Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. 2026/07/07 01:43:33 parsed 1 programs 2026/07/07 01:43:33 serving rpc on tcp://40869 [ 24.373984][ T30] audit: type=1400 audit(1783388613.431:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.395167][ T30] audit: type=1400 audit(1783388613.431:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.406947][ T30] audit: type=1400 audit(1783388614.461:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.410448][ T299] cgroup: Unknown subsys name 'net' [ 25.429715][ T30] audit: type=1400 audit(1783388614.461:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.457632][ T30] audit: type=1400 audit(1783388614.491:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.457691][ T299] cgroup: Unknown subsys name 'devices' [ 25.604313][ T299] cgroup: Unknown subsys name 'hugetlb' [ 25.609999][ T299] cgroup: Unknown subsys name 'rlimit' [ 25.728475][ T30] audit: type=1400 audit(1783388614.781:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.751697][ T30] audit: type=1400 audit(1783388614.781:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.772305][ T30] audit: type=1400 audit(1783388614.781:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.789749][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.793696][ T30] audit: type=1400 audit(1783388614.781:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.821646][ T30] audit: type=1400 audit(1783388614.791:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.836670][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.284981][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 26.620412][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.627505][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.635323][ T331] device bridge_slave_0 entered promiscuous mode [ 26.642371][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.649425][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.657025][ T331] device bridge_slave_1 entered promiscuous mode [ 26.701877][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.708991][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.716371][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.723707][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.744291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.752537][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.759840][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.770180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.778431][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.785475][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.794319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.802586][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.809629][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.824021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.833429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.852544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.863146][ T331] device veth0_vlan entered promiscuous mode [ 26.870008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.878197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.885897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.902746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.911808][ T331] device veth1_macvtap entered promiscuous mode [ 26.921053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.931057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.972361][ T331] syz-executor (331) used greatest stack depth: 22008 bytes left 2026/07/07 01:43:36 executed programs: 0 [ 27.661442][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.668754][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.676517][ T369] device bridge_slave_0 entered promiscuous mode [ 27.683460][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.690490][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.697935][ T369] device bridge_slave_1 entered promiscuous mode [ 27.741292][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.748413][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.755765][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.762855][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.781809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.789710][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.797050][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.806424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.814704][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.821781][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.830470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.838853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.845949][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.858106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.867922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.881631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.901371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.909563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.917156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.925617][ T369] device veth0_vlan entered promiscuous mode [ 27.935718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.952576][ T369] device veth1_macvtap entered promiscuous mode [ 27.962789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.974236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.247246][ T376] ================================================================== [ 28.255361][ T376] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 28.263510][ T376] Read of size 4 at addr ffff888110192000 by task syz.2.20/376 [ 28.271054][ T376] [ 28.273388][ T376] CPU: 1 PID: 376 Comm: syz.2.20 Not tainted syzkaller #0 [ 28.280497][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.290644][ T376] Call Trace: [ 28.293953][ T376] [ 28.296891][ T376] __dump_stack+0x21/0x30 [ 28.301238][ T376] dump_stack_lvl+0x110/0x170 [ 28.305909][ T376] ? show_regs_print_info+0x20/0x20 [ 28.311107][ T376] ? load_image+0x3f0/0x3f0 [ 28.315608][ T376] ? __local_bh_enable_ip+0x58/0x80 [ 28.320833][ T376] print_address_description+0x7f/0x2c0 [ 28.326415][ T376] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 28.332161][ T376] kasan_report+0x10f/0x150 [ 28.336699][ T376] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 28.342428][ T376] __asan_report_load4_noabort+0x14/0x20 [ 28.348098][ T376] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 28.353648][ T376] pppol2tp_release+0x150/0x2b0 [ 28.358685][ T376] sock_close+0xb8/0x200 [ 28.362932][ T376] ? sock_mmap+0xa0/0xa0 [ 28.367326][ T376] __fput+0x22b/0x900 [ 28.371322][ T376] ____fput+0x15/0x20 [ 28.375314][ T376] task_work_run+0x127/0x190 [ 28.379903][ T376] do_exit+0xb70/0x29a0 [ 28.384059][ T376] ? put_task_struct+0x90/0x90 [ 28.388831][ T376] ? __blkcg_punt_bio_submit+0x170/0x170 [ 28.394463][ T376] do_group_exit+0x149/0x310 [ 28.399054][ T376] __x64_sys_exit_group+0x3f/0x40 [ 28.404076][ T376] x64_sys_call+0x832/0x9a0 [ 28.408579][ T376] do_syscall_64+0x4c/0xa0 [ 28.413016][ T376] ? clear_bhb_loop+0x50/0xa0 [ 28.417690][ T376] ? clear_bhb_loop+0x50/0xa0 [ 28.422363][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.428272][ T376] RIP: 0033:0x7f2ed78c5e59 [ 28.432683][ T376] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 28.440046][ T376] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.448463][ T376] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 28.456438][ T376] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.464437][ T376] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 28.472428][ T376] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 [ 28.480399][ T376] R13: 00000000000927c0 R14: 0000000000006e08 R15: 00007ffefa1eedc0 [ 28.488653][ T376] [ 28.491688][ T376] [ 28.494024][ T376] Allocated by task 376: [ 28.498267][ T376] __kasan_kmalloc+0xd4/0x100 [ 28.502957][ T376] __kmalloc+0x13d/0x2c0 [ 28.507207][ T376] l2tp_session_create+0x39/0xb60 [ 28.512256][ T376] pppol2tp_connect+0xbf5/0x1640 [ 28.517218][ T376] __sys_connect+0x3cb/0x450 [ 28.521963][ T376] __x64_sys_connect+0x7a/0x90 [ 28.526739][ T376] x64_sys_call+0x7c/0x9a0 [ 28.531162][ T376] do_syscall_64+0x4c/0xa0 [ 28.535578][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.541471][ T376] [ 28.543793][ T376] Freed by task 8: [ 28.547505][ T376] kasan_set_track+0x4a/0x70 [ 28.552142][ T376] kasan_set_free_info+0x23/0x40 [ 28.557101][ T376] ____kasan_slab_free+0x125/0x160 [ 28.562219][ T376] __kasan_slab_free+0x11/0x20 [ 28.566996][ T376] slab_free_freelist_hook+0xc2/0x190 [ 28.572362][ T376] kfree+0xc4/0x270 [ 28.576169][ T376] l2tp_session_put+0xaf/0x1a0 [ 28.580924][ T376] l2tp_session_delete+0x3a9/0x4a0 [ 28.586031][ T376] l2tp_tunnel_del_work+0x180/0x3d0 [ 28.591224][ T376] process_one_work+0x6c8/0xbb0 [ 28.596080][ T376] worker_thread+0xaa0/0x1250 [ 28.600774][ T376] kthread+0x3f5/0x4f0 [ 28.604842][ T376] ret_from_fork+0x1f/0x30 [ 28.609278][ T376] [ 28.611596][ T376] The buggy address belongs to the object at ffff888110192000 [ 28.611596][ T376] which belongs to the cache kmalloc-512 of size 512 [ 28.626049][ T376] The buggy address is located 0 bytes inside of [ 28.626049][ T376] 512-byte region [ffff888110192000, ffff888110192200) [ 28.639157][ T376] The buggy address belongs to the page: [ 28.644780][ T376] page:ffffea0004406400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110190 [ 28.655030][ T376] head:ffffea0004406400 order:2 compound_mapcount:0 compound_pincount:0 [ 28.663351][ T376] flags: 0x4000000000010200(slab|head|zone=1) [ 28.669430][ T376] raw: 4000000000010200 ffffea0004450200 0000000400000004 ffff888100042f00 [ 28.678202][ T376] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 28.686782][ T376] page dumped because: kasan: bad access detected [ 28.693193][ T376] page_owner tracks the page as allocated [ 28.698917][ T376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 103, ts 5596955464, free_ts 0 [ 28.716980][ T376] post_alloc_hook+0x192/0x1b0 [ 28.721753][ T376] prep_new_page+0x1c/0x110 [ 28.726280][ T376] get_page_from_freelist+0x2c3a/0x2cd0 [ 28.731836][ T376] __alloc_pages+0x1a2/0x460 [ 28.736427][ T376] new_slab+0xa0/0x4d0 [ 28.740504][ T376] ___slab_alloc+0x3ac/0x840 [ 28.745101][ T376] __slab_alloc+0x49/0x90 [ 28.749448][ T376] __kmalloc_track_caller+0x169/0x2c0 [ 28.754855][ T376] __alloc_skb+0x210/0x730 [ 28.759303][ T376] alloc_skb_with_frags+0xa8/0x620 [ 28.764414][ T376] sock_alloc_send_pskb+0x87f/0x9a0 [ 28.769617][ T376] unix_dgram_sendmsg+0x6f3/0x19b0 [ 28.774732][ T376] sock_write_iter+0x2a6/0x3a0 [ 28.779520][ T376] vfs_write+0x831/0xfd0 [ 28.783772][ T376] ksys_write+0x14a/0x260 [ 28.788102][ T376] __x64_sys_write+0x7b/0x90 [ 28.792689][ T376] page_owner free stack trace missing [ 28.798047][ T376] [ 28.800365][ T376] Memory state around the buggy address: [ 28.805991][ T376] ffff888110191f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.814057][ T376] ffff888110191f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.822119][ T376] >ffff888110192000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.830186][ T376] ^ [ 28.834250][ T376] ffff888110192080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.842317][ T376] ffff888110192100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.850388][ T376] ================================================================== [ 28.858448][ T376] Disabling lock debugging due to kernel taint [ 28.865986][ T376] ------------[ cut here ]------------ [ 28.871491][ T376] WARNING: CPU: 1 PID: 376 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.881701][ T376] Modules linked in: [ 28.885689][ T376] CPU: 1 PID: 376 Comm: syz.2.20 Tainted: G B syzkaller #0 [ 28.894680][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.904857][ T376] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.912196][ T376] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 28.932528][ T376] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 28.938730][ T376] RAX: ffffffff845dbbf7 RBX: ffff888111891000 RCX: ffff888110e393c0 [ 28.946921][ T376] RDX: 0000000000000000 RSI: 000000002c8ebbc0 RDI: 000000000c04eb7d [ 28.955079][ T376] RBP: ffffc90000aa7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 28.963211][ T376] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: dffffc0000000000 [ 28.971269][ T376] R13: dffffc0000000000 R14: 000000002c8ebbc0 R15: ffff888110192000 [ 28.979510][ T376] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.980152][ T45] device bridge_slave_1 left promiscuous mode [ 28.988513][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.995502][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.001252][ T376] CR2: 00002aa447c59000 CR3: 000000010f854000 CR4: 00000000003506b0 [ 29.016508][ T376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.016899][ T45] device bridge_slave_0 left promiscuous mode [ 29.025424][ T376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.032641][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.039970][ T376] Call Trace: [ 29.049900][ T376] [ 29.052928][ T376] pppol2tp_release+0x150/0x2b0 [ 29.053568][ T45] device veth1_macvtap left promiscuous mode [ 29.057812][ T376] sock_close+0xb8/0x200 [ 29.057835][ T376] ? sock_mmap+0xa0/0xa0 [ 29.064474][ T45] device veth0_vlan left promiscuous mode [ 29.068115][ T376] __fput+0x22b/0x900 [ 29.082324][ T376] ____fput+0x15/0x20 [ 29.086345][ T376] task_work_run+0x127/0x190 [ 29.090969][ T376] do_exit+0xb70/0x29a0 [ 29.095228][ T376] ? put_task_struct+0x90/0x90 [ 29.100061][ T376] ? __blkcg_punt_bio_submit+0x170/0x170 [ 29.105789][ T376] do_group_exit+0x149/0x310 [ 29.110412][ T376] __x64_sys_exit_group+0x3f/0x40 [ 29.115507][ T376] x64_sys_call+0x832/0x9a0 [ 29.120040][ T376] do_syscall_64+0x4c/0xa0 [ 29.124542][ T376] ? clear_bhb_loop+0x50/0xa0 [ 29.129249][ T376] ? clear_bhb_loop+0x50/0xa0 [ 29.134007][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.140010][ T376] RIP: 0033:0x7f2ed78c5e59 [ 29.144590][ T376] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 29.151986][ T376] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.160523][ T376] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 29.168598][ T376] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.176662][ T376] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 29.184706][ T376] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 [ 29.192765][ T376] R13: 00000000000927c0 R14: 0000000000006e08 R15: 00007ffefa1eedc0 [ 29.200769][ T376] [ 29.203859][ T376] ---[ end trace 2cd116f6e4dca291 ]--- [ 29.219350][ T377] ------------[ cut here ]------------ [ 29.224892][ T377] WARNING: CPU: 0 PID: 377 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.235033][ T377] Modules linked in: [ 29.238956][ T377] CPU: 0 PID: 377 Comm: syz.2.21 Tainted: G B W syzkaller #0 [ 29.247753][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.258664][ T377] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.265493][ T377] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 29.285233][ T377] RSP: 0018:ffffc90000ab7b90 EFLAGS: 00010293 [ 29.291324][ T377] RAX: ffffffff845dbbf7 RBX: ffff888111a81000 RCX: ffff888110e3cf00 [ 29.299366][ T377] RDX: 0000000000000000 RSI: 000000000af72e20 RDI: 000000000c04eb7d [ 29.307500][ T377] RBP: ffffc90000ab7bb0 R08: ffff888111a81083 R09: 1ffff11022350210 [ 29.315524][ T377] R10: dffffc0000000000 R11: ffffed1022350211 R12: dffffc0000000000 [ 29.323579][ T377] R13: dffffc0000000000 R14: 000000000af72e20 R15: ffff88812da7cc00 [ 29.332546][ T377] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.341550][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.348245][ T377] CR2: 00007f2ed8680060 CR3: 000000010d64f000 CR4: 00000000003506a0 [ 29.356398][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.364623][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.372832][ T377] Call Trace: [ 29.376159][ T377] [ 29.379131][ T377] pppol2tp_release+0x150/0x2b0 [ 29.384098][ T377] sock_close+0xb8/0x200 [ 29.388364][ T377] ? sock_mmap+0xa0/0xa0 [ 29.392651][ T377] __fput+0x22b/0x900 [ 29.396653][ T377] ____fput+0x15/0x20 [ 29.400631][ T377] task_work_run+0x127/0x190 [ 29.405276][ T377] do_exit+0xb70/0x29a0 [ 29.409454][ T377] ? put_task_struct+0x90/0x90 [ 29.414268][ T377] ? __blkcg_punt_bio_submit+0x170/0x170 [ 29.419959][ T377] do_group_exit+0x149/0x310 [ 29.424632][ T377] __x64_sys_exit_group+0x3f/0x40 [ 29.429705][ T377] x64_sys_call+0x832/0x9a0 [ 29.434300][ T377] do_syscall_64+0x4c/0xa0 [ 29.438750][ T377] ? clear_bhb_loop+0x50/0xa0 [ 29.443552][ T377] ? clear_bhb_loop+0x50/0xa0 [ 29.448253][ T377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.454218][ T377] RIP: 0033:0x7f2ed78c5e59 [ 29.458650][ T377] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 29.466054][ T377] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.474639][ T377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 29.482843][ T377] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.490937][ T377] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 29.499038][ T377] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000004 [ 29.507110][ T377] R13: 00000000000927c0 R14: 00000000000070a1 R15: 00007ffefa1eedc0 [ 29.515150][ T377] [ 29.518211][ T377] ---[ end trace 2cd116f6e4dca292 ]--- [ 29.534970][ T379] ------------[ cut here ]------------ [ 29.540489][ T379] WARNING: CPU: 0 PID: 379 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.550707][ T379] Modules linked in: [ 29.554660][ T379] CPU: 0 PID: 379 Comm: syz.2.23 Tainted: G B W syzkaller #0 [ 29.563268][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.575495][ T379] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.581903][ T379] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 29.601671][ T379] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 29.607829][ T379] RAX: ffffffff845dbbf7 RBX: ffff888111a48000 RCX: ffff88810fdf2780 [ 29.615927][ T379] RDX: 0000000000000000 RSI: 00000000167dd480 RDI: 000000000c04eb7d [ 29.623948][ T379] RBP: ffffc90003fbfbb0 R08: ffff888111a48083 R09: 1ffff11022349010 [ 29.632042][ T379] R10: dffffc0000000000 R11: ffffed1022349011 R12: dffffc0000000000 [ 29.640087][ T379] R13: dffffc0000000000 R14: 00000000167dd480 R15: ffff88812da80400 [ 29.648186][ T379] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.657358][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.664063][ T379] CR2: 00002aa447c5c020 CR3: 000000010f854000 CR4: 00000000003506b0 [ 29.672094][ T379] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.680161][ T379] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.688464][ T379] Call Trace: [ 29.691828][ T379] [ 29.694853][ T379] pppol2tp_release+0x150/0x2b0 [ 29.699744][ T379] sock_close+0xb8/0x200 [ 29.704090][ T379] ? sock_mmap+0xa0/0xa0 [ 29.708370][ T379] __fput+0x22b/0x900 [ 29.712444][ T379] ____fput+0x15/0x20 [ 29.716498][ T379] task_work_run+0x127/0x190 [ 29.721123][ T379] do_exit+0xb70/0x29a0 [ 29.726659][ T379] ? put_task_struct+0x90/0x90 [ 29.731464][ T379] ? __blkcg_punt_bio_submit+0x170/0x170 [ 29.737204][ T379] do_group_exit+0x149/0x310 [ 29.741826][ T379] __x64_sys_exit_group+0x3f/0x40 [ 29.746930][ T379] x64_sys_call+0x832/0x9a0 [ 29.751514][ T379] do_syscall_64+0x4c/0xa0 [ 29.756009][ T379] ? clear_bhb_loop+0x50/0xa0 [ 29.760889][ T379] ? clear_bhb_loop+0x50/0xa0 [ 29.765708][ T379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.771634][ T379] RIP: 0033:0x7f2ed78c5e59 [ 29.776161][ T379] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 29.783610][ T379] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.792132][ T379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 29.800150][ T379] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.808247][ T379] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 29.816267][ T379] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000006 [ 29.824539][ T379] R13: 00000000000927c0 R14: 0000000000007336 R15: 00007ffefa1eedc0 [ 29.832606][ T379] [ 29.835631][ T379] ---[ end trace 2cd116f6e4dca293 ]--- [ 29.887120][ T382] ------------[ cut here ]------------ [ 29.892723][ T382] WARNING: CPU: 0 PID: 382 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.902787][ T382] Modules linked in: [ 29.906695][ T382] CPU: 0 PID: 382 Comm: syz.2.26 Tainted: G B W syzkaller #0 [ 29.915240][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.925501][ T382] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.931850][ T382] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 29.951712][ T382] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 29.957995][ T382] RAX: ffffffff845dbbf7 RBX: ffff88811362b000 RCX: ffff8881131d2780 [ 29.966150][ T382] RDX: 0000000000000000 RSI: 000000000af72ce0 RDI: 000000000c04eb7d [ 29.975376][ T382] RBP: ffffc90000aa7bb0 R08: ffff88811362b083 R09: 1ffff110226c5610 [ 29.983539][ T382] R10: dffffc0000000000 R11: ffffed10226c5611 R12: dffffc0000000000 [ 29.991584][ T382] R13: dffffc0000000000 R14: 000000000af72ce0 R15: ffff88812da8e800 [ 29.999636][ T382] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.008610][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.015261][ T382] CR2: 00007f2ed8680060 CR3: 000000010d64f000 CR4: 00000000003506a0 [ 30.023277][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.031260][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.039279][ T382] Call Trace: [ 30.042710][ T382] [ 30.045712][ T382] pppol2tp_release+0x150/0x2b0 [ 30.050591][ T382] sock_close+0xb8/0x200 [ 30.054909][ T382] ? sock_mmap+0xa0/0xa0 [ 30.059171][ T382] __fput+0x22b/0x900 [ 30.063233][ T382] ____fput+0x15/0x20 [ 30.067244][ T382] task_work_run+0x127/0x190 [ 30.072740][ T382] do_exit+0xb70/0x29a0 [ 30.076929][ T382] ? put_task_struct+0x90/0x90 [ 30.081699][ T382] ? __blkcg_punt_bio_submit+0x170/0x170 [ 30.087434][ T382] ? ____fput+0x15/0x20 [ 30.091616][ T382] do_group_exit+0x149/0x310 [ 30.096348][ T382] __x64_sys_exit_group+0x3f/0x40 [ 30.101395][ T382] x64_sys_call+0x832/0x9a0 [ 30.105957][ T382] do_syscall_64+0x4c/0xa0 [ 30.110405][ T382] ? clear_bhb_loop+0x50/0xa0 [ 30.115157][ T382] ? clear_bhb_loop+0x50/0xa0 [ 30.119854][ T382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.125793][ T382] RIP: 0033:0x7f2ed78c5e59 [ 30.130226][ T382] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 30.137660][ T382] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.146119][ T382] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 30.154308][ T382] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.162364][ T382] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 30.170356][ T382] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000009 [ 30.178370][ T382] R13: 00000000000927c0 R14: 0000000000007479 R15: 00007ffefa1eedc0 [ 30.186390][ T382] [ 30.189413][ T382] ---[ end trace 2cd116f6e4dca294 ]--- [ 30.200734][ T383] ------------[ cut here ]------------ [ 30.206429][ T383] WARNING: CPU: 1 PID: 383 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.216529][ T383] Modules linked in: [ 30.220444][ T383] CPU: 1 PID: 383 Comm: syz.2.27 Tainted: G B W syzkaller #0 [ 30.229160][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.239512][ T383] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.246117][ T383] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 30.265868][ T383] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 30.271974][ T383] RAX: ffffffff845dbbf7 RBX: ffff8881136eb000 RCX: ffff8881136de2c0 [ 30.279989][ T383] RDX: 0000000000000000 RSI: 000000000af727c0 RDI: 000000000c04eb7d [ 30.288139][ T383] RBP: ffffc90003fbfbb0 R08: ffff8881136eb083 R09: 1ffff110226dd610 [ 30.296354][ T383] R10: dffffc0000000000 R11: ffffed10226dd611 R12: dffffc0000000000 [ 30.304365][ T383] R13: dffffc0000000000 R14: 000000000af727c0 R15: ffff88812da94000 [ 30.312374][ T383] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.321429][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.328063][ T383] CR2: 0000555578d4a4e8 CR3: 0000000122e0e000 CR4: 00000000003506a0 [ 30.336079][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.344104][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.352122][ T383] Call Trace: [ 30.355413][ T383] [ 30.358344][ T383] pppol2tp_release+0x150/0x2b0 [ 30.363455][ T383] sock_close+0xb8/0x200 [ 30.367732][ T383] ? sock_mmap+0xa0/0xa0 [ 30.372025][ T383] __fput+0x22b/0x900 [ 30.376145][ T383] ____fput+0x15/0x20 [ 30.380127][ T383] task_work_run+0x127/0x190 [ 30.384832][ T383] do_exit+0xb70/0x29a0 [ 30.389018][ T383] ? put_task_struct+0x90/0x90 [ 30.393849][ T383] ? __blkcg_punt_bio_submit+0x170/0x170 [ 30.399554][ T383] do_group_exit+0x149/0x310 [ 30.404207][ T383] __x64_sys_exit_group+0x3f/0x40 [ 30.409248][ T383] x64_sys_call+0x832/0x9a0 [ 30.413797][ T383] do_syscall_64+0x4c/0xa0 [ 30.418274][ T383] ? clear_bhb_loop+0x50/0xa0 [ 30.423005][ T383] ? clear_bhb_loop+0x50/0xa0 [ 30.427698][ T383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.433635][ T383] RIP: 0033:0x7f2ed78c5e59 [ 30.438083][ T383] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 30.445499][ T383] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.453961][ T383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 30.461936][ T383] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.469981][ T383] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 30.477996][ T383] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000a [ 30.486013][ T383] R13: 00000000000927c0 R14: 00000000000074a6 R15: 00007ffefa1eedc0 [ 30.494155][ T383] [ 30.497182][ T383] ---[ end trace 2cd116f6e4dca295 ]--- [ 30.517223][ T385] ------------[ cut here ]------------ [ 30.522810][ T385] WARNING: CPU: 0 PID: 385 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.532938][ T385] Modules linked in: [ 30.536850][ T385] CPU: 0 PID: 385 Comm: syz.2.29 Tainted: G B W syzkaller #0 [ 30.545729][ T385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.555980][ T385] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.562528][ T385] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 30.582248][ T385] RSP: 0018:ffffc90000a57b90 EFLAGS: 00010293 [ 30.588347][ T385] RAX: ffffffff845dbbf7 RBX: ffff8881137e0000 RCX: ffff8881131d4f00 [ 30.596391][ T385] RDX: 0000000000000000 RSI: 0000000021470ee0 RDI: 000000000c04eb7d [ 30.604441][ T385] RBP: ffffc90000a57bb0 R08: ffff8881137e0083 R09: 1ffff110226fc010 [ 30.612490][ T385] R10: dffffc0000000000 R11: ffffed10226fc011 R12: dffffc0000000000 [ 30.620508][ T385] R13: dffffc0000000000 R14: 0000000021470ee0 R15: ffff88812bc27400 [ 30.628679][ T385] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.637690][ T385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.644319][ T385] CR2: 00002aa447a50000 CR3: 0000000122e0e000 CR4: 00000000003506b0 [ 30.652710][ T385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.660706][ T385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.668753][ T385] Call Trace: [ 30.672101][ T385] [ 30.675050][ T385] pppol2tp_release+0x150/0x2b0 [ 30.679906][ T385] sock_close+0xb8/0x200 [ 30.684201][ T385] ? sock_mmap+0xa0/0xa0 [ 30.688464][ T385] __fput+0x22b/0x900 [ 30.692497][ T385] ____fput+0x15/0x20 [ 30.696495][ T385] task_work_run+0x127/0x190 [ 30.701411][ T385] do_exit+0xb70/0x29a0 [ 30.705636][ T385] ? put_task_struct+0x90/0x90 [ 30.710429][ T385] ? __blkcg_punt_bio_submit+0x170/0x170 [ 30.716107][ T385] ? ____fput+0x15/0x20 [ 30.720301][ T385] do_group_exit+0x149/0x310 [ 30.725002][ T385] __x64_sys_exit_group+0x3f/0x40 [ 30.730054][ T385] x64_sys_call+0x832/0x9a0 [ 30.734611][ T385] do_syscall_64+0x4c/0xa0 [ 30.739063][ T385] ? clear_bhb_loop+0x50/0xa0 [ 30.743793][ T385] ? clear_bhb_loop+0x50/0xa0 [ 30.748490][ T385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.754451][ T385] RIP: 0033:0x7f2ed78c5e59 [ 30.758887][ T385] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 30.766497][ T385] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.775201][ T385] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 30.783265][ T385] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.791283][ T385] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 30.799304][ T385] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000c [ 30.807313][ T385] R13: 00000000000927c0 R14: 0000000000007709 R15: 00007ffefa1eedc0 [ 30.815361][ T385] [ 30.818422][ T385] ---[ end trace 2cd116f6e4dca296 ]--- [ 30.830593][ T386] ------------[ cut here ]------------ [ 30.836108][ T386] WARNING: CPU: 0 PID: 386 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.846189][ T386] Modules linked in: [ 30.850117][ T386] CPU: 0 PID: 386 Comm: syz.2.30 Tainted: G B W syzkaller #0 [ 30.858677][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.868766][ T386] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.875170][ T386] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 30.895192][ T386] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 30.901299][ T386] RAX: ffffffff845dbbf7 RBX: ffff8881135ff000 RCX: ffff8881136dbb40 [ 30.909339][ T386] RDX: 0000000000000000 RSI: 000000000af72980 RDI: 000000000c04eb7d [ 30.917407][ T386] RBP: ffffc90003fbfbb0 R08: ffff8881135ff083 R09: 1ffff110226bfe10 [ 30.925526][ T386] R10: dffffc0000000000 R11: ffffed10226bfe11 R12: dffffc0000000000 [ 30.933571][ T386] R13: dffffc0000000000 R14: 000000000af72980 R15: ffff88812daa2000 [ 30.941579][ T386] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.950586][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.957233][ T386] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506b0 [ 30.965273][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.973310][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.981295][ T386] Call Trace: [ 30.984614][ T386] [ 30.987565][ T386] pppol2tp_release+0x150/0x2b0 [ 30.992462][ T386] sock_close+0xb8/0x200 [ 30.996729][ T386] ? sock_mmap+0xa0/0xa0 [ 31.001004][ T386] __fput+0x22b/0x900 [ 31.005209][ T386] ____fput+0x15/0x20 [ 31.009219][ T386] task_work_run+0x127/0x190 [ 31.013889][ T386] do_exit+0xb70/0x29a0 [ 31.018070][ T386] ? put_task_struct+0x90/0x90 [ 31.022882][ T386] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.028583][ T386] do_group_exit+0x149/0x310 [ 31.033227][ T386] __x64_sys_exit_group+0x3f/0x40 [ 31.038270][ T386] x64_sys_call+0x832/0x9a0 [ 31.042842][ T386] do_syscall_64+0x4c/0xa0 [ 31.047284][ T386] ? clear_bhb_loop+0x50/0xa0 [ 31.051958][ T386] ? clear_bhb_loop+0x50/0xa0 [ 31.056673][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.062627][ T386] RIP: 0033:0x7f2ed78c5e59 [ 31.067050][ T386] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 31.074452][ T386] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.083082][ T386] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 31.091081][ T386] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.099098][ T386] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 31.107107][ T386] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000d [ 31.115120][ T386] R13: 00000000000927c0 R14: 000000000000771d R15: 00007ffefa1eedc0 [ 31.123162][ T386] [ 31.126187][ T386] ---[ end trace 2cd116f6e4dca297 ]--- [ 31.142726][ T388] ------------[ cut here ]------------ [ 31.148240][ T388] WARNING: CPU: 0 PID: 388 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.158313][ T388] Modules linked in: [ 31.162291][ T388] CPU: 1 PID: 388 Comm: syz.2.32 Tainted: G B W syzkaller #0 [ 31.170840][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.181552][ T388] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.188106][ T388] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 31.207795][ T388] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 31.213905][ T388] RAX: ffffffff845dbbf7 RBX: ffff888113811000 RCX: ffff8881136d93c0 [ 31.221904][ T388] RDX: 0000000000000000 RSI: 000000000ddfd440 RDI: 000000000c04eb7d [ 31.229924][ T388] RBP: ffffc90000aa7bb0 R08: ffff888113811083 R09: 1ffff11022702210 [ 31.237935][ T388] R10: dffffc0000000000 R11: ffffed1022702211 R12: dffffc0000000000 [ 31.245955][ T388] R13: dffffc0000000000 R14: 000000000ddfd440 R15: ffff88812daac000 [ 31.253961][ T388] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.262939][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.269539][ T388] CR2: 00002aa447a55000 CR3: 000000010d6f6000 CR4: 00000000003506a0 [ 31.277562][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.285596][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.293620][ T388] Call Trace: [ 31.296945][ T388] [ 31.299883][ T388] pppol2tp_release+0x150/0x2b0 [ 31.304784][ T388] sock_close+0xb8/0x200 [ 31.309064][ T388] ? sock_mmap+0xa0/0xa0 [ 31.313366][ T388] __fput+0x22b/0x900 [ 31.317368][ T388] ____fput+0x15/0x20 [ 31.321354][ T388] task_work_run+0x127/0x190 [ 31.326010][ T388] do_exit+0xb70/0x29a0 [ 31.330201][ T388] ? put_task_struct+0x90/0x90 [ 31.335035][ T388] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.340705][ T388] do_group_exit+0x149/0x310 [ 31.345344][ T388] __x64_sys_exit_group+0x3f/0x40 [ 31.350395][ T388] x64_sys_call+0x832/0x9a0 [ 31.354945][ T388] do_syscall_64+0x4c/0xa0 [ 31.359382][ T388] ? clear_bhb_loop+0x50/0xa0 [ 31.364108][ T388] ? clear_bhb_loop+0x50/0xa0 [ 31.368839][ T388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.374789][ T388] RIP: 0033:0x7f2ed78c5e59 [ 31.379218][ T388] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 31.386627][ T388] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.395086][ T388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 31.403226][ T388] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.411216][ T388] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 31.419249][ T388] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000f [ 31.427258][ T388] R13: 00000000000927c0 R14: 000000000000797e R15: 00007ffefa1eedc0 [ 31.435297][ T388] [ 31.438364][ T388] ---[ end trace 2cd116f6e4dca298 ]--- [ 31.451069][ T389] ------------[ cut here ]------------ [ 31.456899][ T389] WARNING: CPU: 1 PID: 389 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.467094][ T389] Modules linked in: [ 31.471016][ T389] CPU: 1 PID: 389 Comm: syz.2.33 Tainted: G B W syzkaller #0 [ 31.479695][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.490359][ T389] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.496778][ T389] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 31.516529][ T389] RSP: 0018:ffffc90000a57b90 EFLAGS: 00010293 [ 31.522653][ T389] RAX: ffffffff845dbbf7 RBX: ffff8881137e5000 RCX: ffff8881131d0000 [ 31.530646][ T389] RDX: 0000000000000000 RSI: 00000000214701e0 RDI: 000000000c04eb7d [ 31.538672][ T389] RBP: ffffc90000a57bb0 R08: ffff8881137e5083 R09: 1ffff110226fca10 [ 31.546682][ T389] R10: dffffc0000000000 R11: ffffed10226fca11 R12: dffffc0000000000 [ 31.554917][ T389] R13: dffffc0000000000 R14: 00000000214701e0 R15: ffff888113708000 [ 31.562946][ T389] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.572016][ T389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.578783][ T389] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506a0 [ 31.586807][ T389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.594839][ T389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.602854][ T389] Call Trace: [ 31.606138][ T389] [ 31.609069][ T389] pppol2tp_release+0x150/0x2b0 [ 31.613987][ T389] sock_close+0xb8/0x200 [ 31.618389][ T389] ? sock_mmap+0xa0/0xa0 [ 31.622696][ T389] __fput+0x22b/0x900 [ 31.626714][ T389] ____fput+0x15/0x20 [ 31.630705][ T389] task_work_run+0x127/0x190 [ 31.635342][ T389] do_exit+0xb70/0x29a0 [ 31.639531][ T389] ? put_task_struct+0x90/0x90 [ 31.644450][ T389] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.650247][ T389] do_group_exit+0x149/0x310 [ 31.654919][ T389] __x64_sys_exit_group+0x3f/0x40 [ 31.659975][ T389] x64_sys_call+0x832/0x9a0 [ 31.664536][ T389] do_syscall_64+0x4c/0xa0 [ 31.668978][ T389] ? clear_bhb_loop+0x50/0xa0 [ 31.673709][ T389] ? clear_bhb_loop+0x50/0xa0 [ 31.678412][ T389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.684362][ T389] RIP: 0033:0x7f2ed78c5e59 [ 31.688797][ T389] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 31.696205][ T389] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.704662][ T389] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 31.712685][ T389] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.720676][ T389] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 31.728834][ T389] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000010 [ 31.736855][ T389] R13: 00000000000927c0 R14: 0000000000007996 R15: 00007ffefa1eedc0 [ 31.744893][ T389] [ 31.747928][ T389] ---[ end trace 2cd116f6e4dca299 ]--- [ 31.759703][ T390] ------------[ cut here ]------------ [ 31.765241][ T390] WARNING: CPU: 1 PID: 390 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.775317][ T390] Modules linked in: [ 31.779238][ T390] CPU: 0 PID: 390 Comm: syz.2.34 Tainted: G B W syzkaller #0 [ 31.787852][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.798316][ T390] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.805073][ T390] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 31.825656][ T390] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 31.831866][ T390] RAX: ffffffff845dbbf7 RBX: ffff888113b79000 RCX: ffff8881136dcf00 [ 31.839981][ T390] RDX: 0000000000000000 RSI: 00000000214702c0 RDI: 000000000c04eb7d [ 31.848034][ T390] RBP: ffffc90000a97bb0 R08: ffff888113b79083 R09: 1ffff1102276f210 [ 31.856060][ T390] R10: dffffc0000000000 R11: ffffed102276f211 R12: dffffc0000000000 [ 31.864083][ T390] R13: dffffc0000000000 R14: 00000000214702c0 R15: ffff88811370f400 [ 31.872329][ T390] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.882252][ T390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.888993][ T390] CR2: 0000001b33c63fff CR3: 0000000122e0e000 CR4: 00000000003506a0 [ 31.897140][ T390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.905205][ T390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.913235][ T390] Call Trace: [ 31.916540][ T390] [ 31.919470][ T390] pppol2tp_release+0x150/0x2b0 [ 31.924385][ T390] sock_close+0xb8/0x200 [ 31.928651][ T390] ? sock_mmap+0xa0/0xa0 [ 31.932944][ T390] __fput+0x22b/0x900 [ 31.936946][ T390] ____fput+0x15/0x20 [ 31.940950][ T390] task_work_run+0x127/0x190 [ 31.945596][ T390] do_exit+0xb70/0x29a0 [ 31.949803][ T390] ? put_task_struct+0x90/0x90 [ 31.954795][ T390] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.960457][ T390] ? ____fput+0x15/0x20 [ 31.964686][ T390] do_group_exit+0x149/0x310 [ 31.969328][ T390] __x64_sys_exit_group+0x3f/0x40 [ 31.974447][ T390] x64_sys_call+0x832/0x9a0 [ 31.978976][ T390] do_syscall_64+0x4c/0xa0 [ 31.983445][ T390] ? clear_bhb_loop+0x50/0xa0 [ 31.988147][ T390] ? clear_bhb_loop+0x50/0xa0 [ 31.992871][ T390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.998785][ T390] RIP: 0033:0x7f2ed78c5e59 [ 32.003254][ T390] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 32.010630][ T390] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.019079][ T390] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 32.027086][ T390] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.035105][ T390] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 32.043114][ T390] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000011 [ 32.051085][ T390] R13: 00000000000927c0 R14: 0000000000007ac1 R15: 00007ffefa1eedc0 [ 32.059248][ T390] [ 32.062309][ T390] ---[ end trace 2cd116f6e4dca29a ]--- [ 32.073736][ T391] ------------[ cut here ]------------ [ 32.079279][ T391] WARNING: CPU: 0 PID: 391 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.089382][ T391] Modules linked in: [ 32.093362][ T391] CPU: 0 PID: 391 Comm: syz.2.35 Tainted: G B W syzkaller #0 [ 32.101889][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.112393][ T391] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.118805][ T391] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 32.138626][ T391] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 32.144910][ T391] RAX: ffffffff845dbbf7 RBX: ffff888113813000 RCX: ffff8881136d8000 [ 32.152989][ T391] RDX: 0000000000000000 RSI: 000000000aff7dc0 RDI: 000000000c04eb7d [ 32.160988][ T391] RBP: ffffc90000aa7bb0 R08: ffff888113813083 R09: 1ffff11022702610 [ 32.169024][ T391] R10: dffffc0000000000 R11: ffffed1022702611 R12: dffffc0000000000 [ 32.177030][ T391] R13: dffffc0000000000 R14: 000000000aff7dc0 R15: ffff88812bcd5800 [ 32.185037][ T391] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.194004][ T391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.200617][ T391] CR2: 00002aa447c68000 CR3: 000000010d64f000 CR4: 00000000003506a0 [ 32.208643][ T391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.216653][ T391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.224673][ T391] Call Trace: [ 32.227962][ T391] [ 32.230895][ T391] pppol2tp_release+0x150/0x2b0 [ 32.235795][ T391] sock_close+0xb8/0x200 [ 32.240061][ T391] ? sock_mmap+0xa0/0xa0 [ 32.244345][ T391] __fput+0x22b/0x900 [ 32.248382][ T391] ____fput+0x15/0x20 [ 32.252408][ T391] task_work_run+0x127/0x190 [ 32.257017][ T391] do_exit+0xb70/0x29a0 [ 32.261179][ T391] ? put_task_struct+0x90/0x90 [ 32.265986][ T391] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.271636][ T391] ? ____fput+0x15/0x20 [ 32.275835][ T391] do_group_exit+0x149/0x310 [ 32.280449][ T391] __x64_sys_exit_group+0x3f/0x40 [ 32.285539][ T391] x64_sys_call+0x832/0x9a0 [ 32.290064][ T391] do_syscall_64+0x4c/0xa0 [ 32.294552][ T391] ? clear_bhb_loop+0x50/0xa0 [ 32.299253][ T391] ? clear_bhb_loop+0x50/0xa0 [ 32.303973][ T391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.309918][ T391] RIP: 0033:0x7f2ed78c5e59 [ 32.314380][ T391] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 32.321759][ T391] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.330221][ T391] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 32.338238][ T391] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.346271][ T391] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 32.354302][ T391] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000012 [ 32.362317][ T391] R13: 00000000000927c0 R14: 0000000000007bff R15: 00007ffefa1eedc0 [ 32.370345][ T391] [ 32.373551][ T391] ---[ end trace 2cd116f6e4dca29b ]--- [ 32.385196][ T392] ------------[ cut here ]------------ [ 32.390686][ T392] WARNING: CPU: 0 PID: 392 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.400843][ T392] Modules linked in: [ 32.404831][ T392] CPU: 0 PID: 392 Comm: syz.2.36 Tainted: G B W syzkaller #0 [ 32.413568][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.423879][ T392] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.430291][ T392] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 32.450387][ T392] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 32.456540][ T392] RAX: ffffffff845dbbf7 RBX: ffff888113dcc000 RCX: ffff888113ddbb40 [ 32.464746][ T392] RDX: 0000000000000000 RSI: 000000000aff7320 RDI: 000000000c04eb7d [ 32.472769][ T392] RBP: ffffc90000a97bb0 R08: ffff888113dcc083 R09: 1ffff110227b9810 [ 32.480813][ T392] R10: dffffc0000000000 R11: ffffed10227b9811 R12: dffffc0000000000 [ 32.488852][ T392] R13: dffffc0000000000 R14: 000000000aff7320 R15: ffff88811370e400 [ 32.496900][ T392] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.505980][ T392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.512634][ T392] CR2: 0000001b33c63fff CR3: 000000010f854000 CR4: 00000000003506b0 [ 32.520614][ T392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.528638][ T392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.536666][ T392] Call Trace: [ 32.539952][ T392] [ 32.542929][ T392] pppol2tp_release+0x150/0x2b0 [ 32.547807][ T392] sock_close+0xb8/0x200 [ 32.552126][ T392] ? sock_mmap+0xa0/0xa0 [ 32.556390][ T392] __fput+0x22b/0x900 [ 32.560376][ T392] ____fput+0x15/0x20 [ 32.564402][ T392] task_work_run+0x127/0x190 [ 32.569009][ T392] do_exit+0xb70/0x29a0 [ 32.573206][ T392] ? put_task_struct+0x90/0x90 [ 32.577997][ T392] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.583671][ T392] ? ____fput+0x15/0x20 [ 32.587846][ T392] do_group_exit+0x149/0x310 [ 32.592478][ T392] __x64_sys_exit_group+0x3f/0x40 [ 32.597550][ T392] x64_sys_call+0x832/0x9a0 [ 32.602305][ T392] do_syscall_64+0x4c/0xa0 [ 32.606742][ T392] ? clear_bhb_loop+0x50/0xa0 [ 32.611419][ T392] ? clear_bhb_loop+0x50/0xa0 [ 32.616172][ T392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.622126][ T392] RIP: 0033:0x7f2ed78c5e59 [ 32.626766][ T392] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 32.634182][ T392] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.642654][ T392] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 32.650633][ T392] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.658650][ T392] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 32.666659][ T392] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000013 [ 32.674717][ T392] R13: 00000000000927c0 R14: 0000000000007d39 R15: 00007ffefa1eedc0 [ 32.682822][ T392] [ 32.685853][ T392] ---[ end trace 2cd116f6e4dca29c ]--- 2026/07/07 01:43:41 executed programs: 22 [ 32.706407][ T394] ------------[ cut here ]------------ [ 32.711900][ T394] WARNING: CPU: 0 PID: 394 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.722114][ T394] Modules linked in: [ 32.726033][ T394] CPU: 0 PID: 394 Comm: syz.2.38 Tainted: G B W syzkaller #0 [ 32.734656][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.744862][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 32.744876][ T30] audit: type=1400 audit(1783388621.791:118): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[14100]" dev="pipefs" ino=14100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 32.747482][ T394] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.780664][ T394] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 32.800397][ T394] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 32.806558][ T394] RAX: ffffffff845dbbf7 RBX: ffff8881134eb000 RCX: ffff888113dd93c0 [ 32.814572][ T394] RDX: 0000000000000000 RSI: 000000000afecf60 RDI: 000000000c04eb7d [ 32.822586][ T394] RBP: ffffc90000aa7bb0 R08: ffff8881134eb083 R09: 1ffff1102269d610 [ 32.830582][ T394] R10: dffffc0000000000 R11: ffffed102269d611 R12: dffffc0000000000 [ 32.838646][ T394] R13: dffffc0000000000 R14: 000000000afecf60 R15: ffff88812dacb800 [ 32.846736][ T394] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.855773][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.862404][ T394] CR2: 00002aa447a5a020 CR3: 000000010d6f6000 CR4: 00000000003506a0 [ 32.870382][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.878398][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.886425][ T394] Call Trace: [ 32.889713][ T394] [ 32.892696][ T394] pppol2tp_release+0x150/0x2b0 [ 32.897604][ T394] sock_close+0xb8/0x200 [ 32.901850][ T394] ? sock_mmap+0xa0/0xa0 [ 32.906142][ T394] __fput+0x22b/0x900 [ 32.910149][ T394] ____fput+0x15/0x20 [ 32.914388][ T394] task_work_run+0x127/0x190 [ 32.919035][ T394] do_exit+0xb70/0x29a0 [ 32.923292][ T394] ? put_task_struct+0x90/0x90 [ 32.928084][ T394] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.933781][ T394] ? ____fput+0x15/0x20 [ 32.937958][ T394] do_group_exit+0x149/0x310 [ 32.942612][ T394] __x64_sys_exit_group+0x3f/0x40 [ 32.947692][ T394] x64_sys_call+0x832/0x9a0 [ 32.952295][ T394] do_syscall_64+0x4c/0xa0 [ 32.956742][ T394] ? clear_bhb_loop+0x50/0xa0 [ 32.961417][ T394] ? clear_bhb_loop+0x50/0xa0 [ 32.966150][ T394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.972127][ T394] RIP: 0033:0x7f2ed78c5e59 [ 32.976549][ T394] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 32.984128][ T394] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.992628][ T394] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 33.000606][ T394] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.008625][ T394] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 33.016639][ T394] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000015 [ 33.024662][ T394] R13: 00000000000927c0 R14: 0000000000007f96 R15: 00007ffefa1eedc0 [ 33.032679][ T394] [ 33.035704][ T394] ---[ end trace 2cd116f6e4dca29d ]--- [ 33.047205][ T395] ------------[ cut here ]------------ [ 33.052748][ T395] WARNING: CPU: 0 PID: 395 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.062856][ T395] Modules linked in: [ 33.066771][ T395] CPU: 0 PID: 395 Comm: syz.2.39 Tainted: G B W syzkaller #0 [ 33.075506][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.085778][ T395] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.092704][ T395] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 33.112576][ T395] RSP: 0018:ffffc90000a57b90 EFLAGS: 00010293 [ 33.118673][ T395] RAX: ffffffff845dbbf7 RBX: ffff888113b7e000 RCX: ffff8881144dcf00 [ 33.126709][ T395] RDX: 0000000000000000 RSI: 0000000021470780 RDI: 000000000c04eb7d [ 33.134722][ T395] RBP: ffffc90000a57bb0 R08: ffff888113b7e083 R09: 1ffff1102276fc10 [ 33.142734][ T395] R10: dffffc0000000000 R11: ffffed102276fc11 R12: dffffc0000000000 [ 33.150727][ T395] R13: dffffc0000000000 R14: 0000000021470780 R15: ffff88812bc68400 [ 33.158754][ T395] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.167989][ T395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.174636][ T395] CR2: 00002aa447a5e000 CR3: 0000000122e0e000 CR4: 00000000003506a0 [ 33.182674][ T395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.190666][ T395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.198681][ T395] Call Trace: [ 33.201977][ T395] [ 33.204946][ T395] pppol2tp_release+0x150/0x2b0 [ 33.209827][ T395] sock_close+0xb8/0x200 [ 33.214132][ T395] ? sock_mmap+0xa0/0xa0 [ 33.218392][ T395] __fput+0x22b/0x900 [ 33.222423][ T395] ____fput+0x15/0x20 [ 33.226421][ T395] task_work_run+0x127/0x190 [ 33.231020][ T395] do_exit+0xb70/0x29a0 [ 33.235226][ T395] ? put_task_struct+0x90/0x90 [ 33.240007][ T395] ? __blkcg_punt_bio_submit+0x170/0x170 [ 33.245709][ T395] ? ____fput+0x15/0x20 [ 33.249894][ T395] do_group_exit+0x149/0x310 [ 33.254533][ T395] __x64_sys_exit_group+0x3f/0x40 [ 33.259606][ T395] x64_sys_call+0x832/0x9a0 [ 33.264148][ T395] do_syscall_64+0x4c/0xa0 [ 33.268589][ T395] ? clear_bhb_loop+0x50/0xa0 [ 33.273460][ T395] ? clear_bhb_loop+0x50/0xa0 [ 33.278168][ T395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.284116][ T395] RIP: 0033:0x7f2ed78c5e59 [ 33.288582][ T395] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 33.295981][ T395] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.304485][ T395] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 33.312544][ T395] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.320562][ T395] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 33.328691][ T395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000016 [ 33.336766][ T395] R13: 00000000000927c0 R14: 0000000000007fb2 R15: 00007ffefa1eedc0 [ 33.344821][ T395] [ 33.347854][ T395] ---[ end trace 2cd116f6e4dca29e ]--- [ 33.359551][ T396] ------------[ cut here ]------------ [ 33.365114][ T396] WARNING: CPU: 0 PID: 396 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.375197][ T396] Modules linked in: [ 33.379119][ T396] CPU: 0 PID: 396 Comm: syz.2.40 Tainted: G B W syzkaller #0 [ 33.387674][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.398213][ T396] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.404614][ T396] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 33.424323][ T396] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 33.430425][ T396] RAX: ffffffff845dbbf7 RBX: ffff8881134ea000 RCX: ffff888113ddcf00 [ 33.438520][ T396] RDX: 0000000000000000 RSI: 000000000afec540 RDI: 000000000c04eb7d [ 33.446532][ T396] RBP: ffffc90000a97bb0 R08: ffff8881134ea083 R09: 1ffff1102269d410 [ 33.454718][ T396] R10: dffffc0000000000 R11: ffffed102269d411 R12: dffffc0000000000 [ 33.462863][ T396] R13: dffffc0000000000 R14: 000000000afec540 R15: ffff88812dade400 [ 33.471081][ T396] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.480093][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.486749][ T396] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506b0 [ 33.494788][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.502818][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.510844][ T396] Call Trace: [ 33.514166][ T396] [ 33.517119][ T396] pppol2tp_release+0x150/0x2b0 [ 33.522025][ T396] sock_close+0xb8/0x200 [ 33.526712][ T396] ? sock_mmap+0xa0/0xa0 [ 33.530959][ T396] __fput+0x22b/0x900 [ 33.535000][ T396] ____fput+0x15/0x20 [ 33.539014][ T396] task_work_run+0x127/0x190 [ 33.543668][ T396] do_exit+0xb70/0x29a0 [ 33.547849][ T396] ? put_task_struct+0x90/0x90 [ 33.552660][ T396] ? __blkcg_punt_bio_submit+0x170/0x170 [ 33.558396][ T396] do_group_exit+0x149/0x310 [ 33.563334][ T396] __x64_sys_exit_group+0x3f/0x40 [ 33.568379][ T396] x64_sys_call+0x832/0x9a0 [ 33.572958][ T396] do_syscall_64+0x4c/0xa0 [ 33.577400][ T396] ? clear_bhb_loop+0x50/0xa0 [ 33.582125][ T396] ? clear_bhb_loop+0x50/0xa0 [ 33.586853][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.592814][ T396] RIP: 0033:0x7f2ed78c5e59 [ 33.597261][ T396] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 33.604711][ T396] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.613184][ T396] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 33.621164][ T396] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.629182][ T396] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 33.637222][ T396] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000017 [ 33.645457][ T396] R13: 00000000000927c0 R14: 00000000000080fe R15: 00007ffefa1eedc0 [ 33.653531][ T396] [ 33.656570][ T396] ---[ end trace 2cd116f6e4dca29f ]--- [ 33.668198][ T397] ------------[ cut here ]------------ [ 33.673796][ T397] WARNING: CPU: 0 PID: 397 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.683882][ T397] Modules linked in: [ 33.687812][ T397] CPU: 0 PID: 397 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 33.696442][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.706858][ T397] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.713454][ T397] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 33.733427][ T397] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 33.739517][ T397] RAX: ffffffff845dbbf7 RBX: ffff88811468e000 RCX: ffff888113dd8000 [ 33.747571][ T397] RDX: 0000000000000000 RSI: 000000000afec060 RDI: 000000000c04eb7d [ 33.755652][ T397] RBP: ffffc90000a97bb0 R08: ffff88811468e083 R09: 1ffff110228d1c10 [ 33.763714][ T397] R10: dffffc0000000000 R11: ffffed10228d1c11 R12: dffffc0000000000 [ 33.771708][ T397] R13: dffffc0000000000 R14: 000000000afec060 R15: ffff88812dadcc00 [ 33.779731][ T397] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.788696][ T397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.795671][ T397] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506b0 [ 33.803885][ T397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.811868][ T397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.819940][ T397] Call Trace: [ 33.823268][ T397] [ 33.826204][ T397] pppol2tp_release+0x150/0x2b0 [ 33.831056][ T397] sock_close+0xb8/0x200 [ 33.835369][ T397] ? sock_mmap+0xa0/0xa0 [ 33.839665][ T397] __fput+0x22b/0x900 [ 33.843742][ T397] ____fput+0x15/0x20 [ 33.847876][ T397] task_work_run+0x127/0x190 [ 33.852544][ T397] do_exit+0xb70/0x29a0 [ 33.856740][ T397] ? put_task_struct+0x90/0x90 [ 33.861510][ T397] ? __blkcg_punt_bio_submit+0x170/0x170 [ 33.867186][ T397] ? ____fput+0x15/0x20 [ 33.871372][ T397] do_group_exit+0x149/0x310 [ 33.876055][ T397] __x64_sys_exit_group+0x3f/0x40 [ 33.881115][ T397] x64_sys_call+0x832/0x9a0 [ 33.885841][ T397] do_syscall_64+0x4c/0xa0 [ 33.890405][ T397] ? clear_bhb_loop+0x50/0xa0 [ 33.895182][ T397] ? clear_bhb_loop+0x50/0xa0 [ 33.899884][ T397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.905873][ T397] RIP: 0033:0x7f2ed78c5e59 [ 33.910306][ T397] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 33.917717][ T397] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.926190][ T397] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 33.934246][ T397] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.942397][ T397] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 33.950402][ T397] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000018 [ 33.958431][ T397] R13: 00000000000927c0 R14: 000000000000823f R15: 00007ffefa1eedc0 [ 33.966560][ T397] [ 33.969605][ T397] ---[ end trace 2cd116f6e4dca2a0 ]--- [ 33.986244][ T399] ------------[ cut here ]------------ [ 33.991777][ T399] WARNING: CPU: 0 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.001947][ T399] Modules linked in: [ 34.005886][ T399] CPU: 0 PID: 399 Comm: syz.2.43 Tainted: G B W syzkaller #0 [ 34.014447][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.025253][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.031657][ T399] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 34.051406][ T399] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 34.057526][ T399] RAX: ffffffff845dbbf7 RBX: ffff8881146d2000 RCX: ffff8881146ebb40 [ 34.065571][ T399] RDX: 0000000000000000 RSI: 000000000afecc40 RDI: 000000000c04eb7d [ 34.073592][ T399] RBP: ffffc90000a97bb0 R08: ffff8881146d2083 R09: 1ffff110228da410 [ 34.081567][ T399] R10: dffffc0000000000 R11: ffffed10228da411 R12: dffffc0000000000 [ 34.089595][ T399] R13: dffffc0000000000 R14: 000000000afecc40 R15: ffff88812dae7000 [ 34.097635][ T399] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.106616][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.113272][ T399] CR2: 0000001b33c63fff CR3: 000000010f854000 CR4: 00000000003506b0 [ 34.121271][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.129304][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.137326][ T399] Call Trace: [ 34.140607][ T399] [ 34.143578][ T399] pppol2tp_release+0x150/0x2b0 [ 34.148458][ T399] sock_close+0xb8/0x200 [ 34.152780][ T399] ? sock_mmap+0xa0/0xa0 [ 34.157041][ T399] __fput+0x22b/0x900 [ 34.161028][ T399] ____fput+0x15/0x20 [ 34.165050][ T399] task_work_run+0x127/0x190 [ 34.169667][ T399] do_exit+0xb70/0x29a0 [ 34.173899][ T399] ? put_task_struct+0x90/0x90 [ 34.178752][ T399] ? __blkcg_punt_bio_submit+0x170/0x170 [ 34.184461][ T399] do_group_exit+0x149/0x310 [ 34.189074][ T399] __x64_sys_exit_group+0x3f/0x40 [ 34.194159][ T399] x64_sys_call+0x832/0x9a0 [ 34.198684][ T399] do_syscall_64+0x4c/0xa0 [ 34.203149][ T399] ? clear_bhb_loop+0x50/0xa0 [ 34.207845][ T399] ? clear_bhb_loop+0x50/0xa0 [ 34.212566][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.218506][ T399] RIP: 0033:0x7f2ed78c5e59 [ 34.223091][ T399] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 34.230480][ T399] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.238978][ T399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 34.247002][ T399] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.255029][ T399] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 34.263159][ T399] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001a [ 34.271157][ T399] R13: 00000000000927c0 R14: 0000000000008499 R15: 00007ffefa1eedc0 [ 34.279184][ T399] [ 34.282415][ T399] ---[ end trace 2cd116f6e4dca2a1 ]--- [ 34.296009][ T400] ------------[ cut here ]------------ [ 34.301490][ T400] WARNING: CPU: 1 PID: 400 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.311569][ T400] Modules linked in: [ 34.315522][ T400] CPU: 1 PID: 400 Comm: syz.2.44 Tainted: G B W syzkaller #0 [ 34.324082][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.335008][ T400] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.341391][ T400] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 34.361264][ T400] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 34.367577][ T400] RAX: ffffffff845dbbf7 RBX: ffff88811465d000 RCX: ffff8881146ea780 [ 34.375695][ T400] RDX: 0000000000000000 RSI: 0000000021470600 RDI: 000000000c04eb7d [ 34.383778][ T400] RBP: ffffc90000a97bb0 R08: ffff88811465d083 R09: 1ffff110228cba10 [ 34.391820][ T400] R10: dffffc0000000000 R11: ffffed10228cba11 R12: dffffc0000000000 [ 34.399885][ T400] R13: dffffc0000000000 R14: 0000000021470600 R15: ffff88812db28400 [ 34.407894][ T400] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.416879][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.423493][ T400] CR2: 0000001b33c63fff CR3: 000000010d64f000 CR4: 00000000003506a0 [ 34.431472][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.439513][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.447577][ T400] Call Trace: [ 34.450871][ T400] [ 34.453840][ T400] pppol2tp_release+0x150/0x2b0 [ 34.458717][ T400] sock_close+0xb8/0x200 [ 34.463009][ T400] ? sock_mmap+0xa0/0xa0 [ 34.467269][ T400] __fput+0x22b/0x900 [ 34.471280][ T400] ____fput+0x15/0x20 [ 34.475317][ T400] task_work_run+0x127/0x190 [ 34.479927][ T400] do_exit+0xb70/0x29a0 [ 34.484129][ T400] ? put_task_struct+0x90/0x90 [ 34.488916][ T400] ? __blkcg_punt_bio_submit+0x170/0x170 [ 34.494613][ T400] ? ____fput+0x15/0x20 [ 34.498790][ T400] do_group_exit+0x149/0x310 [ 34.503436][ T400] __x64_sys_exit_group+0x3f/0x40 [ 34.508481][ T400] x64_sys_call+0x832/0x9a0 [ 34.513041][ T400] do_syscall_64+0x4c/0xa0 [ 34.517495][ T400] ? clear_bhb_loop+0x50/0xa0 [ 34.522231][ T400] ? clear_bhb_loop+0x50/0xa0 [ 34.526927][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.532886][ T400] RIP: 0033:0x7f2ed78c5e59 [ 34.537324][ T400] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 34.545009][ T400] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.553509][ T400] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 34.561501][ T400] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.569525][ T400] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 34.577546][ T400] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001b [ 34.585576][ T400] R13: 00000000000927c0 R14: 00000000000084b1 R15: 00007ffefa1eedc0 [ 34.593596][ T400] [ 34.596624][ T400] ---[ end trace 2cd116f6e4dca2a2 ]--- [ 34.615666][ T402] ------------[ cut here ]------------ [ 34.621422][ T402] WARNING: CPU: 1 PID: 402 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.631630][ T402] Modules linked in: [ 34.635605][ T402] CPU: 1 PID: 402 Comm: syz.2.46 Tainted: G B W syzkaller #0 [ 34.644365][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.654688][ T402] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.661099][ T402] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 34.681044][ T402] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 34.687161][ T402] RAX: ffffffff845dbbf7 RBX: ffff88810dc78000 RCX: ffff8881144de2c0 [ 34.695193][ T402] RDX: 0000000000000000 RSI: 00000000214705c0 RDI: 000000000c04eb7d [ 34.703214][ T402] RBP: ffffc90003fbfbb0 R08: ffff88810dc78083 R09: 1ffff11021b8f010 [ 34.711188][ T402] R10: dffffc0000000000 R11: ffffed1021b8f011 R12: dffffc0000000000 [ 34.719392][ T402] R13: dffffc0000000000 R14: 00000000214705c0 R15: ffff88812db31800 [ 34.727424][ T402] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.736417][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.743047][ T402] CR2: 0000001b33c63fff CR3: 000000010f854000 CR4: 00000000003506a0 [ 34.751029][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.759080][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.767104][ T402] Call Trace: [ 34.770425][ T402] [ 34.773405][ T402] pppol2tp_release+0x150/0x2b0 [ 34.778288][ T402] sock_close+0xb8/0x200 [ 34.782593][ T402] ? sock_mmap+0xa0/0xa0 [ 34.786887][ T402] __fput+0x22b/0x900 [ 34.790887][ T402] ____fput+0x15/0x20 [ 34.794961][ T402] task_work_run+0x127/0x190 [ 34.799601][ T402] do_exit+0xb70/0x29a0 [ 34.803828][ T402] ? put_task_struct+0x90/0x90 [ 34.808619][ T402] ? __blkcg_punt_bio_submit+0x170/0x170 [ 34.814327][ T402] ? ____fput+0x15/0x20 [ 34.818509][ T402] do_group_exit+0x149/0x310 [ 34.823181][ T402] __x64_sys_exit_group+0x3f/0x40 [ 34.828264][ T402] x64_sys_call+0x832/0x9a0 [ 34.832816][ T402] do_syscall_64+0x4c/0xa0 [ 34.837257][ T402] ? clear_bhb_loop+0x50/0xa0 [ 34.841933][ T402] ? clear_bhb_loop+0x50/0xa0 [ 34.846678][ T402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.852621][ T402] RIP: 0033:0x7f2ed78c5e59 [ 34.857038][ T402] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 34.864446][ T402] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.872910][ T402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 34.880892][ T402] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.888960][ T402] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 34.896975][ T402] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001d [ 34.904999][ T402] R13: 00000000000927c0 R14: 000000000000870d R15: 00007ffefa1eedc0 [ 34.913025][ T402] [ 34.916048][ T402] ---[ end trace 2cd116f6e4dca2a3 ]--- [ 34.928072][ T403] ------------[ cut here ]------------ [ 34.933651][ T403] WARNING: CPU: 0 PID: 403 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.943699][ T403] Modules linked in: [ 34.947619][ T403] CPU: 0 PID: 403 Comm: syz.2.47 Tainted: G B W syzkaller #0 [ 34.956176][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.966647][ T403] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.973071][ T403] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 34.992778][ T403] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 34.998853][ T403] RAX: ffffffff845dbbf7 RBX: ffff888114d0b000 RCX: ffff8881144dbb40 [ 35.006897][ T403] RDX: 0000000000000000 RSI: 000000000afecc00 RDI: 000000000c04eb7d [ 35.014914][ T403] RBP: ffffc90003fbfbb0 R08: ffff888114d0b083 R09: 1ffff110229a1610 [ 35.022954][ T403] R10: dffffc0000000000 R11: ffffed10229a1611 R12: dffffc0000000000 [ 35.030947][ T403] R13: dffffc0000000000 R14: 000000000afecc00 R15: ffff88812dafe800 [ 35.038964][ T403] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.047928][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.054596][ T403] CR2: 0000555578d65908 CR3: 000000000660f000 CR4: 00000000003506b0 [ 35.062648][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.070653][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.078718][ T403] Call Trace: [ 35.082019][ T403] [ 35.085049][ T403] pppol2tp_release+0x150/0x2b0 [ 35.089963][ T403] sock_close+0xb8/0x200 [ 35.094269][ T403] ? sock_mmap+0xa0/0xa0 [ 35.098536][ T403] __fput+0x22b/0x900 [ 35.102566][ T403] ____fput+0x15/0x20 [ 35.106568][ T403] task_work_run+0x127/0x190 [ 35.111316][ T403] do_exit+0xb70/0x29a0 [ 35.115543][ T403] ? put_task_struct+0x90/0x90 [ 35.120513][ T403] ? __blkcg_punt_bio_submit+0x170/0x170 [ 35.126211][ T403] do_group_exit+0x149/0x310 [ 35.130824][ T403] __x64_sys_exit_group+0x3f/0x40 [ 35.137294][ T403] x64_sys_call+0x832/0x9a0 [ 35.141828][ T403] do_syscall_64+0x4c/0xa0 [ 35.146302][ T403] ? clear_bhb_loop+0x50/0xa0 [ 35.151004][ T403] ? clear_bhb_loop+0x50/0xa0 [ 35.155930][ T403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.161859][ T403] RIP: 0033:0x7f2ed78c5e59 [ 35.166328][ T403] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 35.173747][ T403] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.182215][ T403] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 35.190210][ T403] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.198237][ T403] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 35.206253][ T403] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001e [ 35.214267][ T403] R13: 00000000000927c0 R14: 000000000000871d R15: 00007ffefa1eedc0 [ 35.222278][ T403] [ 35.225471][ T403] ---[ end trace 2cd116f6e4dca2a4 ]--- [ 35.276116][ T406] ------------[ cut here ]------------ [ 35.281611][ T406] WARNING: CPU: 1 PID: 406 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.291921][ T406] Modules linked in: [ 35.295860][ T406] CPU: 1 PID: 406 Comm: syz.2.50 Tainted: G B W syzkaller #0 [ 35.305710][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.315807][ T406] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.322291][ T406] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 35.341948][ T406] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 35.348063][ T406] RAX: ffffffff845dbbf7 RBX: ffff888114d09000 RCX: ffff8881146e8000 [ 35.356073][ T406] RDX: 0000000000000000 RSI: 0000000012044cc0 RDI: 000000000c04eb7d [ 35.364117][ T406] RBP: ffffc90003fbfbb0 R08: ffff888114d09083 R09: 1ffff110229a1210 [ 35.372174][ T406] R10: dffffc0000000000 R11: ffffed10229a1211 R12: dffffc0000000000 [ 35.380164][ T406] R13: dffffc0000000000 R14: 0000000012044cc0 R15: ffff88812db38800 [ 35.388183][ T406] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.397177][ T406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.403990][ T406] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506a0 [ 35.412307][ T406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.420385][ T406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.428823][ T406] Call Trace: [ 35.432176][ T406] [ 35.435126][ T406] pppol2tp_release+0x150/0x2b0 [ 35.439988][ T406] sock_close+0xb8/0x200 [ 35.444278][ T406] ? sock_mmap+0xa0/0xa0 [ 35.448541][ T406] __fput+0x22b/0x900 [ 35.452575][ T406] ____fput+0x15/0x20 [ 35.456614][ T406] task_work_run+0x127/0x190 [ 35.461226][ T406] do_exit+0xb70/0x29a0 [ 35.465424][ T406] ? put_task_struct+0x90/0x90 [ 35.470381][ T406] ? __blkcg_punt_bio_submit+0x170/0x170 [ 35.476066][ T406] do_group_exit+0x149/0x310 [ 35.480676][ T406] __x64_sys_exit_group+0x3f/0x40 [ 35.485748][ T406] x64_sys_call+0x832/0x9a0 [ 35.490268][ T406] do_syscall_64+0x4c/0xa0 [ 35.494763][ T406] ? clear_bhb_loop+0x50/0xa0 [ 35.499459][ T406] ? clear_bhb_loop+0x50/0xa0 [ 35.504180][ T406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.510093][ T406] RIP: 0033:0x7f2ed78c5e59 [ 35.514560][ T406] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 35.521964][ T406] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.530453][ T406] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 35.538458][ T406] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.546472][ T406] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 35.554490][ T406] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000021 [ 35.562502][ T406] R13: 00000000000927c0 R14: 0000000000008987 R15: 00007ffefa1eedc0 [ 35.570498][ T406] [ 35.573557][ T406] ---[ end trace 2cd116f6e4dca2a5 ]--- [ 35.584438][ T407] ------------[ cut here ]------------ [ 35.589957][ T407] WARNING: CPU: 1 PID: 407 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.600258][ T407] Modules linked in: [ 35.604294][ T407] CPU: 1 PID: 407 Comm: syz.2.51 Tainted: G B W syzkaller #0 [ 35.613057][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.623252][ T407] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.629618][ T407] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 35.650041][ T407] RSP: 0018:ffffc90000a57b90 EFLAGS: 00010293 [ 35.656186][ T407] RAX: ffffffff845dbbf7 RBX: ffff88811465c000 RCX: ffff8881144da780 [ 35.664260][ T407] RDX: 0000000000000000 RSI: 000000000f2300c0 RDI: 000000000c04eb7d [ 35.672302][ T407] RBP: ffffc90000a57bb0 R08: ffff88811465c083 R09: 1ffff110228cb810 [ 35.680311][ T407] R10: dffffc0000000000 R11: ffffed10228cb811 R12: dffffc0000000000 [ 35.688342][ T407] R13: dffffc0000000000 R14: 000000000f2300c0 R15: ffff88812db83400 [ 35.696394][ T407] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.705410][ T407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.712031][ T407] CR2: 00007f2ed8680060 CR3: 000000010df5f000 CR4: 00000000003506b0 [ 35.720101][ T407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.728283][ T407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.736300][ T407] Call Trace: [ 35.739581][ T407] [ 35.742550][ T407] pppol2tp_release+0x150/0x2b0 [ 35.747433][ T407] sock_close+0xb8/0x200 [ 35.751676][ T407] ? sock_mmap+0xa0/0xa0 [ 35.756540][ T407] __fput+0x22b/0x900 [ 35.760580][ T407] ____fput+0x15/0x20 [ 35.764621][ T407] task_work_run+0x127/0x190 [ 35.769240][ T407] do_exit+0xb70/0x29a0 [ 35.773638][ T407] ? put_task_struct+0x90/0x90 [ 35.778437][ T407] ? __blkcg_punt_bio_submit+0x170/0x170 [ 35.784134][ T407] do_group_exit+0x149/0x310 [ 35.788753][ T407] __x64_sys_exit_group+0x3f/0x40 [ 35.793827][ T407] x64_sys_call+0x832/0x9a0 [ 35.798349][ T407] do_syscall_64+0x4c/0xa0 [ 35.802957][ T407] ? clear_bhb_loop+0x50/0xa0 [ 35.807672][ T407] ? clear_bhb_loop+0x50/0xa0 [ 35.812435][ T407] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.818364][ T407] RIP: 0033:0x7f2ed78c5e59 [ 35.822831][ T407] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 35.830208][ T407] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.840681][ T407] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 35.848698][ T407] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.856712][ T407] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 35.864735][ T407] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000022 [ 35.872780][ T407] R13: 00000000000927c0 R14: 00000000000089b4 R15: 00007ffefa1eedc0 [ 35.880775][ T407] [ 35.883845][ T407] ---[ end trace 2cd116f6e4dca2a6 ]--- [ 35.898930][ T409] ------------[ cut here ]------------ [ 35.904426][ T409] WARNING: CPU: 1 PID: 409 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.914492][ T409] Modules linked in: [ 35.918408][ T409] CPU: 0 PID: 409 Comm: syz.2.53 Tainted: G B W syzkaller #0 [ 35.926997][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.937143][ T409] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.943563][ T409] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 35.963368][ T409] RSP: 0018:ffffc90000aa7b90 EFLAGS: 00010293 [ 35.969473][ T409] RAX: ffffffff845dbbf7 RBX: ffff88811582c000 RCX: ffff88811580bb40 [ 35.977550][ T409] RDX: 0000000000000000 RSI: 000000000f230ba0 RDI: 000000000c04eb7d [ 35.985567][ T409] RBP: ffffc90000aa7bb0 R08: ffff88811582c083 R09: 1ffff11022b05810 [ 35.993599][ T409] R10: dffffc0000000000 R11: ffffed1022b05811 R12: dffffc0000000000 [ 36.001585][ T409] R13: dffffc0000000000 R14: 000000000f230ba0 R15: ffff88812db8dc00 [ 36.009651][ T409] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.018616][ T409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.025244][ T409] CR2: 00002aa447a6c000 CR3: 000000010f854000 CR4: 00000000003506a0 [ 36.033262][ T409] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.041230][ T409] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.049257][ T409] Call Trace: [ 36.052581][ T409] [ 36.055514][ T409] pppol2tp_release+0x150/0x2b0 [ 36.060369][ T409] sock_close+0xb8/0x200 [ 36.064649][ T409] ? sock_mmap+0xa0/0xa0 [ 36.068915][ T409] __fput+0x22b/0x900 [ 36.072939][ T409] ____fput+0x15/0x20 [ 36.076939][ T409] task_work_run+0x127/0x190 [ 36.081531][ T409] do_exit+0xb70/0x29a0 [ 36.085724][ T409] ? put_task_struct+0x90/0x90 [ 36.090513][ T409] ? __blkcg_punt_bio_submit+0x170/0x170 [ 36.096220][ T409] do_group_exit+0x149/0x310 [ 36.100830][ T409] __x64_sys_exit_group+0x3f/0x40 [ 36.105905][ T409] x64_sys_call+0x832/0x9a0 [ 36.110427][ T409] do_syscall_64+0x4c/0xa0 [ 36.114890][ T409] ? clear_bhb_loop+0x50/0xa0 [ 36.119590][ T409] ? clear_bhb_loop+0x50/0xa0 [ 36.124330][ T409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.130242][ T409] RIP: 0033:0x7f2ed78c5e59 [ 36.134706][ T409] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 36.142153][ T409] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.150564][ T409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 36.158580][ T409] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.166596][ T409] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 36.175803][ T409] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000024 [ 36.183824][ T409] R13: 00000000000927c0 R14: 0000000000008c13 R15: 00007ffefa1eedc0 [ 36.191824][ T409] [ 36.195190][ T409] ---[ end trace 2cd116f6e4dca2a7 ]--- [ 36.206996][ T410] ------------[ cut here ]------------ [ 36.212589][ T410] WARNING: CPU: 0 PID: 410 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.222661][ T410] Modules linked in: [ 36.226581][ T410] CPU: 1 PID: 410 Comm: syz.2.54 Tainted: G B W syzkaller #0 [ 36.235169][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.245656][ T410] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.252111][ T410] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 36.271765][ T410] RSP: 0018:ffffc90003fbfb90 EFLAGS: 00010293 [ 36.277894][ T410] RAX: ffffffff845dbbf7 RBX: ffff8881146d1000 RCX: ffff8881146ee2c0 [ 36.285923][ T410] RDX: 0000000000000000 RSI: 000000000afe00e0 RDI: 000000000c04eb7d [ 36.293973][ T410] RBP: ffffc90003fbfbb0 R08: ffff8881146d1083 R09: 1ffff110228da210 [ 36.301965][ T410] R10: dffffc0000000000 R11: ffffed10228da211 R12: dffffc0000000000 [ 36.309981][ T410] R13: dffffc0000000000 R14: 000000000afe00e0 R15: ffff88812db55000 [ 36.317992][ T410] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.326956][ T410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.333608][ T410] CR2: 00002aa447a6c000 CR3: 0000000122e0e000 CR4: 00000000003506a0 [ 36.341611][ T410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.349621][ T410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.357632][ T410] Call Trace: [ 36.360911][ T410] [ 36.363880][ T410] pppol2tp_release+0x150/0x2b0 [ 36.368755][ T410] sock_close+0xb8/0x200 [ 36.373295][ T410] ? sock_mmap+0xa0/0xa0 [ 36.377580][ T410] __fput+0x22b/0x900 [ 36.381607][ T410] ____fput+0x15/0x20 [ 36.385669][ T410] task_work_run+0x127/0x190 [ 36.390290][ T410] do_exit+0xb70/0x29a0 [ 36.394493][ T410] ? put_task_struct+0x90/0x90 [ 36.399281][ T410] ? __blkcg_punt_bio_submit+0x170/0x170 [ 36.404962][ T410] do_group_exit+0x149/0x310 [ 36.409577][ T410] __x64_sys_exit_group+0x3f/0x40 [ 36.414658][ T410] x64_sys_call+0x832/0x9a0 [ 36.419191][ T410] do_syscall_64+0x4c/0xa0 [ 36.423654][ T410] ? clear_bhb_loop+0x50/0xa0 [ 36.428368][ T410] ? clear_bhb_loop+0x50/0xa0 [ 36.433109][ T410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.439060][ T410] RIP: 0033:0x7f2ed78c5e59 [ 36.443597][ T410] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 36.451101][ T410] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.459581][ T410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 36.467612][ T410] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.475663][ T410] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 36.483671][ T410] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000025 [ 36.491641][ T410] R13: 00000000000927c0 R14: 0000000000008c2a R15: 00007ffefa1eedc0 [ 36.499657][ T410] [ 36.502707][ T410] ---[ end trace 2cd116f6e4dca2a8 ]--- [ 36.556370][ T413] ------------[ cut here ]------------ [ 36.561856][ T413] WARNING: CPU: 1 PID: 413 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.571904][ T413] Modules linked in: [ 36.575833][ T413] CPU: 1 PID: 413 Comm: syz.2.57 Tainted: G B W syzkaller #0 [ 36.584410][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.594499][ T413] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.600841][ T413] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 36.620512][ T413] RSP: 0018:ffffc90000ab7b90 EFLAGS: 00010293 [ 36.626653][ T413] RAX: ffffffff845dbbf7 RBX: ffff88811582e000 RCX: ffff888115994f00 [ 36.634686][ T413] RDX: 0000000000000000 RSI: 000000000f230ee0 RDI: 000000000c04eb7d [ 36.642696][ T413] RBP: ffffc90000ab7bb0 R08: ffff88811582e083 R09: 1ffff11022b05c10 [ 36.650694][ T413] R10: dffffc0000000000 R11: ffffed1022b05c11 R12: dffffc0000000000 [ 36.658720][ T413] R13: dffffc0000000000 R14: 000000000f230ee0 R15: ffff888111440400 [ 36.666726][ T413] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.675696][ T413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.682340][ T413] CR2: 0000001b33c63fff CR3: 000000000660f000 CR4: 00000000003506a0 [ 36.690333][ T413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.698342][ T413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.706345][ T413] Call Trace: [ 36.709930][ T413] [ 36.712927][ T413] pppol2tp_release+0x150/0x2b0 [ 36.717818][ T413] sock_close+0xb8/0x200 [ 36.722133][ T413] ? sock_mmap+0xa0/0xa0 [ 36.726408][ T413] __fput+0x22b/0x900 [ 36.731169][ T413] ____fput+0x15/0x20 [ 36.735333][ T413] task_work_run+0x127/0x190 [ 36.740204][ T413] do_exit+0xb70/0x29a0 [ 36.744425][ T413] ? put_task_struct+0x90/0x90 [ 36.749223][ T413] ? __blkcg_punt_bio_submit+0x170/0x170 [ 36.754914][ T413] ? ____fput+0x15/0x20 [ 36.759718][ T413] do_group_exit+0x149/0x310 [ 36.764688][ T413] __x64_sys_exit_group+0x3f/0x40 [ 36.769968][ T413] x64_sys_call+0x832/0x9a0 [ 36.774544][ T413] do_syscall_64+0x4c/0xa0 [ 36.779388][ T413] ? clear_bhb_loop+0x50/0xa0 [ 36.784133][ T413] ? clear_bhb_loop+0x50/0xa0 [ 36.789215][ T413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.795166][ T413] RIP: 0033:0x7f2ed78c5e59 [ 36.799976][ T413] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 36.807413][ T413] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.816428][ T413] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 36.824445][ T413] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.832758][ T413] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 36.841142][ T413] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000028 [ 36.850905][ T413] R13: 00000000000927c0 R14: 0000000000008e84 R15: 00007ffefa1eedc0 [ 36.859285][ T413] [ 36.862348][ T413] ---[ end trace 2cd116f6e4dca2a9 ]--- [ 36.875338][ T414] ------------[ cut here ]------------ [ 36.880917][ T414] WARNING: CPU: 1 PID: 414 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.891816][ T414] Modules linked in: [ 36.895877][ T414] CPU: 1 PID: 414 Comm: syz.2.58 Tainted: G B W syzkaller #0 [ 36.904948][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.915566][ T414] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.921960][ T414] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 36.941841][ T414] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 36.948306][ T414] RAX: ffffffff845dbbf7 RBX: ffff888115876000 RCX: ffff88811580a780 [ 36.956498][ T414] RDX: 0000000000000000 RSI: 000000000f2300a0 RDI: 000000000c04eb7d [ 36.965485][ T414] RBP: ffffc90000a97bb0 R08: ffff888115876083 R09: 1ffff11022b0ec10 [ 36.973540][ T414] R10: dffffc0000000000 R11: ffffed1022b0ec11 R12: dffffc0000000000 [ 36.981634][ T414] R13: dffffc0000000000 R14: 000000000f2300a0 R15: ffff888113727400 [ 36.989664][ T414] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.998637][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.005936][ T414] CR2: 00002aa447c7f000 CR3: 000000010f854000 CR4: 00000000003506b0 [ 37.014298][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.022351][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.030433][ T414] Call Trace: [ 37.034166][ T414] [ 37.037154][ T414] pppol2tp_release+0x150/0x2b0 [ 37.042016][ T414] sock_close+0xb8/0x200 [ 37.046358][ T414] ? sock_mmap+0xa0/0xa0 [ 37.050695][ T414] __fput+0x22b/0x900 [ 37.054760][ T414] ____fput+0x15/0x20 [ 37.058805][ T414] task_work_run+0x127/0x190 [ 37.063448][ T414] do_exit+0xb70/0x29a0 [ 37.067634][ T414] ? put_task_struct+0x90/0x90 [ 37.072449][ T414] ? __blkcg_punt_bio_submit+0x170/0x170 [ 37.078237][ T414] ? ____fput+0x15/0x20 [ 37.082484][ T414] do_group_exit+0x149/0x310 [ 37.087193][ T414] __x64_sