan entered promiscuous mode [ 26.416271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.424432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.433243][ T365] device veth1_macvtap entered promiscuous mode [ 26.441620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.449184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.457500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.466584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.474846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.647755][ T371] ================================================================== [ 26.655877][ T371] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 26.663917][ T371] Read of size 4 at addr ffff888126ee5000 by task syz.2.17/371 [ 26.671455][ T371] [ 26.673772][ T371] CPU: 0 PID: 371 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.680848][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.690879][ T371] Call Trace: [ 26.694147][ T371] __dump_stack+0x21/0x24 [ 26.698448][ T371] dump_stack_lvl+0x1a7/0x208 [ 26.703103][ T371] ? show_regs_print_info+0x18/0x18 [ 26.708277][ T371] ? thaw_kernel_threads+0x220/0x220 [ 26.713542][ T371] ? __local_bh_enable_ip+0x53/0x80 [ 26.718715][ T371] print_address_description+0x7f/0x2c0 [ 26.724234][ T371] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 26.729933][ T371] kasan_report+0x100/0x140 [ 26.734406][ T371] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 26.740096][ T371] __asan_report_load4_noabort+0x14/0x20 [ 26.745702][ T371] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 26.751217][ T371] pppol2tp_release+0x150/0x2b0 [ 26.756041][ T371] sock_close+0xb8/0x200 [ 26.760260][ T371] ? sock_mmap+0xa0/0xa0 [ 26.764479][ T371] __fput+0x2dc/0x730 [ 26.768433][ T371] ____fput+0x15/0x20 [ 26.772389][ T371] task_work_run+0x127/0x190 [ 26.776973][ T371] do_exit+0xa7c/0x24e0 [ 26.781126][ T371] ? __kasan_check_write+0x14/0x20 [ 26.786209][ T371] ? switch_fpu_return+0x19c/0x330 [ 26.791305][ T371] ? put_task_struct+0x90/0x90 [ 26.796038][ T371] ? fpu__clear_all+0x20/0x20 [ 26.800713][ T371] ? __kasan_check_read+0x11/0x20 [ 26.805711][ T371] __x64_sys_exit+0x40/0x40 [ 26.810187][ T371] do_syscall_64+0x31/0x40 [ 26.814578][ T371] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.820444][ T371] RIP: 0033:0x7f8ad0d470d9 [ 26.824832][ T371] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 26.832283][ T371] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 26.840686][ T371] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 26.848637][ T371] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.856590][ T371] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 26.864541][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.872493][ T371] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 26.880465][ T371] [ 26.882773][ T371] Allocated by task 370: [ 26.886998][ T371] __kasan_kmalloc+0xd4/0x100 [ 26.891656][ T371] __kmalloc+0x19f/0x330 [ 26.895880][ T371] l2tp_session_create+0x39/0xb60 [ 26.900879][ T371] pppol2tp_connect+0xbf5/0x1640 [ 26.905790][ T371] __sys_connect+0x3ce/0x450 [ 26.910357][ T371] __x64_sys_connect+0x7a/0x90 [ 26.915095][ T371] do_syscall_64+0x31/0x40 [ 26.919499][ T371] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.925360][ T371] [ 26.927666][ T371] Freed by task 329: [ 26.931537][ T371] kasan_set_track+0x4a/0x70 [ 26.936105][ T371] kasan_set_free_info+0x23/0x40 [ 26.941019][ T371] ____kasan_slab_free+0x125/0x160 [ 26.946107][ T371] __kasan_slab_free+0x11/0x20 [ 26.950844][ T371] slab_free_freelist_hook+0xc5/0x190 [ 26.956191][ T371] kfree+0xc0/0x270 [ 26.959975][ T371] l2tp_session_put+0xb2/0x1a0 [ 26.964720][ T371] l2tp_session_delete+0x3a9/0x4a0 [ 26.969833][ T371] l2tp_tunnel_del_work+0x180/0x3d0 [ 26.975017][ T371] process_one_work+0x6fd/0xbc0 [ 26.979843][ T371] worker_thread+0xa8e/0x13c0 [ 26.984496][ T371] kthread+0x324/0x3b0 [ 26.988540][ T371] ret_from_fork+0x1f/0x30 [ 26.992928][ T371] [ 26.995238][ T371] The buggy address belongs to the object at ffff888126ee5000 [ 26.995238][ T371] which belongs to the cache kmalloc-512 of size 512 [ 27.009263][ T371] The buggy address is located 0 bytes inside of [ 27.009263][ T371] 512-byte region [ffff888126ee5000, ffff888126ee5200) [ 27.022331][ T371] The buggy address belongs to the page: [ 27.027952][ T371] page:ffffea00049bb900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126ee4 [ 27.038158][ T371] head:ffffea00049bb900 order:2 compound_mapcount:0 compound_pincount:0 [ 27.046454][ T371] flags: 0x4000000000010200(slab|head) [ 27.051892][ T371] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 27.060453][ T371] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 27.069019][ T371] page dumped because: kasan: bad access detected [ 27.075413][ T371] page_owner tracks the page as allocated [ 27.081112][ T371] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 365, ts 26487276653, free_ts 26483836021 [ 27.099398][ T371] prep_new_page+0x176/0x190 [ 27.103963][ T371] get_page_from_freelist+0x225f/0x23f0 [ 27.109481][ T371] __alloc_pages_nodemask+0x29a/0x640 [ 27.114827][ T371] new_slab+0x84/0x3f0 [ 27.118872][ T371] ___slab_alloc+0x2f8/0x4c0 [ 27.123434][ T371] __slab_alloc+0x63/0xa0 [ 27.127738][ T371] __kmalloc+0x1f9/0x330 [ 27.131956][ T371] fib6_info_alloc+0x34/0xe0 [ 27.136525][ T371] ip6_route_info_create+0x4c7/0x1450 [ 27.141872][ T371] ip6_route_add+0x27/0x130 [ 27.146349][ T371] addrconf_permanent_addr+0x635/0x940 [ 27.151782][ T371] addrconf_notify+0x752/0xea0 [ 27.156523][ T371] raw_notifier_call_chain+0x90/0x100 [ 27.161871][ T371] __dev_notify_flags+0x2f4/0x5b0 [ 27.166870][ T371] dev_change_flags+0xe3/0x1a0 [ 27.171605][ T371] do_setlink+0xb19/0x29a0 [ 27.175992][ T371] page last free stack trace: [ 27.180647][ T371] __free_pages_ok+0x80b/0x830 [ 27.185383][ T371] __free_pages+0xd8/0x390 [ 27.189775][ T371] kfree+0x1e4/0x270 [ 27.193646][ T371] kvfree+0x35/0x40 [ 27.197432][ T371] wg_packet_queue_free+0x517/0x5a0 [ 27.202605][ T371] wg_destruct+0x211/0x300 [ 27.206996][ T371] netdev_run_todo+0xb5e/0xda0 [ 27.211735][ T371] rtnl_unlock+0xe/0x10 [ 27.215864][ T371] default_device_exit_batch+0x363/0x3c0 [ 27.221474][ T371] cleanup_net+0x5fe/0xb80 [ 27.225863][ T371] process_one_work+0x6fd/0xbc0 [ 27.230686][ T371] worker_thread+0xa8e/0x13c0 [ 27.235338][ T371] kthread+0x324/0x3b0 [ 27.239384][ T371] ret_from_fork+0x1f/0x30 [ 27.243770][ T371] [ 27.246077][ T371] Memory state around the buggy address: [ 27.251685][ T371] ffff888126ee4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.259719][ T371] ffff888126ee4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.267755][ T371] >ffff888126ee5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.275787][ T371] ^ [ 27.279831][ T371] ffff888126ee5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.287867][ T371] ffff888126ee5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.295900][ T371] ================================================================== [ 27.303931][ T371] Disabling lock debugging due to kernel taint [ 27.317872][ T371] ------------[ cut here ]------------ [ 27.323644][ T371] WARNING: CPU: 0 PID: 371 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.333637][ T371] Modules linked in: [ 27.337531][ T371] CPU: 0 PID: 371 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 27.346046][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.356199][ T371] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.362538][ T371] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 27.382436][ T371] RSP: 0018:ffffc90002187c40 EFLAGS: 00010293 [ 27.388529][ T371] RAX: ffffffff842f3167 RBX: ffff888110b11800 RCX: ffff88810fe5cf00 [ 27.397205][ T371] RDX: 0000000000000000 RSI: 0000000028ff6120 RDI: 000000000c04eb7d [ 27.406366][ T371] RBP: ffffc90002187c60 R08: 0000000000000003 R09: 0000000000000004 [ 27.414515][ T371] R10: dffffc0000000000 R11: fffffbfff0dcf848 R12: dffffc0000000000 [ 27.422619][ T371] R13: dffffc0000000000 R14: 0000000028ff6120 R15: ffff888126ee5000 [ 27.430961][ T371] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.440298][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.449606][ T371] CR2: 00007f8ad0d021f0 CR3: 000000010d5e6000 CR4: 00000000003506a0 [ 27.458002][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.465991][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.473980][ T371] Call Trace: [ 27.474822][ T419] ------------[ cut here ]------------ [ 27.477262][ T371] pppol2tp_release+0x150/0x2b0 [ 27.484494][ T419] WARNING: CPU: 0 PID: 419 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.487557][ T371] sock_close+0xb8/0x200 [ 27.498683][ T419] Modules linked in: [ 27.501773][ T371] ? sock_mmap+0xa0/0xa0 [ 27.501782][ T371] __fput+0x2dc/0x730 [ 27.501795][ T371] ____fput+0x15/0x20 [ 27.505901][ T419] [ 27.510029][ T371] task_work_run+0x127/0x190 [ 27.514157][ T419] CPU: 0 PID: 419 Comm: syz.2.26 Tainted: G B syzkaller #0 [ 27.517902][ T371] do_exit+0xa7c/0x24e0 [ 27.520540][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.525212][ T371] ? __kasan_check_write+0x14/0x20 [ 27.534146][ T419] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.538162][ T371] ? switch_fpu_return+0x19c/0x330 [ 27.547914][ T419] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 27.559377][ T371] ? put_task_struct+0x90/0x90 [ 27.564538][ T419] RSP: 0018:ffffc90002347c40 EFLAGS: 00010293 [ 27.584759][ T371] ? fpu__clear_all+0x20/0x20 [ 27.588829][ T419] [ 27.601979][ T371] ? __kasan_check_read+0x11/0x20 [ 27.606239][ T419] RAX: ffffffff842f3167 RBX: ffff8881116df800 RCX: ffff8881118f93c0 [ 27.607012][ T371] __x64_sys_exit+0x40/0x40 [ 27.620589][ T419] RDX: 0000000000000000 RSI: 0000000028ff68a0 RDI: 000000000c04eb7d [ 27.622681][ T371] do_syscall_64+0x31/0x40 [ 27.632521][ T419] RBP: ffffc90002347c60 R08: ffff8881116df883 R09: 1ffff110222dbf10 [ 27.641351][ T371] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.641358][ T419] R10: dffffc0000000000 R11: ffffed10222dbf11 R12: dffffc0000000000 [ 27.641374][ T371] RIP: 0033:0x7f8ad0d470d9 [ 27.647304][ T419] R13: dffffc0000000000 R14: 0000000028ff68a0 R15: ffff888110ef1000 [ 27.656851][ T371] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 27.660276][ T419] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.667643][ T371] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 27.675207][ T419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.684803][ T371] ORIG_RAX: 000000000000003c [ 27.690603][ T419] CR2: 00007f8ad0fd0dac CR3: 000000010d5e6000 CR4: 00000000003506b0 [ 27.709174][ T371] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 27.709511][ T419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.725627][ T419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.726324][ T371] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.738157][ T419] Call Trace: [ 27.745070][ T419] pppol2tp_release+0x150/0x2b0 [ 27.749071][ T371] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 27.750013][ T419] sock_close+0xb8/0x200 [ 27.759589][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.762350][ T419] ? sock_mmap+0xa0/0xa0 [ 27.770322][ T371] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 27.775475][ T419] __fput+0x2dc/0x730 [ 27.783109][ T371] ---[ end trace 3f9b97bcf14641b1 ]--- [ 27.786532][ T419] ____fput+0x15/0x20 [ 27.795810][ T419] task_work_run+0x127/0x190 [ 27.801970][ T419] do_exit+0xa7c/0x24e0 [ 27.806127][ T419] ? __kasan_check_write+0x14/0x20 [ 27.812125][ T419] ? switch_fpu_return+0x19c/0x330 [ 27.817231][ T419] ? put_task_struct+0x90/0x90 [ 27.822235][ T419] ? fpu__clear_all+0x20/0x20 [ 27.826903][ T419] ? __kasan_check_read+0x11/0x20 [ 27.832448][ T419] __x64_sys_exit+0x40/0x40 [ 27.836966][ T419] do_syscall_64+0x31/0x40 [ 27.841612][ T419] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.847601][ T419] RIP: 0033:0x7f8ad0d470d9 [ 27.856832][ T419] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 27.864497][ T419] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 27.872942][ T419] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 27.880954][ T419] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.888920][ T419] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 27.890668][ T446] ------------[ cut here ]------------ [ 27.896940][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.910922][ T419] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 27.923620][ T419] ---[ end trace 3f9b97bcf14641b2 ]--- [ 27.930260][ T449] ------------[ cut here ]------------ [ 27.931978][ T446] WARNING: CPU: 0 PID: 446 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.935732][ T449] WARNING: CPU: 1 PID: 449 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.948946][ T446] Modules linked in: [ 27.960194][ T446] CPU: 1 PID: 446 Comm: syz.2.35 Tainted: G B W syzkaller #0 [ 27.960405][ T449] Modules linked in: [ 27.968680][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.968690][ T449] [ 27.973843][ T446] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.984112][ T449] CPU: 0 PID: 449 Comm: syz.2.36 Tainted: G B W syzkaller #0 [ 27.985294][ T446] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 27.991848][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.000136][ T446] RSP: 0018:ffffc90000c57c40 EFLAGS: 00010293 [ 28.023694][ T449] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.032161][ T446] [ 28.042294][ T449] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 28.046233][ T446] RAX: ffffffff842f3167 RBX: ffff888111fe1000 RCX: ffff88811223bb40 [ 28.064615][ T449] RSP: 0018:ffffc900023d7c40 EFLAGS: 00010293 [ 28.078195][ T449] RAX: ffffffff842f3167 RBX: ffff888111fe2800 RCX: ffff88811223cf00 [ 28.079138][ T446] RDX: 0000000000000000 RSI: 00000000116b94a0 RDI: 000000000c04eb7d [ 28.086293][ T449] RDX: 0000000000000000 RSI: 00000000116b9740 RDI: 000000000c04eb7d [ 28.094583][ T446] RBP: ffffc90000c57c60 R08: ffff888111fe1083 R09: 1ffff110223fc210 [ 28.102517][ T449] RBP: ffffc900023d7c60 R08: ffff888111fe2883 R09: 1ffff110223fc510 [ 28.125847][ T465] ------------[ cut here ]------------ [ 28.127557][ T446] R10: dffffc0000000000 R11: ffffed10223fc211 R12: dffffc0000000000 [ 28.131348][ T449] R10: dffffc0000000000 R11: ffffed10223fc511 R12: dffffc0000000000 [ 28.131354][ T449] R13: dffffc0000000000 R14: 00000000116b9740 R15: ffff888111e80c00 [ 28.131362][ T449] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.131369][ T449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.131375][ T449] CR2: 00007f8ad0ba7ff8 CR3: 00000001067ed000 CR4: 00000000003506b0 [ 28.131383][ T449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.131389][ T449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.131392][ T449] Call Trace: [ 28.131405][ T449] pppol2tp_release+0x150/0x2b0 [ 28.131416][ T449] sock_close+0xb8/0x200 [ 28.131436][ T449] ? sock_mmap+0xa0/0xa0 [ 28.147357][ T446] R13: dffffc0000000000 R14: 00000000116b94a0 R15: ffff888111e82400 [ 28.147365][ T446] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.147380][ T446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.171188][ T449] __fput+0x2dc/0x730 [ 28.179540][ T465] WARNING: CPU: 1 PID: 465 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.188773][ T449] ____fput+0x15/0x20 [ 28.196214][ T446] CR2: 00007f8ad0d021f0 CR3: 000000011290c000 CR4: 00000000003506a0 [ 28.206003][ T449] task_work_run+0x127/0x190 [ 28.207851][ T465] Modules linked in: [ 28.213365][ T449] do_exit+0xa7c/0x24e0 [ 28.219853][ T446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.236189][ T449] ? __kasan_check_write+0x14/0x20 [ 28.239444][ T465] [ 28.257188][ T449] ? switch_fpu_return+0x19c/0x330 [ 28.262531][ T446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.267460][ T449] ? put_task_struct+0x90/0x90 [ 28.269765][ T446] Call Trace: [ 28.274446][ T465] CPU: 0 PID: 465 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 28.282601][ T446] pppol2tp_release+0x150/0x2b0 [ 28.300745][ T449] ? fpu__clear_all+0x20/0x20 [ 28.303493][ T474] ------------[ cut here ]------------ [ 28.307581][ T449] ? __kasan_check_read+0x11/0x20 [ 28.310443][ T474] WARNING: CPU: 1 PID: 474 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.324672][ T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.328464][ T446] sock_close+0xb8/0x200 [ 28.342483][ T465] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.350468][ T474] Modules linked in: [ 28.364244][ T465] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 28.370588][ T449] __x64_sys_exit+0x40/0x40 [ 28.393199][ T465] RSP: 0018:ffffc90002437c40 EFLAGS: 00010293 [ 28.397778][ T474] [ 28.404338][ T465] RAX: ffffffff842f3167 RBX: ffff888111e95800 RCX: ffff8881128be2c0 [ 28.406217][ T446] ? sock_mmap+0xa0/0xa0 [ 28.419539][ T474] CPU: 1 PID: 474 Comm: syz.2.44 Tainted: G B W syzkaller #0 [ 28.428110][ T446] __fput+0x2dc/0x730 [ 28.430725][ T449] do_syscall_64+0x31/0x40 [ 28.432186][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.436536][ T465] RDX: 0000000000000000 RSI: 000000000eb08140 RDI: 000000000c04eb7d [ 28.447574][ T446] ____fput+0x15/0x20 [ 28.454938][ T465] RBP: ffffc90002437c60 R08: ffff888111e95883 R09: 1ffff110223d2b10 [ 28.458819][ T449] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.466734][ T465] R10: dffffc0000000000 R11: ffffed10223d2b11 R12: dffffc0000000000 [ 28.474861][ T446] task_work_run+0x127/0x190 [ 28.481095][ T465] R13: dffffc0000000000 R14: 000000000eb08140 R15: ffff888112a5dc00 [ 28.485278][ T474] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.498970][ T465] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.499773][ T446] do_exit+0xa7c/0x24e0 [ 28.509875][ T449] RIP: 0033:0x7f8ad0d470d9 [ 28.512759][ T446] ? __kasan_check_write+0x14/0x20 [ 28.521455][ T465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.522185][ T446] ? switch_fpu_return+0x19c/0x330 [ 28.533691][ T474] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 28.553452][ T449] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 28.553459][ T449] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 28.561841][ T446] ? put_task_struct+0x90/0x90 [ 28.569318][ T449] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 28.582174][ T449] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.590192][ T449] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 28.592317][ T492] ------------[ cut here ]------------ [ 28.598202][ T449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.603854][ T465] CR2: 00007f8ad1b01060 CR3: 000000012a318000 CR4: 00000000003506b0 [ 28.611643][ T449] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 28.621770][ T492] WARNING: CPU: 0 PID: 492 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.627714][ T449] ---[ end trace 3f9b97bcf14641b3 ]--- [ 28.638589][ T446] ? fpu__clear_all+0x20/0x20 [ 28.643084][ T474] RSP: 0018:ffffc90002457c40 EFLAGS: 00010293 [ 28.647855][ T465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.653934][ T474] RAX: ffffffff842f3167 RBX: ffff888112813000 RCX: ffff88811201cf00 [ 28.662215][ T446] ? __kasan_check_read+0x11/0x20 [ 28.676096][ T474] RDX: 0000000000000000 RSI: 0000000010f82f40 RDI: 000000000c04eb7d [ 28.684103][ T474] RBP: ffffc90002457c60 R08: ffff888112813083 R09: 1ffff11022502610 [ 28.692183][ T474] R10: dffffc0000000000 R11: ffffed1022502611 R12: dffffc0000000000 [ 28.693558][ T492] Modules linked in: [ 28.702036][ T474] R13: dffffc0000000000 R14: 0000000010f82f40 R15: ffff888112bd7c00 [ 28.704352][ T446] __x64_sys_exit+0x40/0x40 [ 28.712414][ T492] CPU: 1 PID: 492 Comm: syz.2.50 Tainted: G B W syzkaller #0 [ 28.717263][ T446] do_syscall_64+0x31/0x40 [ 28.725429][ T465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.730619][ T446] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.738759][ T465] Call Trace: [ 28.747037][ T465] pppol2tp_release+0x150/0x2b0 [ 28.751922][ T474] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.760953][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.761591][ T446] RIP: 0033:0x7f8ad0d470d9 [ 28.771064][ T465] sock_close+0xb8/0x200 [ 28.779760][ T474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.786357][ T465] ? sock_mmap+0xa0/0xa0 [ 28.790743][ T492] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.797124][ T492] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 28.801426][ T446] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 28.817006][ T465] __fput+0x2dc/0x730 [ 28.824411][ T446] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 28.829096][ T474] CR2: 00007f8ad0d021f0 CR3: 000000010d4e9000 CR4: 00000000003506a0 [ 28.841019][ T446] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 28.845757][ T465] ____fput+0x15/0x20 [ 28.856528][ T446] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.856667][ T474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.865038][ T446] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 28.872871][ T492] RSP: 0018:ffffc90002467c40 EFLAGS: 00010293 [ 28.880551][ T465] task_work_run+0x127/0x190 [ 28.892219][ T492] [ 28.894548][ T492] RAX: ffffffff842f3167 RBX: ffff888112054800 RCX: ffff8881136aa780 [ 28.902737][ T474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.910784][ T465] do_exit+0xa7c/0x24e0 [ 28.910900][ T492] RDX: 0000000000000000 RSI: 00000000123afb80 RDI: 000000000c04eb7d [ 28.915060][ T465] ? put_task_struct+0x90/0x90 [ 28.924053][ T446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.927962][ T465] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 28.935880][ T474] Call Trace: [ 28.935894][ T474] pppol2tp_release+0x150/0x2b0 [ 28.935903][ T474] sock_close+0xb8/0x200 [ 28.935916][ T474] ? sock_mmap+0xa0/0xa0 [ 28.944977][ T465] __x64_sys_exit+0x40/0x40 [ 28.953856][ T492] RBP: ffffc90002467c60 R08: ffff888112054883 R09: 1ffff1102240a910 [ 28.958819][ T465] do_syscall_64+0x31/0x40 [ 28.963235][ T474] __fput+0x2dc/0x730 [ 28.975077][ T465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.975091][ T465] RIP: 0033:0x7f8ad0d470d9 [ 28.979238][ T446] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 28.985092][ T465] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 28.993721][ T492] R10: dffffc0000000000 R11: ffffed102240a911 R12: dffffc0000000000 [ 29.001457][ T465] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 29.006270][ T474] ____fput+0x15/0x20 [ 29.018658][ T465] ORIG_RAX: 000000000000003c [ 29.018671][ T465] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 29.022873][ T446] ---[ end trace 3f9b97bcf14641b4 ]--- [ 29.027457][ T465] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.038736][ T492] R13: dffffc0000000000 R14: 00000000123afb80 R15: ffff88811379c800 [ 29.045355][ T465] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 29.050499][ T492] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.057059][ T465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.068355][ T474] task_work_run+0x127/0x190 [ 29.082586][ T512] ------------[ cut here ]------------ [ 29.091076][ T492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.095661][ T465] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 29.098624][ T492] CR2: 000055555b92b4e8 CR3: 000000012a318000 CR4: 00000000003506a0 [ 29.114713][ T512] WARNING: CPU: 0 PID: 512 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.115585][ T474] do_exit+0xa7c/0x24e0 [ 29.130169][ T465] ---[ end trace 3f9b97bcf14641b5 ]--- [ 29.143993][ T474] ? __kasan_check_write+0x14/0x20 [ 29.146815][ T512] Modules linked in: [ 29.149113][ T474] ? switch_fpu_return+0x19c/0x330 [ 29.149116][ T512] [ 29.149132][ T512] CPU: 0 PID: 512 Comm: syz.2.56 Tainted: G B W syzkaller #0 [ 29.153460][ T492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.158141][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.158165][ T512] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.165418][ T492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.184673][ T512] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 29.187709][ T474] ? put_task_struct+0x90/0x90 [ 29.202559][ T512] RSP: 0018:ffffc90002557c40 EFLAGS: 00010293 [ 29.222443][ T492] Call Trace: [ 29.233616][ T512] [ 29.237430][ T492] pppol2tp_release+0x150/0x2b0 [ 29.242697][ T512] RAX: ffffffff842f3167 RBX: ffff888113f77800 RCX: ffff88810dd2bb40 [ 29.244345][ T474] ? fpu__clear_all+0x20/0x20 [ 29.252483][ T512] RDX: 0000000000000000 RSI: 000000000ccf6ea0 RDI: 000000000c04eb7d [ 29.255550][ T492] sock_close+0xb8/0x200 [ 29.263483][ T512] RBP: ffffc90002557c60 R08: ffff888113f77883 R09: 1ffff110227eef10 [ 29.268048][ T474] ? __kasan_check_read+0x11/0x20 [ 29.280890][ T492] ? sock_mmap+0xa0/0xa0 [ 29.285133][ T492] __fput+0x2dc/0x730 [ 29.289113][ T492] ____fput+0x15/0x20 [ 29.294169][ T474] __x64_sys_exit+0x40/0x40 [ 29.298667][ T474] do_syscall_64+0x31/0x40 [ 29.301425][ T512] R10: dffffc0000000000 R11: ffffed10227eef11 R12: dffffc0000000000 [ 29.303284][ T492] task_work_run+0x127/0x190 [ 29.311108][ T512] R13: dffffc0000000000 R14: 000000000ccf6ea0 R15: ffff88811416dc00 [ 29.318198][ T474] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.323674][ T512] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.331494][ T474] RIP: 0033:0x7f8ad0d470d9 [ 29.339162][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.343035][ T492] do_exit+0xa7c/0x24e0 [ 29.349468][ T512] CR2: 00007f8ad0d021f0 CR3: 000000012a318000 CR4: 00000000003506b0 [ 29.353749][ T474] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 29.369058][ T492] ? __kasan_check_write+0x14/0x20 [ 29.375183][ T492] ? switch_fpu_return+0x19c/0x330 [ 29.380411][ T474] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 29.381463][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.388824][ T474] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 29.396884][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.406037][ T492] ? put_task_struct+0x90/0x90 [ 29.418915][ T512] Call Trace: [ 29.419509][ T492] ? fpu__clear_all+0x20/0x20 [ 29.427105][ T492] ? __kasan_check_read+0x11/0x20 [ 29.432236][ T492] __x64_sys_exit+0x40/0x40 [ 29.436730][ T492] do_syscall_64+0x31/0x40 [ 29.441005][ T512] pppol2tp_release+0x150/0x2b0 [ 29.441295][ T474] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.446020][ T512] sock_close+0xb8/0x200 [ 29.455183][ T492] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.459234][ T553] ------------[ cut here ]------------ [ 29.467459][ T492] RIP: 0033:0x7f8ad0d470d9 [ 29.474133][ T474] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 29.474361][ T512] ? sock_mmap+0xa0/0xa0 [ 29.483682][ T492] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 29.486386][ T553] WARNING: CPU: 0 PID: 553 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.494053][ T512] __fput+0x2dc/0x730 [ 29.504551][ T553] Modules linked in: [ 29.510841][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.515258][ T553] CPU: 0 PID: 553 Comm: syz.2.66 Tainted: G B W syzkaller #0 [ 29.520325][ T474] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 29.530228][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.536188][ T492] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 29.546147][ T553] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.546280][ T512] ____fput+0x15/0x20 [ 29.552222][ T553] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 29.558838][ T474] ---[ end trace 3f9b97bcf14641b6 ]--- [ 29.582125][ T492] ORIG_RAX: 000000000000003c [ 29.582133][ T492] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 29.582139][ T492] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.582153][ T492] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 29.588720][ T512] task_work_run+0x127/0x190 [ 29.592304][ T553] RSP: 0018:ffffc900026bfc40 EFLAGS: 00010293 [ 29.600394][ T512] do_exit+0xa7c/0x24e0 [ 29.609371][ T553] [ 29.616602][ T512] ? __kasan_check_write+0x14/0x20 [ 29.639303][ T562] ------------[ cut here ]------------ [ 29.639355][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.645049][ T562] WARNING: CPU: 1 PID: 562 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.662863][ T512] ? switch_fpu_return+0x19c/0x330 [ 29.667964][ T512] ? put_task_struct+0x90/0x90 [ 29.673032][ T562] Modules linked in: [ 29.673698][ T553] RAX: ffffffff842f3167 RBX: ffff8881151f9000 RCX: ffff88811441bb40 [ 29.676961][ T562] CPU: 1 PID: 562 Comm: syz.2.69 Tainted: G B W syzkaller #0 [ 29.685099][ T492] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 29.693819][ T512] ? fpu__clear_all+0x20/0x20 [ 29.701562][ T553] RDX: 0000000000000000 RSI: 000000000ccf6500 RDI: 000000000c04eb7d [ 29.706452][ T512] ? __kasan_check_read+0x11/0x20 [ 29.714608][ T492] ---[ end trace 3f9b97bcf14641b7 ]--- [ 29.719724][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.725186][ T553] RBP: ffffc900026bfc60 R08: ffff8881151f9083 R09: 1ffff11022a3f210 [ 29.735261][ T512] __x64_sys_exit+0x40/0x40 [ 29.747744][ T512] do_syscall_64+0x31/0x40 [ 29.752360][ T562] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.757537][ T553] R10: dffffc0000000000 R11: ffffed1022a3f211 R12: dffffc0000000000 [ 29.758699][ T512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.766720][ T553] R13: dffffc0000000000 R14: 000000000ccf6500 R15: ffff88811453f800 [ 29.773516][ T562] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 29.800349][ T512] RIP: 0033:0x7f8ad0d470d9 [ 29.801921][ T553] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.804771][ T512] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 29.821335][ T562] RSP: 0018:ffffc9000251fc40 EFLAGS: 00010293 [ 29.827393][ T562] RAX: ffffffff842f3167 RBX: ffff8881140f6800 RCX: ffff88811529bb40 [ 29.835726][ T512] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 29.844313][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.851026][ T562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 29.851088][ T512] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 29.859002][ T562] RBP: ffffc9000251fc60 R08: ffff8881140f6883 R09: 1ffff1102281ed10 [ 29.867824][ T512] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.875180][ T553] CR2: 00007f8ad0fd0dac CR3: 000000011563e000 CR4: 00000000003506b0 [ 29.883235][ T512] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 29.892148][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.907009][ T562] R10: dffffc0000000000 R11: ffffed102281ed11 R12: dffffc0000000000 [ 29.907086][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.915105][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.924012][ T512] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 29.939045][ T512] ---[ end trace 3f9b97bcf14641b8 ]--- [ 29.946690][ T562] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881153f6000 [ 29.949200][ T553] Call Trace: [ 29.955938][ T562] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.958204][ T553] pppol2tp_release+0x150/0x2b0 [ 29.966988][ T562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.972822][ T553] sock_close+0xb8/0x200 [ 29.978567][ T562] CR2: 00007f8ad0fd0dac CR3: 0000000115651000 CR4: 00000000003506a0 [ 29.982818][ T553] ? sock_mmap+0xa0/0xa0 [ 29.991477][ T562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.995599][ T553] __fput+0x2dc/0x730 [ 30.003041][ T562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.007917][ T553] ____fput+0x15/0x20 [ 30.014938][ T562] Call Trace: [ 30.022228][ T553] task_work_run+0x127/0x190 [ 30.022245][ T553] do_exit+0xa7c/0x24e0 [ 30.027048][ T562] pppol2tp_release+0x150/0x2b0 [ 30.031134][ T553] ? __kasan_check_write+0x14/0x20 [ 30.035891][ T562] sock_close+0xb8/0x200 [ 30.045241][ T562] ? sock_mmap+0xa0/0xa0 [ 30.049477][ T562] __fput+0x2dc/0x730 [ 30.053513][ T562] ____fput+0x15/0x20 [ 30.057488][ T562] task_work_run+0x127/0x190 [ 30.062193][ T562] do_exit+0xa7c/0x24e0 [ 30.063295][ T553] ? switch_fpu_return+0x19c/0x330 [ 30.066397][ T562] ? __kasan_check_write+0x14/0x20 [ 30.071696][ T553] ? put_task_struct+0x90/0x90 [ 30.081109][ T562] ? switch_fpu_return+0x19c/0x330 [ 30.086506][ T562] ? put_task_struct+0x90/0x90 [ 30.087603][ T553] ? fpu__clear_all+0x20/0x20 [ 30.091394][ T562] ? fpu__clear_all+0x20/0x20 [ 30.091405][ T562] ? __kasan_check_read+0x11/0x20 [ 30.091415][ T562] __x64_sys_exit+0x40/0x40 [ 30.091424][ T562] do_syscall_64+0x31/0x40 [ 30.091435][ T562] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.091443][ T562] RIP: 0033:0x7f8ad0d470d9 [ 30.091449][ T562] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 30.091455][ T562] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.091468][ T562] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 30.091473][ T562] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.091485][ T562] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 30.097514][ T553] ? __kasan_check_read+0x11/0x20 [ 30.103820][ T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.106018][ T553] __x64_sys_exit+0x40/0x40 [ 30.110360][ T562] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 30.115050][ T553] do_syscall_64+0x31/0x40 [ 30.120611][ T562] ---[ end trace 3f9b97bcf14641b9 ]--- [ 30.177953][ T586] ------------[ cut here ]------------ [ 30.182302][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.182310][ T553] RIP: 0033:0x7f8ad0d470d9 [ 30.182315][ T553] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 30.182320][ T553] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.182330][ T553] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 30.182336][ T553] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.182349][ T553] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 30.191880][ T586] WARNING: CPU: 1 PID: 586 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.194951][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.201361][ T586] Modules linked in: [ 30.206001][ T553] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 30.211680][ T586] [ 30.216212][ T553] ---[ end trace 3f9b97bcf14641ba ]--- [ 30.223581][ T586] CPU: 1 PID: 586 Comm: syz.2.77 Tainted: G B W syzkaller #0 [ 30.303125][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.313281][ T586] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.319593][ T586] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 30.339395][ T586] RSP: 0018:ffffc900026a7c40 EFLAGS: 00010293 [ 30.347077][ T586] RAX: ffffffff842f3167 RBX: ffff88811594f800 RCX: ffff888115c5e2c0 [ 30.355092][ T586] RDX: 0000000000000000 RSI: 000000000ccf6160 RDI: 000000000c04eb7d [ 30.363097][ T586] RBP: ffffc900026a7c60 R08: ffff88811594f883 R09: 1ffff11022b29f10 [ 30.371199][ T586] R10: dffffc0000000000 R11: ffffed1022b29f11 R12: dffffc0000000000 [ 30.379240][ T586] R13: dffffc0000000000 R14: 000000000ccf6160 R15: ffff888115578800 [ 30.384795][ T601] ------------[ cut here ]------------ [ 30.387314][ T586] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.401612][ T601] WARNING: CPU: 1 PID: 601 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.412531][ T586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.419116][ T586] CR2: 00007f8ad1b01060 CR3: 000000012a318000 CR4: 00000000003506a0 [ 30.422416][ T601] Modules linked in: [ 30.428205][ T586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.431970][ T601] CPU: 0 PID: 601 Comm: syz.2.82 Tainted: G B W syzkaller #0 [ 30.441920][ T586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.449243][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.456487][ T586] Call Trace: [ 30.456501][ T586] pppol2tp_release+0x150/0x2b0 [ 30.456516][ T586] sock_close+0xb8/0x200 [ 30.467361][ T601] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.479442][ T586] ? sock_mmap+0xa0/0xa0 [ 30.486317][ T601] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 30.489971][ T586] __fput+0x2dc/0x730 [ 30.510769][ T601] RSP: 0018:ffffc900026bfc40 EFLAGS: 00010293 [ 30.513943][ T586] ____fput+0x15/0x20 [ 30.519613][ T601] RAX: ffffffff842f3167 RBX: ffff888115dd5000 RCX: ffff888115c5a780 [ 30.523590][ T586] task_work_run+0x127/0x190 [ 30.523601][ T586] do_exit+0xa7c/0x24e0 [ 30.523612][ T586] ? __kasan_check_write+0x14/0x20 [ 30.523624][ T586] ? switch_fpu_return+0x19c/0x330 [ 30.523633][ T586] ? put_task_struct+0x90/0x90 [ 30.523642][ T586] ? fpu__clear_all+0x20/0x20 [ 30.523650][ T586] ? __kasan_check_read+0x11/0x20 [ 30.523665][ T586] __x64_sys_exit+0x40/0x40 [ 30.532642][ T601] RDX: 0000000000000000 RSI: 000000000ccf6080 RDI: 000000000c04eb7d [ 30.536403][ T586] do_syscall_64+0x31/0x40 [ 30.540547][ T601] RBP: ffffc900026bfc60 R08: ffff888115dd5083 R09: 1ffff11022bbaa10 [ 30.545557][ T586] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.550703][ T601] R10: dffffc0000000000 R11: ffffed1022bbaa11 R12: dffffc0000000000 [ 30.555456][ T586] RIP: 0033:0x7f8ad0d470d9 [ 30.560172][ T601] R13: dffffc0000000000 R14: 000000000ccf6080 R15: ffff888113f47c00 [ 30.565105][ T586] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 30.569544][ T601] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.569551][ T601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.569563][ T601] CR2: 000055555b92b4e8 CR3: 000000010d5e6000 CR4: 00000000003506b0 [ 30.581583][ T586] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 30.586435][ T601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.595354][ T586] ORIG_RAX: 000000000000003c [ 30.599297][ T601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.606971][ T586] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 30.611895][ T601] Call Trace: [ 30.616286][ T586] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.623833][ T601] pppol2tp_release+0x150/0x2b0 [ 30.634326][ T586] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 30.639349][ T601] sock_close+0xb8/0x200 [ 30.647633][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.656677][ T601] ? sock_mmap+0xa0/0xa0 [ 30.664302][ T586] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 30.669599][ T601] __fput+0x2dc/0x730 [ 30.674126][ T586] ---[ end trace 3f9b97bcf14641bb ]--- [ 30.685043][ T601] ____fput+0x15/0x20 [ 30.744021][ T601] task_work_run+0x127/0x190 [ 30.748613][ T601] do_exit+0xa7c/0x24e0 [ 30.752823][ T601] ? __kasan_check_write+0x14/0x20 [ 30.757929][ T601] ? switch_fpu_return+0x19c/0x330 [ 30.764151][ T634] ------------[ cut here ]------------ [ 30.769618][ T634] WARNING: CPU: 0 PID: 634 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.781458][ T601] ? put_task_struct+0x90/0x90 [ 30.782407][ T634] Modules linked in: [ 30.786291][ T601] ? fpu__clear_all+0x20/0x20 [ 30.786294][ T634] [ 30.786310][ T634] CPU: 0 PID: 634 Comm: syz.2.93 Tainted: G B W syzkaller #0 [ 30.793253][ T601] ? __kasan_check_read+0x11/0x20 [ 30.794940][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.797194][ T601] __x64_sys_exit+0x40/0x40 [ 30.797209][ T601] do_syscall_64+0x31/0x40 [ 30.810672][ T634] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.812510][ T601] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.827199][ T634] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 30.831399][ T601] RIP: 0033:0x7f8ad0d470d9 [ 30.842623][ T634] RSP: 0018:ffffc9000299fc40 EFLAGS: 00010293 [ 30.864990][ T601] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 30.867241][ T634] [ 30.872891][ T601] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 30.879554][ T634] RAX: ffffffff842f3167 RBX: ffff888116515800 RCX: ffff8881163cbb40 [ 30.882148][ T601] ORIG_RAX: 000000000000003c [ 30.891519][ T634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 30.897192][ T601] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 30.900769][ T634] RBP: ffffc9000299fc60 R08: ffff888116515883 R09: 1ffff11022ca2b10 [ 30.909488][ T601] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.916920][ T634] R10: dffffc0000000000 R11: ffffed1022ca2b11 R12: dffffc0000000000 [ 30.924787][ T601] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 30.936395][ T634] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888116350000 [ 30.943009][ T601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.950663][ T634] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.956725][ T601] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 30.975624][ T634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.983134][ T601] ---[ end trace 3f9b97bcf14641bc ]--- [ 30.996626][ T634] CR2: 00007f8ad0fd0dac CR3: 000000010deaa000 CR4: 00000000003506b0 [ 31.006271][ T634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 2026/08/26 05:22:36 executed programs: 93 [ 31.017370][ T634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.025419][ T634] Call Trace: [ 31.028695][ T634] pppol2tp_release+0x150/0x2b0 [ 31.033557][ T634] sock_close+0xb8/0x200 [ 31.037784][ T634] ? sock_mmap+0xa0/0xa0 [ 31.042475][ T634] __fput+0x2dc/0x730 [ 31.046486][ T634] ____fput+0x15/0x20 [ 31.050826][ T634] task_work_run+0x127/0x190 [ 31.055427][ T634] do_exit+0xa7c/0x24e0 [ 31.059559][ T634] ? __kasan_check_write+0x14/0x20 [ 31.064678][ T634] ? switch_fpu_return+0x19c/0x330 [ 31.069807][ T634] ? put_task_struct+0x90/0x90 [ 31.074586][ T634] ? fpu__clear_all+0x20/0x20 [ 31.079554][ T634] ? __kasan_check_read+0x11/0x20 [ 31.084808][ T634] __x64_sys_exit+0x40/0x40 [ 31.089320][ T634] do_syscall_64+0x31/0x40 [ 31.098207][ T634] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.104163][ T634] RIP: 0033:0x7f8ad0d470d9 [ 31.108566][ T634] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 31.115937][ T634] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.125373][ T670] ------------[ cut here ]------------ [ 31.125897][ T634] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 31.131014][ T670] WARNING: CPU: 1 PID: 670 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.138911][ T634] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.151183][ T670] Modules linked in: [ 31.158270][ T634] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 31.161095][ T670] CPU: 1 PID: 670 Comm: syz.2.105 Tainted: G B W syzkaller #0 [ 31.170551][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.177689][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.185403][ T634] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 31.195539][ T670] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.203390][ T634] ---[ end trace 3f9b97bcf14641bd ]--- [ 31.215225][ T670] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 31.234970][ T670] RSP: 0018:ffffc90002a77c40 EFLAGS: 00010293 [ 31.241133][ T670] RAX: ffffffff842f3167 RBX: ffff888116b0d000 RCX: ffff88811740bb40 [ 31.249102][ T670] RDX: 0000000000000000 RSI: 000000000c0f8c80 RDI: 000000000c04eb7d [ 31.257098][ T670] RBP: ffffc90002a77c60 R08: ffff888116b0d083 R09: 1ffff11022d61a10 [ 31.265097][ T670] R10: dffffc0000000000 R11: ffffed1022d61a11 R12: dffffc0000000000 [ 31.273072][ T670] R13: dffffc0000000000 R14: 000000000c0f8c80 R15: ffff888116744000 [ 31.281062][ T670] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.290260][ T670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.297994][ T670] CR2: 0000200000000240 CR3: 000000000640f000 CR4: 00000000003506a0 [ 31.306075][ T670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.314062][ T670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.322088][ T670] Call Trace: [ 31.325375][ T670] pppol2tp_release+0x150/0x2b0 [ 31.330345][ T670] sock_close+0xb8/0x200 [ 31.334587][ T670] ? sock_mmap+0xa0/0xa0 [ 31.338813][ T670] __fput+0x2dc/0x730 [ 31.342834][ T670] ____fput+0x15/0x20 [ 31.346811][ T670] task_work_run+0x127/0x190 [ 31.351560][ T670] do_exit+0xa7c/0x24e0 [ 31.355721][ T670] ? __kasan_check_write+0x14/0x20 [ 31.361012][ T670] ? switch_fpu_return+0x19c/0x330 [ 31.366128][ T670] ? put_task_struct+0x90/0x90 [ 31.370989][ T670] ? fpu__clear_all+0x20/0x20 [ 31.373361][ T694] ------------[ cut here ]------------ [ 31.375664][ T670] ? __kasan_check_read+0x11/0x20 [ 31.381638][ T694] WARNING: CPU: 0 PID: 694 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.389092][ T670] __x64_sys_exit+0x40/0x40 [ 31.400976][ T670] do_syscall_64+0x31/0x40 [ 31.405392][ T670] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.411413][ T670] RIP: 0033:0x7f8ad0d470d9 [ 31.414537][ T694] Modules linked in: [ 31.415818][ T670] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 31.415821][ T694] [ 31.415836][ T694] CPU: 0 PID: 694 Comm: syz.2.113 Tainted: G B W syzkaller #0 [ 31.419895][ T670] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 31.427246][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.429393][ T670] ORIG_RAX: 000000000000003c [ 31.454774][ T694] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.459611][ T670] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 31.466319][ T694] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 31.473165][ T670] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.502355][ T670] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 31.503436][ T694] RSP: 0018:ffffc90002b07c40 EFLAGS: 00010293 [ 31.511406][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.517348][ T694] RAX: ffffffff842f3167 RBX: ffff88811793c000 RCX: ffff888117af93c0 [ 31.524665][ T670] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 31.532791][ T694] RDX: 0000000000000000 RSI: 0000000017533700 RDI: 000000000c04eb7d [ 31.541394][ T670] ---[ end trace 3f9b97bcf14641be ]--- [ 31.548800][ T694] RBP: ffffc90002b07c60 R08: ffff88811793c083 R09: 1ffff11022f27810 [ 31.555128][ T718] ------------[ cut here ]------------ [ 31.562092][ T694] R10: dffffc0000000000 R11: ffffed1022f27811 R12: dffffc0000000000 [ 31.568380][ T718] WARNING: CPU: 0 PID: 718 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.576309][ T694] R13: dffffc0000000000 R14: 0000000017533700 R15: ffff888116747000 [ 31.586044][ T718] Modules linked in: [ 31.593489][ T694] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.593502][ T694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.597726][ T718] [ 31.607198][ T694] CR2: 00007f8ad0d021f0 CR3: 0000000118000000 CR4: 00000000003506a0 [ 31.614059][ T718] CPU: 0 PID: 718 Comm: syz.2.121 Tainted: G B W syzkaller #0 [ 31.615293][ T694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.623374][ T718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.631839][ T694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.657925][ T718] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.659339][ T694] Call Trace: [ 31.664577][ T718] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 31.668636][ T694] pppol2tp_release+0x150/0x2b0 [ 31.687443][ T718] RSP: 0018:ffffc90002c5fc40 EFLAGS: 00010293 [ 31.692613][ T694] sock_close+0xb8/0x200 [ 31.692775][ T718] [ 31.698750][ T694] ? sock_mmap+0xa0/0xa0 [ 31.703396][ T718] RAX: ffffffff842f3167 RBX: ffff888117925800 RCX: ffff8881181313c0 [ 31.705354][ T694] __fput+0x2dc/0x730 [ 31.709524][ T718] RDX: 0000000000000000 RSI: 0000000011dc2500 RDI: 000000000c04eb7d [ 31.717571][ T694] ____fput+0x15/0x20 [ 31.729608][ T718] RBP: ffffc90002c5fc60 R08: ffff888117925883 R09: 1ffff11022f24b10 [ 31.734299][ T694] task_work_run+0x127/0x190 [ 31.741684][ T718] R10: dffffc0000000000 R11: ffffed1022f24b11 R12: dffffc0000000000 [ 31.746240][ T694] do_exit+0xa7c/0x24e0 [ 31.758170][ T694] ? __kasan_check_write+0x14/0x20 [ 31.763339][ T694] ? switch_fpu_return+0x19c/0x330 [ 31.768445][ T694] ? put_task_struct+0x90/0x90 [ 31.771387][ T718] R13: dffffc0000000000 R14: 0000000011dc2500 R15: ffff8881164c5000 [ 31.774496][ T694] ? fpu__clear_all+0x20/0x20 [ 31.781415][ T718] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.787666][ T694] ? __kasan_check_read+0x11/0x20 [ 31.800017][ T718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.806596][ T718] CR2: 00007f8ad1b01060 CR3: 000000010d4e9000 CR4: 00000000003506b0 [ 31.814661][ T694] __x64_sys_exit+0x40/0x40 [ 31.819167][ T694] do_syscall_64+0x31/0x40 [ 31.823635][ T694] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.829517][ T694] RIP: 0033:0x7f8ad0d470d9 [ 31.831010][ T718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.835015][ T694] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 31.842219][ T718] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.852514][ T694] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.862181][ T718] Call Trace: [ 31.867177][ T694] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 31.868946][ T718] pppol2tp_release+0x150/0x2b0 [ 31.880522][ T694] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.885848][ T718] sock_close+0xb8/0x200 [ 31.891257][ T694] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 31.894054][ T718] ? sock_mmap+0xa0/0xa0 [ 31.905956][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.909774][ T718] __fput+0x2dc/0x730 [ 31.915632][ T694] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 31.918201][ T718] ____fput+0x15/0x20 [ 31.929789][ T694] ---[ end trace 3f9b97bcf14641bf ]--- [ 31.935215][ T718] task_work_run+0x127/0x190 [ 31.943687][ T718] do_exit+0xa7c/0x24e0 [ 31.949059][ T718] ? __kasan_check_write+0x14/0x20 [ 31.954609][ T718] ? switch_fpu_return+0x19c/0x330 [ 31.959739][ T718] ? put_task_struct+0x90/0x90 [ 31.964492][ T718] ? fpu__clear_all+0x20/0x20 [ 31.969146][ T718] ? __kasan_check_read+0x11/0x20 [ 31.974494][ T718] __x64_sys_exit+0x40/0x40 [ 31.978974][ T718] do_syscall_64+0x31/0x40 [ 31.983390][ T718] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.989266][ T718] RIP: 0033:0x7f8ad0d470d9 [ 31.993855][ T718] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 32.001235][ T718] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.009706][ T718] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 32.017669][ T718] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.025819][ T718] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 32.037724][ T718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.045821][ T718] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 32.053945][ T718] ---[ end trace 3f9b97bcf14641c0 ]--- [ 32.060022][ T745] ------------[ cut here ]------------ [ 32.065474][ T745] WARNING: CPU: 0 PID: 745 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.075469][ T745] Modules linked in: [ 32.079393][ T745] CPU: 0 PID: 745 Comm: syz.2.130 Tainted: G B W syzkaller #0 [ 32.089320][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.099512][ T745] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.105874][ T745] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 32.125614][ T745] RSP: 0018:ffffc90002a77c40 EFLAGS: 00010293 [ 32.131839][ T745] RAX: ffffffff842f3167 RBX: ffff888112931800 RCX: ffff888118a4e2c0 [ 32.139834][ T745] RDX: 0000000000000000 RSI: 000000000b9df3a0 RDI: 000000000c04eb7d [ 32.147823][ T745] RBP: ffffc90002a77c60 R08: ffff888112931883 R09: 1ffff11022526310 [ 32.155801][ T745] R10: dffffc0000000000 R11: ffffed1022526311 R12: dffffc0000000000 [ 32.163789][ T745] R13: dffffc0000000000 R14: 000000000b9df3a0 R15: ffff888117247000 [ 32.171781][ T745] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.180800][ T745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.187370][ T745] CR2: 00007f8ad0d021f0 CR3: 000000010d4e9000 CR4: 00000000003506a0 [ 32.195362][ T745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.204193][ T745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.212285][ T745] Call Trace: [ 32.215576][ T745] pppol2tp_release+0x150/0x2b0 [ 32.220833][ T745] sock_close+0xb8/0x200 [ 32.228472][ T745] ? sock_mmap+0xa0/0xa0 [ 32.233979][ T745] __fput+0x2dc/0x730 [ 32.237985][ T745] ____fput+0x15/0x20 [ 32.242052][ T745] task_work_run+0x127/0x190 [ 32.246650][ T745] do_exit+0xa7c/0x24e0 [ 32.247424][ T769] ------------[ cut here ]------------ [ 32.250821][ T745] ? __kasan_check_write+0x14/0x20 [ 32.250838][ T745] ? switch_fpu_return+0x19c/0x330 [ 32.256504][ T769] WARNING: CPU: 0 PID: 769 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.261370][ T745] ? put_task_struct+0x90/0x90 [ 32.261384][ T745] ? fpu__clear_all+0x20/0x20 [ 32.266605][ T769] Modules linked in: [ 32.276430][ T745] ? __kasan_check_read+0x11/0x20 [ 32.276440][ T745] __x64_sys_exit+0x40/0x40 [ 32.276450][ T745] do_syscall_64+0x31/0x40 [ 32.276459][ T745] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.276466][ T745] RIP: 0033:0x7f8ad0d470d9 [ 32.276470][ T745] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 32.276475][ T745] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.276486][ T745] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 32.276498][ T745] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.283122][ T769] [ 32.286792][ T745] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 32.290396][ T769] CPU: 0 PID: 769 Comm: syz.2.138 Tainted: G B W syzkaller #0 [ 32.294832][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.299301][ T769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.304170][ T745] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 32.312670][ T769] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.314244][ T745] ---[ end trace 3f9b97bcf14641c1 ]--- [ 32.322391][ T769] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 32.422452][ T769] RSP: 0018:ffffc90002d87c40 EFLAGS: 00010293 [ 32.428511][ T769] RAX: ffffffff842f3167 RBX: ffff888118d07800 RCX: ffff8881191062c0 [ 32.436524][ T769] RDX: 0000000000000000 RSI: 0000000018000c40 RDI: 000000000c04eb7d [ 32.444634][ T769] RBP: ffffc90002d87c60 R08: ffff888118d07883 R09: 1ffff110231a0f10 [ 32.452658][ T769] R10: dffffc0000000000 R11: ffffed10231a0f11 R12: dffffc0000000000 [ 32.460702][ T769] R13: dffffc0000000000 R14: 0000000018000c40 R15: ffff888118b1b400 [ 32.468668][ T769] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.477752][ T769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.481125][ T793] ------------[ cut here ]------------ [ 32.484978][ T769] CR2: 00007f8ad0fd0dac CR3: 000000000640f000 CR4: 00000000003506b0 [ 32.490820][ T793] WARNING: CPU: 1 PID: 793 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.499169][ T769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.516021][ T769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.522849][ T793] Modules linked in: [ 32.524190][ T769] Call Trace: [ 32.527870][ T793] CPU: 1 PID: 793 Comm: syz.2.146 Tainted: G B W syzkaller #0 [ 32.533849][ T769] pppol2tp_release+0x150/0x2b0 [ 32.544673][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.544962][ T769] sock_close+0xb8/0x200 [ 32.555551][ T793] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.559125][ T769] ? sock_mmap+0xa0/0xa0 [ 32.570141][ T769] __fput+0x2dc/0x730 [ 32.571231][ T793] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 32.574128][ T769] ____fput+0x15/0x20 [ 32.594568][ T793] RSP: 0018:ffffc90002f27c40 EFLAGS: 00010293 [ 32.599012][ T769] task_work_run+0x127/0x190 [ 32.604753][ T793] RAX: ffffffff842f3167 RBX: ffff888112c09800 RCX: ffff888119494f00 [ 32.608615][ T769] do_exit+0xa7c/0x24e0 [ 32.620603][ T769] ? __kasan_check_write+0x14/0x20 [ 32.625963][ T769] ? switch_fpu_return+0x19c/0x330 [ 32.627138][ T793] RDX: 0000000000000000 RSI: 000000000b13d8a0 RDI: 000000000c04eb7d [ 32.633015][ T769] ? put_task_struct+0x90/0x90 [ 32.639248][ T793] RBP: ffffc90002f27c60 R08: ffff888112c09883 R09: 1ffff11022581310 [ 32.644157][ T769] ? fpu__clear_all+0x20/0x20 [ 32.652168][ T793] R10: dffffc0000000000 R11: ffffed1022581311 R12: dffffc0000000000 [ 32.657075][ T769] ? __kasan_check_read+0x11/0x20 [ 32.665107][ T793] R13: dffffc0000000000 R14: 000000000b13d8a0 R15: ffff8881194b2c00 [ 32.670003][ T769] __x64_sys_exit+0x40/0x40 [ 32.682521][ T769] do_syscall_64+0x31/0x40 [ 32.687902][ T769] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.690306][ T793] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.694118][ T769] RIP: 0033:0x7f8ad0d470d9 [ 32.709413][ T814] ------------[ cut here ]------------ [ 32.714922][ T769] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 32.717616][ T793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.722547][ T814] WARNING: CPU: 0 PID: 814 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.722550][ T814] Modules linked in: [ 32.722565][ T814] CPU: 0 PID: 814 Comm: syz.2.153 Tainted: G B W syzkaller #0 [ 32.722570][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.722580][ T814] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.722590][ T814] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 32.722596][ T814] RSP: 0018:ffffc90002e57c40 EFLAGS: 00010293 [ 32.722606][ T814] RAX: ffffffff842f3167 RBX: ffff888112c0e800 RCX: ffff888119490000 [ 32.722613][ T814] RDX: 0000000000000000 RSI: 000000000b13d600 RDI: 000000000c04eb7d [ 32.722621][ T814] RBP: ffffc90002e57c60 R08: ffff888112c0e883 R09: 1ffff11022581d10 [ 32.722628][ T814] R10: dffffc0000000000 R11: ffffed1022581d11 R12: dffffc0000000000 [ 32.722635][ T814] R13: dffffc0000000000 R14: 000000000b13d600 R15: ffff888119804800 [ 32.722643][ T814] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.722650][ T814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.722657][ T814] CR2: 00007f8ad0d021f0 CR3: 000000010d4e9000 CR4: 00000000003506b0 [ 32.722667][ T814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.722673][ T814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.722676][ T814] Call Trace: [ 32.722687][ T814] pppol2tp_release+0x150/0x2b0 [ 32.722697][ T814] sock_close+0xb8/0x200 [ 32.722706][ T814] ? sock_mmap+0xa0/0xa0 [ 32.722715][ T814] __fput+0x2dc/0x730 [ 32.722725][ T814] ____fput+0x15/0x20 [ 32.722734][ T814] task_work_run+0x127/0x190 [ 32.722745][ T814] do_exit+0xa7c/0x24e0 [ 32.722757][ T814] ? __kasan_check_write+0x14/0x20 [ 32.722768][ T814] ? switch_fpu_return+0x19c/0x330 [ 32.722777][ T814] ? put_task_struct+0x90/0x90 [ 32.722786][ T814] ? fpu__clear_all+0x20/0x20 [ 32.722796][ T814] ? __kasan_check_read+0x11/0x20 [ 32.722805][ T814] __x64_sys_exit+0x40/0x40 [ 32.722815][ T814] do_syscall_64+0x31/0x40 [ 32.722824][ T814] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.722831][ T814] RIP: 0033:0x7f8ad0d470d9 [ 32.722836][ T814] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 32.722843][ T814] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.722858][ T814] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 32.729428][ T793] CR2: 00007f8ad0fd0dac CR3: 00000001177e1000 CR4: 00000000003506a0 [ 32.740634][ T769] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 32.744973][ T793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.752132][ T814] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.763458][ T793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.768531][ T769] ORIG_RAX: 000000000000003c [ 32.789131][ T793] Call Trace: [ 32.794292][ T814] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 32.817290][ T793] pppol2tp_release+0x150/0x2b0 [ 32.818265][ T769] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 32.826209][ T793] sock_close+0xb8/0x200 [ 32.836831][ T769] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.848138][ T814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.850467][ T769] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 32.857950][ T814] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 32.868316][ T769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.883444][ T814] ---[ end trace 3f9b97bcf14641c2 ]--- [ 32.886916][ T793] ? sock_mmap+0xa0/0xa0 [ 32.890570][ T769] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 32.894301][ T793] __fput+0x2dc/0x730 [ 32.898079][ T769] ---[ end trace 3f9b97bcf14641c3 ]--- [ 32.902843][ T793] ____fput+0x15/0x20 [ 33.041233][ T838] ------------[ cut here ]------------ [ 33.045467][ T793] task_work_run+0x127/0x190 [ 33.061777][ T838] WARNING: CPU: 1 PID: 838 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.069405][ T793] do_exit+0xa7c/0x24e0 [ 33.095887][ T841] ------------[ cut here ]------------ [ 33.102984][ T793] ? __kasan_check_write+0x14/0x20 [ 33.103001][ T793] ? switch_fpu_return+0x19c/0x330 [ 33.107798][ T838] Modules linked in: [ 33.113275][ T793] ? put_task_struct+0x90/0x90 [ 33.116489][ T838] [ 33.121962][ T841] WARNING: CPU: 0 PID: 841 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.126484][ T838] CPU: 1 PID: 838 Comm: syz.2.161 Tainted: G B W syzkaller #0 [ 33.136493][ T793] ? fpu__clear_all+0x20/0x20 [ 33.141714][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.147476][ T793] ? __kasan_check_read+0x11/0x20 [ 33.155648][ T838] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.156874][ T841] Modules linked in: [ 33.160306][ T838] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 33.165070][ T793] __x64_sys_exit+0x40/0x40 [ 33.167333][ T838] RSP: 0018:ffffc900030afc40 EFLAGS: 00010293 [ 33.178399][ T841] [ 33.187566][ T838] [ 33.191007][ T793] do_syscall_64+0x31/0x40 [ 33.201628][ T838] RAX: ffffffff842f3167 RBX: ffff888119d2e800 RCX: ffff8881183213c0 [ 33.205901][ T841] CPU: 0 PID: 841 Comm: syz.2.162 Tainted: G B W syzkaller #0 [ 33.212198][ T838] RDX: 0000000000000000 RSI: 0000000016718440 RDI: 000000000c04eb7d [ 33.216029][ T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.235566][ T838] RBP: ffffc900030afc60 R08: ffff888119d2e883 R09: 1ffff110233a5d10 [ 33.235574][ T838] R10: dffffc0000000000 R11: ffffed10233a5d11 R12: dffffc0000000000 [ 33.235586][ T838] R13: dffffc0000000000 R14: 0000000016718440 R15: ffff888119717c00 [ 33.240233][ T793] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.248578][ T838] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.251001][ T793] RIP: 0033:0x7f8ad0d470d9 [ 33.255250][ T838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.263459][ T841] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.272561][ T838] CR2: 00007f8ad0fcefac CR3: 0000000119f95000 CR4: 00000000003506a0 [ 33.281091][ T793] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 33.289887][ T841] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 33.300447][ T838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.308538][ T841] RSP: 0018:ffffc9000309fc40 EFLAGS: 00010293 [ 33.313951][ T793] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 33.321449][ T841] [ 33.333602][ T838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.341386][ T841] RAX: ffffffff842f3167 RBX: ffff888119d2b000 RCX: ffff88810dd262c0 [ 33.346683][ T793] ORIG_RAX: 000000000000003c [ 33.353907][ T838] Call Trace: [ 33.361742][ T841] RDX: 0000000000000000 RSI: 00000000167180a0 RDI: 000000000c04eb7d [ 33.381699][ T793] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 33.394474][ T838] pppol2tp_release+0x150/0x2b0 [ 33.397506][ T793] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.401693][ T841] RBP: ffffc9000309fc60 R08: ffff888119d2b083 R09: 1ffff110233a5610 [ 33.403464][ T793] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 33.412556][ T838] sock_close+0xb8/0x200 [ 33.419376][ T793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.424960][ T856] ------------[ cut here ]------------ [ 33.427349][ T793] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 33.440964][ T841] R10: dffffc0000000000 R11: ffffed10233a5611 R12: dffffc0000000000 [ 33.445786][ T793] ---[ end trace 3f9b97bcf14641c4 ]--- [ 33.448876][ T856] WARNING: CPU: 0 PID: 856 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.457221][ T838] ? sock_mmap+0xa0/0xa0 [ 33.464397][ T841] R13: dffffc0000000000 R14: 00000000167180a0 R15: ffff888119f92000 [ 33.472255][ T838] __fput+0x2dc/0x730 [ 33.476591][ T841] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.484553][ T838] ____fput+0x15/0x20 [ 33.490025][ T856] Modules linked in: [ 33.498733][ T838] task_work_run+0x127/0x190 [ 33.505976][ T841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.511370][ T838] do_exit+0xa7c/0x24e0 [ 33.521586][ T856] [ 33.525758][ T838] ? __kasan_check_write+0x14/0x20 [ 33.537985][ T841] CR2: 00007f8ad0ba7ff8 CR3: 000000011acdc000 CR4: 00000000003506b0 [ 33.547627][ T838] ? switch_fpu_return+0x19c/0x330 [ 33.557991][ T856] CPU: 0 PID: 856 Comm: syz.2.167 Tainted: G B W syzkaller #0 [ 33.561012][ T838] ? put_task_struct+0x90/0x90 [ 33.567337][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.569884][ T838] ? fpu__clear_all+0x20/0x20 [ 33.577035][ T856] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.578793][ T838] ? __kasan_check_read+0x11/0x20 [ 33.585875][ T841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.591353][ T838] __x64_sys_exit+0x40/0x40 [ 33.600242][ T865] ------------[ cut here ]------------ [ 33.606955][ T838] do_syscall_64+0x31/0x40 [ 33.645487][ T856] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 33.650586][ T838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.671616][ T865] WARNING: CPU: 0 PID: 865 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.678706][ T838] RIP: 0033:0x7f8ad0d470d9 [ 33.687660][ T841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.692582][ T838] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 33.700968][ T856] RSP: 0018:ffffc9000303fc40 EFLAGS: 00010293 [ 33.707542][ T838] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.713706][ T841] Call Trace: [ 33.722121][ T838] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 33.725328][ T865] Modules linked in: [ 33.733169][ T856] RAX: ffffffff842f3167 RBX: ffff888119a7e000 RCX: ffff88811a518000 [ 33.733305][ T838] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.745105][ T856] RDX: 0000000000000000 RSI: 0000000019e09e00 RDI: 000000000c04eb7d [ 33.754741][ T838] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 33.767884][ T865] [ 33.771255][ T838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.771716][ T841] pppol2tp_release+0x150/0x2b0 [ 33.779359][ T838] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 33.786206][ T865] CPU: 0 PID: 865 Comm: syz.2.170 Tainted: G B W syzkaller #0 [ 33.792363][ T838] ---[ end trace 3f9b97bcf14641c5 ]--- [ 33.808038][ T856] RBP: ffffc9000303fc60 R08: ffff888119a7e083 R09: 1ffff1102334fc10 [ 33.808564][ T841] sock_close+0xb8/0x200 [ 33.817032][ T856] R10: dffffc0000000000 R11: ffffed102334fc11 R12: dffffc0000000000 [ 33.820550][ T865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.828395][ T856] R13: dffffc0000000000 R14: 0000000019e09e00 R15: ffff888119f90400 [ 33.838689][ T841] ? sock_mmap+0xa0/0xa0 [ 33.846588][ T856] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.851474][ T865] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.859893][ T856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.866406][ T841] __fput+0x2dc/0x730 [ 33.872568][ T856] CR2: 0000001b33863fff CR3: 000000011acd1000 CR4: 00000000003506a0 [ 33.876584][ T841] ____fput+0x15/0x20 [ 33.884544][ T856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.896475][ T856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.896584][ T865] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 33.904578][ T856] Call Trace: [ 33.924534][ T841] task_work_run+0x127/0x190 [ 33.930623][ T856] pppol2tp_release+0x150/0x2b0 [ 33.934815][ T841] do_exit+0xa7c/0x24e0 [ 33.939270][ T856] sock_close+0xb8/0x200 [ 33.941983][ T841] ? __kasan_check_write+0x14/0x20 [ 33.946354][ T856] ? sock_mmap+0xa0/0xa0 [ 33.950508][ T841] ? switch_fpu_return+0x19c/0x330 [ 33.950523][ T841] ? put_task_struct+0x90/0x90 [ 33.955475][ T856] __fput+0x2dc/0x730 [ 33.960745][ T883] ------------[ cut here ]------------ [ 33.967132][ T856] ____fput+0x15/0x20 [ 33.970603][ T865] RSP: 0018:ffffc9000319fc40 EFLAGS: 00010293 [ 33.976067][ T856] task_work_run+0x127/0x190 [ 33.978223][ T883] WARNING: CPU: 0 PID: 883 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.988089][ T856] do_exit+0xa7c/0x24e0 [ 33.991768][ T865] [ 34.001847][ T856] ? __kasan_check_write+0x14/0x20 [ 34.003226][ T841] ? fpu__clear_all+0x20/0x20 [ 34.005217][ T856] ? switch_fpu_return+0x19c/0x330 [ 34.010382][ T883] Modules linked in: [ 34.015229][ T856] ? put_task_struct+0x90/0x90 [ 34.028869][ T865] RAX: ffffffff842f3167 RBX: ffff88811a246000 RCX: ffff88811a7f4f00 [ 34.030905][ T856] ? fpu__clear_all+0x20/0x20 [ 34.037167][ T841] ? __kasan_check_read+0x11/0x20 [ 34.041601][ T856] ? __kasan_check_read+0x11/0x20 [ 34.047765][ T883] [ 34.051716][ T856] __x64_sys_exit+0x40/0x40 [ 34.054072][ T841] __x64_sys_exit+0x40/0x40 [ 34.058473][ T856] do_syscall_64+0x31/0x40 [ 34.063067][ T865] RDX: 0000000000000000 RSI: 00000000198c4640 RDI: 000000000c04eb7d [ 34.067385][ T856] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.076961][ T883] CPU: 0 PID: 883 Comm: syz.2.176 Tainted: G B W syzkaller #0 [ 34.081367][ T856] RIP: 0033:0x7f8ad0d470d9 [ 34.090115][ T841] do_syscall_64+0x31/0x40 [ 34.095053][ T856] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 34.106141][ T856] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.110515][ T841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.117306][ T856] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 34.120844][ T865] RBP: ffffc9000319fc60 R08: ffff88811a246083 R09: 1ffff11023448c10 [ 34.128451][ T856] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.136676][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.144519][ T856] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 34.156290][ T841] RIP: 0033:0x7f8ad0d470d9 [ 34.167925][ T892] ------------[ cut here ]------------ [ 34.169422][ T856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.176072][ T892] WARNING: CPU: 0 PID: 892 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.184292][ T856] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 34.191743][ T841] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 34.206870][ T865] R10: dffffc0000000000 R11: ffffed1023448c11 R12: dffffc0000000000 [ 34.207876][ T892] Modules linked in: [ 34.214917][ T841] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 34.215952][ T883] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.218850][ T892] [ 34.225762][ T865] R13: dffffc0000000000 R14: 00000000198c4640 R15: ffff88811a5d2400 [ 34.235820][ T841] ORIG_RAX: 000000000000003c [ 34.243904][ T883] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 34.246475][ T841] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 34.266986][ T856] ---[ end trace 3f9b97bcf14641c6 ]--- [ 34.273944][ T892] CPU: 0 PID: 892 Comm: syz.2.179 Tainted: G B W syzkaller #0 [ 34.279569][ T865] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.288790][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.297190][ T883] RSP: 0018:ffffc900031cfc40 EFLAGS: 00010293 [ 34.307900][ T841] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.313230][ T865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.321343][ T892] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.331296][ T883] RAX: ffffffff842f3167 RBX: ffff88811af7c000 RCX: ffff88811ae193c0 [ 34.336385][ T841] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 34.343909][ T865] CR2: 00007f8ad0fd0dac CR3: 000000010d4e9000 CR4: 00000000003506a0 [ 34.350121][ T892] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 34.361964][ T883] RDX: 0000000000000000 RSI: 000000000ad83000 RDI: 000000000c04eb7d [ 34.380843][ T892] RSP: 0018:ffffc90003267c40 EFLAGS: 00010293 [ 34.388109][ T841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.392851][ T904] ------------[ cut here ]------------ [ 34.399579][ T865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.406178][ T892] RAX: ffffffff842f3167 RBX: ffff88811ac6d000 RCX: ffff88811a7b93c0 [ 34.413257][ T841] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 34.426029][ T904] WARNING: CPU: 0 PID: 904 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.431330][ T865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.447171][ T892] RDX: 0000000000000000 RSI: 0000000016718f60 RDI: 000000000c04eb7d [ 34.448922][ T883] RBP: ffffc900031cfc60 R08: ffff88811af7c083 R09: 1ffff110235ef810 [ 34.456117][ T904] Modules linked in: [ 34.463296][ T892] RBP: ffffc90003267c60 R08: ffff88811ac6d083 R09: 1ffff1102358da10 [ 34.463326][ T841] ---[ end trace 3f9b97bcf14641c7 ]--- [ 34.466060][ T865] Call Trace: [ 34.477116][ T883] R10: dffffc0000000000 R11: ffffed10235ef811 R12: dffffc0000000000 [ 34.481329][ T904] [ 34.483987][ T883] R13: dffffc0000000000 R14: 000000000ad83000 R15: ffff888119b01400 [ 34.494189][ T892] R10: dffffc0000000000 R11: ffffed102358da11 R12: dffffc0000000000 [ 34.495147][ T865] pppol2tp_release+0x150/0x2b0 [ 34.506551][ T904] CPU: 0 PID: 904 Comm: syz.2.183 Tainted: G B W syzkaller #0 [ 34.512829][ T883] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.516023][ T892] R13: dffffc0000000000 R14: 0000000016718f60 R15: ffff88811a58c400 [ 34.524875][ T865] sock_close+0xb8/0x200 [ 34.532859][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.543322][ T883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.545224][ T904] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.555334][ T883] CR2: 00007f8ad0d021f0 CR3: 000000000640f000 CR4: 00000000003506a0 [ 34.565671][ T892] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.570952][ T865] ? sock_mmap+0xa0/0xa0 [ 34.576825][ T904] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 34.585801][ T883] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.589294][ T892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.611727][ T865] __fput+0x2dc/0x730 [ 34.618489][ T913] ------------[ cut here ]------------ [ 34.623708][ T865] ____fput+0x15/0x20 [ 34.627584][ T913] WARNING: CPU: 0 PID: 913 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.633657][ T883] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.637109][ T904] RSP: 0018:ffffc900032d7c40 EFLAGS: 00010293 [ 34.647034][ T865] task_work_run+0x127/0x190 [ 34.659019][ T913] Modules linked in: [ 34.662839][ T883] Call Trace: [ 34.666469][ T913] [ 34.669530][ T883] pppol2tp_release+0x150/0x2b0 [ 34.672885][ T913] CPU: 0 PID: 913 Comm: syz.2.186 Tainted: G B W syzkaller #0 [ 34.675123][ T865] do_exit+0xa7c/0x24e0 [ 34.680143][ T892] CR2: 000055555b946908 CR3: 000000012a318000 CR4: 00000000003506b0 [ 34.689669][ T883] sock_close+0xb8/0x200 [ 34.692860][ T904] [ 34.701846][ T865] ? __kasan_check_write+0x14/0x20 [ 34.705099][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.713496][ T865] ? switch_fpu_return+0x19c/0x330 [ 34.727781][ T892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.730540][ T883] ? sock_mmap+0xa0/0xa0 [ 34.740543][ T904] RAX: ffffffff842f3167 RBX: ffff88811c507800 RCX: ffff88811a280000 [ 34.749588][ T883] __fput+0x2dc/0x730 [ 34.750573][ T904] RDX: 0000000000000000 RSI: 0000000018fd96e0 RDI: 000000000c04eb7d [ 34.756519][ T865] ? put_task_struct+0x90/0x90 [ 34.761953][ T904] RBP: ffffc900032d7c60 R08: ffff88811c507883 R09: 1ffff110238a0f10 [ 34.766626][ T892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.774549][ T904] R10: dffffc0000000000 R11: ffffed10238a0f11 R12: dffffc0000000000 [ 34.786059][ T883] ____fput+0x15/0x20 [ 34.792688][ T904] R13: dffffc0000000000 R14: 0000000018fd96e0 R15: ffff88811c4ab000 [ 34.797924][ T913] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.803063][ T904] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.810222][ T865] ? fpu__clear_all+0x20/0x20 [ 34.818212][ T904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.822814][ T883] task_work_run+0x127/0x190 [ 34.829448][ T904] CR2: 00007f8ad0d021f0 CR3: 00000001067ed000 CR4: 00000000003506b0 [ 34.841741][ T913] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 34.841749][ T913] RSP: 0018:ffffc900030afc40 EFLAGS: 00010293 [ 34.841760][ T913] RAX: ffffffff842f3167 RBX: ffff88811c3b2800 RCX: ffff88811b1693c0 [ 34.841767][ T913] RDX: 0000000000000000 RSI: 000000001a7c6800 RDI: 000000000c04eb7d [ 34.841775][ T913] RBP: ffffc900030afc60 R08: ffff88811c3b2883 R09: 1ffff11023876510 [ 34.841782][ T913] R10: dffffc0000000000 R11: ffffed1023876511 R12: dffffc0000000000 [ 34.841790][ T913] R13: dffffc0000000000 R14: 000000001a7c6800 R15: ffff88811c562c00 [ 34.841799][ T913] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.841805][ T913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.841819][ T913] CR2: 0000200000000240 CR3: 0000000119e91000 CR4: 00000000003506a0 [ 34.861968][ T904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.871352][ T892] Call Trace: [ 34.878654][ T931] ------------[ cut here ]------------ [ 34.886597][ T865] ? __kasan_check_read+0x11/0x20 [ 34.892066][ T931] WARNING: CPU: 0 PID: 931 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.900689][ T883] do_exit+0xa7c/0x24e0 [ 34.907715][ T931] Modules linked in: [ 34.921503][ T904] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.926877][ T931] [ 34.932628][ T892] pppol2tp_release+0x150/0x2b0 [ 34.939306][ T931] CPU: 0 PID: 931 Comm: syz.2.192 Tainted: G B W syzkaller #0 [ 34.942500][ T865] __x64_sys_exit+0x40/0x40 [ 34.948043][ T931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.956482][ T904] Call Trace: [ 34.965009][ T931] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.971532][ T913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.979333][ T931] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 34.981387][ T883] ? __kasan_check_write+0x14/0x20 [ 34.986309][ T931] RSP: 0018:ffffc90003297c40 EFLAGS: 00010293 [ 34.999807][ T892] sock_close+0xb8/0x200 [ 35.011447][ T931] [ 35.018065][ T865] do_syscall_64+0x31/0x40 [ 35.019925][ T931] RAX: ffffffff842f3167 RBX: ffff88811cefd000 RCX: ffff888119f362c0 [ 35.027117][ T904] pppol2tp_release+0x150/0x2b0 [ 35.049071][ T931] RDX: 0000000000000000 RSI: 0000000018fd9f80 RDI: 000000000c04eb7d [ 35.055031][ T913] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.058098][ T931] RBP: ffffc90003297c60 R08: ffff88811cefd083 R09: 1ffff110239dfa10 [ 35.066032][ T883] ? switch_fpu_return+0x19c/0x330 [ 35.070735][ T931] R10: dffffc0000000000 R11: ffffed10239dfa11 R12: dffffc0000000000 [ 35.079073][ T946] ------------[ cut here ]------------ [ 35.081806][ T931] R13: dffffc0000000000 R14: 0000000018fd9f80 R15: ffff88811cf37400 [ 35.091085][ T865] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.105425][ T892] ? sock_mmap+0xa0/0xa0 [ 35.105436][ T892] __fput+0x2dc/0x730 [ 35.105444][ T892] ____fput+0x15/0x20 [ 35.105461][ T892] task_work_run+0x127/0x190 [ 35.111109][ T913] Call Trace: [ 35.118648][ T931] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.124883][ T946] WARNING: CPU: 1 PID: 946 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.132824][ T931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.137937][ T883] ? put_task_struct+0x90/0x90 [ 35.142232][ T931] CR2: 0000200000000240 CR3: 00000001067ed000 CR4: 00000000003506b0 [ 35.146109][ T892] do_exit+0xa7c/0x24e0 [ 35.150546][ T931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.155669][ T892] ? __kasan_check_write+0x14/0x20 [ 35.157914][ T931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.167003][ T883] ? fpu__clear_all+0x20/0x20 [ 35.177218][ T931] Call Trace: [ 35.190671][ T913] pppol2tp_release+0x150/0x2b0 [ 35.199264][ T931] pppol2tp_release+0x150/0x2b0 [ 35.202211][ T946] Modules linked in: [ 35.208618][ T931] sock_close+0xb8/0x200 [ 35.213747][ T904] sock_close+0xb8/0x200 [ 35.221767][ T931] ? sock_mmap+0xa0/0xa0 [ 35.227207][ T865] RIP: 0033:0x7f8ad0d470d9 [ 35.229528][ T931] __fput+0x2dc/0x730 [ 35.235074][ T913] sock_close+0xb8/0x200 [ 35.239622][ T931] ____fput+0x15/0x20 [ 35.250386][ T892] ? switch_fpu_return+0x19c/0x330 [ 35.254319][ T931] task_work_run+0x127/0x190 [ 35.278699][ T865] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.282436][ T883] ? __kasan_check_read+0x11/0x20 [ 35.289541][ T946] [ 35.294666][ T883] __x64_sys_exit+0x40/0x40 [ 35.301585][ T904] ? sock_mmap+0xa0/0xa0 [ 35.305815][ T904] __fput+0x2dc/0x730 [ 35.309994][ T883] do_syscall_64+0x31/0x40 [ 35.310773][ T931] do_exit+0xa7c/0x24e0 [ 35.314405][ T883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.318537][ T931] ? __kasan_check_write+0x14/0x20 [ 35.324651][ T904] ____fput+0x15/0x20 [ 35.329899][ T946] CPU: 1 PID: 946 Comm: syz.2.197 Tainted: G B W syzkaller #0 [ 35.333658][ T892] ? put_task_struct+0x90/0x90 [ 35.342118][ T865] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.347125][ T913] ? sock_mmap+0xa0/0xa0 [ 35.359626][ T892] ? fpu__clear_all+0x20/0x20 [ 35.359980][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.374491][ T931] ? switch_fpu_return+0x19c/0x330 [ 35.377822][ T904] task_work_run+0x127/0x190 [ 35.382095][ T931] ? put_task_struct+0x90/0x90 [ 35.384918][ T883] RIP: 0033:0x7f8ad0d470d9 [ 35.388910][ T931] ? fpu__clear_all+0x20/0x20 [ 35.394576][ T892] ? __kasan_check_read+0x11/0x20 [ 35.398107][ T865] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 35.403250][ T904] do_exit+0xa7c/0x24e0 [ 35.411221][ T913] __fput+0x2dc/0x730 [ 35.415526][ T883] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.426727][ T892] __x64_sys_exit+0x40/0x40 [ 35.426795][ T913] ____fput+0x15/0x20 [ 35.431568][ T946] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.436628][ T931] ? __kasan_check_read+0x11/0x20 [ 35.441877][ T892] do_syscall_64+0x31/0x40 [ 35.446651][ T913] task_work_run+0x127/0x190 [ 35.451212][ T904] ? __kasan_check_write+0x14/0x20 [ 35.455675][ T865] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.460892][ T883] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.477223][ T913] do_exit+0xa7c/0x24e0 [ 35.479295][ T946] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 35.487262][ T931] __x64_sys_exit+0x40/0x40 [ 35.503452][ T946] RSP: 0018:ffffc90003337c40 EFLAGS: 00010293 [ 35.511709][ T946] RAX: ffffffff842f3167 RBX: ffff88811cfdf800 RCX: ffff88810f41e2c0 [ 35.519784][ T946] RDX: 0000000000000000 RSI: 000000000efef200 RDI: 000000000c04eb7d [ 35.521956][ T913] ? __kasan_check_write+0x14/0x20 [ 35.527922][ T946] RBP: ffffc90003337c60 R08: ffff88811cfdf883 R09: 1ffff110239fbf10 [ 35.533941][ T969] ------------[ cut here ]------------ [ 35.541152][ T946] R10: dffffc0000000000 R11: ffffed10239fbf11 R12: dffffc0000000000 [ 35.554503][ T946] R13: dffffc0000000000 R14: 000000000efef200 R15: ffff88811cf37800 [ 35.559760][ T883] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 35.562630][ T946] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.570611][ T904] ? switch_fpu_return+0x19c/0x330 [ 35.579745][ T969] WARNING: CPU: 0 PID: 969 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.584559][ T892] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.595620][ T865] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 35.600352][ T883] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.600366][ T883] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 35.608402][ T946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.617125][ T913] ? switch_fpu_return+0x19c/0x330 [ 35.624457][ T946] CR2: 0000001b33863fff CR3: 000000010d4e9000 CR4: 00000000003506b0 [ 35.631779][ T865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.636195][ T946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.644069][ T904] ? put_task_struct+0x90/0x90 [ 35.652118][ T946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.659963][ T892] RIP: 0033:0x7f8ad0d470d9 [ 35.664788][ T946] Call Trace: [ 35.672649][ T931] do_syscall_64+0x31/0x40 [ 35.677152][ T946] pppol2tp_release+0x150/0x2b0 [ 35.684840][ T969] Modules linked in: [ 35.689842][ T946] sock_close+0xb8/0x200 [ 35.697597][ T946] ? sock_mmap+0xa0/0xa0 [ 35.701045][ T931] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.704044][ T946] __fput+0x2dc/0x730 [ 35.711934][ T946] ____fput+0x15/0x20 [ 35.712145][ T913] ? put_task_struct+0x90/0x90 [ 35.715915][ T946] task_work_run+0x127/0x190 [ 35.720732][ T865] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 35.725467][ T946] do_exit+0xa7c/0x24e0 [ 35.736105][ T931] RIP: 0033:0x7f8ad0d470d9 [ 35.739446][ T946] ? __kasan_check_write+0x14/0x20 [ 35.744164][ T883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.748009][ T946] ? switch_fpu_return+0x19c/0x330 [ 35.756041][ T969] CPU: 1 PID: 969 Comm: syz.2.204 Tainted: G B W syzkaller #0 [ 35.760218][ T946] ? put_task_struct+0x90/0x90 [ 35.768763][ T892] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.773602][ T946] ? fpu__clear_all+0x20/0x20 [ 35.785641][ T904] ? fpu__clear_all+0x20/0x20 [ 35.789428][ T931] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.793937][ T904] ? __kasan_check_read+0x11/0x20 [ 35.799337][ T913] ? fpu__clear_all+0x20/0x20 [ 35.803019][ T946] ? __kasan_check_read+0x11/0x20 [ 35.807554][ T931] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 35.812506][ T913] ? __kasan_check_read+0x11/0x20 [ 35.812657][ T904] __x64_sys_exit+0x40/0x40 [ 35.818679][ T883] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 35.823811][ T946] __x64_sys_exit+0x40/0x40 [ 35.828273][ T865] ---[ end trace 3f9b97bcf14641c8 ]--- [ 35.836244][ T904] do_syscall_64+0x31/0x40 [ 35.841293][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.846386][ T946] do_syscall_64+0x31/0x40 [ 35.851566][ T978] ------------[ cut here ]------------ [ 35.860754][ T904] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.868751][ T892] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 35.872465][ T904] RIP: 0033:0x7f8ad0d470d9 [ 35.878470][ T931] ORIG_RAX: 000000000000003c [ 35.882695][ T946] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.888698][ T883] ---[ end trace 3f9b97bcf14641c9 ]--- [ 35.891607][ T904] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.909744][ T913] __x64_sys_exit+0x40/0x40 [ 35.910356][ T946] RIP: 0033:0x7f8ad0d470d9 [ 35.914712][ T913] do_syscall_64+0x31/0x40 [ 35.919093][ T946] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 35.929874][ T931] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 35.933086][ T892] ORIG_RAX: 000000000000003c [ 35.944101][ T913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.946923][ T904] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 35.950066][ T978] WARNING: CPU: 0 PID: 978 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.954423][ T931] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.957961][ T978] Modules linked in: [ 35.968391][ T946] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 35.974409][ T969] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.979499][ T913] RIP: 0033:0x7f8ad0d470d9 [ 35.984404][ T904] ORIG_RAX: 000000000000003c [ 35.991802][ T946] ORIG_RAX: 000000000000003c [ 35.995080][ T892] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 35.999598][ T946] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 36.004530][ T904] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 36.016448][ T931] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 2026/08/26 05:22:41 executed programs: 200 [ 36.022349][ T969] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 36.030988][ T913] Code: Unable to access opcode bytes at RIP 0x7f8ad0d470af. [ 36.036550][ T892] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.064004][ T931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.073686][ T978] [ 36.081826][ T904] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.083347][ T990] ------------[ cut here ]------------ [ 36.089969][ T978] CPU: 0 PID: 978 Comm: syz.2.207 Tainted: G B W syzkaller #0 [ 36.096425][ T969] RSP: 0018:ffffc900033cfc40 EFLAGS: 00010293 [ 36.104030][ T904] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 36.109024][ T946] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.112318][ T904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.121335][ T990] WARNING: CPU: 1 PID: 990 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.126284][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.134062][ T969] [ 36.144094][ T892] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 36.155488][ T946] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 36.156574][ T904] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 36.171411][ T931] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 36.174325][ T978] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.182961][ T913] RSP: 002b:00007f8ad0ba7ef8 EFLAGS: 00000246 [ 36.188507][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.195110][ T978] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 36.200883][ T892] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 36.211159][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.237499][ T892] ---[ end trace 3f9b97bcf14641ca ]--- [ 36.247055][ T990] Modules linked in: [ 36.249893][ T904] ---[ end trace 3f9b97bcf14641cb ]--- [ 36.258498][ T969] RAX: ffffffff842f3167 RBX: ffff88811b912800 RCX: ffff88811d6593c0 [ 36.261664][ T990] [ 36.269679][ T969] RDX: 0000000000000000 RSI: 000000000ad77280 RDI: 000000000c04eb7d [ 36.271079][ T931] ---[ end trace 3f9b97bcf14641cc ]--- [ 36.277905][ T969] RBP: ffffc900033cfc60 R08: ffff88811b912883 R09: 1ffff11023722510 [ 36.283249][ T913] ORIG_RAX: 000000000000003c [ 36.283257][ T913] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8ad0d470d9 [ 36.283263][ T913] RDX: 00007f8ad0ba89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.283275][ T913] RBP: 00007f8ad0dde024 R08: 0000000000000000 R09: 0000000000000058 [ 36.296728][ T969] R10: dffffc0000000000 R11: ffffed1023722511 R12: dffffc0000000000 [ 36.320842][ T990] CPU: 1 PID: 990 Comm: syz.2.211 Tainted: G B W syzkaller #0 [ 36.330214][ T969] R13: dffffc0000000000 R14: 000000000ad77280 R15: ffff88811b2a1c00 [ 36.336823][ T978] RSP: 0018:ffffc90003307c40 EFLAGS: 00010293 [ 36.346730][ T969] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.351775][ T978] RAX: ffffffff842f3167 RBX: ffff88811ddf3800 RCX: ffff88811d9a0000 [ 36.360351][ T969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.367963][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.375196][ T969] CR2: 000055555b92b4e8 CR3: 000000012a318000 CR4: 00000000003506b0 [ 36.384724][ T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.396617][ T969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.402482][ T978] RDX: 0000000000000000 RSI: 000000001b20a800 RDI: 000000000c04eb7d [ 36.409475][ T946] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 36.416644][ T990] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.416654][ T990] Code: 5d c3 e8 dc 80 35 fd be 02 00 00 00 eb 0a e8 d0 80 35 fd be 01 00 00 00 4c 89 f7 e8 d3 dc 0e fe e9 0f ff ff ff e8 b9 80 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 80 35 fd 4c 89 f7 be 03 [ 36.416661][ T990] RSP: 0018:ffffc9000350fc40 EFLAGS: 00010293 [ 36.416671][ T990] RAX: ffffffff842f3167 RBX: ffff88811d137000 RCX: ffff88811d803b40 [ 36.416678][ T990] RDX: 0000000000000000 RSI: 000000001e01b2a0 RDI: 000000000c04eb7d [ 36.416685][ T990] RBP: ffffc9000350fc60 R08: ffff88811d137083 R09: 1ffff11023a26e10 [ 36.416692][ T990] R10: dffffc0000000000 R11: ffffed1023a26e11 R12: dffffc0000000000 [ 36.416699][ T990] R13: dffffc0000000000 R14: 000000001e01b2a0 R15: ffff88811cee9400 [ 36.416709][ T990] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.416716][ T990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.416723][ T990] CR2: 00007f8ad0d021f0 CR3: 00000001067ed000 CR4: 00000000003506a0 [ 36.416733][ T990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.416739][ T990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.416748][ T990] Call Trace: [ 36.426176][ T969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.432125][ T913] R13: 00007f8ad0fcf038 R14: 00007f8ad0fcefa0 R15: 00007ffff472e888 [ 36.452001][ T1023] ------------[ cut here ]------------ [ 36.461559][ T978] RBP: ffffc90003307c60 R08: ffff88811ddf3883 R09: 1ffff11023bbe710 [ 36.466738][ T946] ---[ end trace 3f9b97bcf14641cd ]--- [ 36.475272][ T1023] WARNING: CPU: 1 PID: 1023 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.481205][ T969] Call Trace: [ 36.493999][ T990] pppol2tp_release+0x150/0x2b0 [ 36.499423][ T969] pppol2tp_release+0x150/0x2b0 [ 36.511363][ T978] R10: dffffc0000000000 R11: ffffed1023bbe711 R12: dffffc0000000000 [ 36.514350][ T969] sock_close+0xb8/0x200 [ 36.522584][ T1023] Modules linked in: [ 36.528291][ T969] ? sock_mmap+0xa0/0xa0 [ 36.540665][ T913] ---[ end trace 3f9b97bcf14641ce ]--- [ 36.549445][ T969] __fput+0x2dc/0x730 [ 36.557961][ T978] R13: dffffc0000000000 R14: 000000001b20a800 R15: ffff88811cee9c00 [ 36.561150][ T969] ____fput+0x15/0x20 [ 36.573101][ T990] sock_close+0xb8/0x200 [ 36.578007][ T969] task_work_run+0x127/0x190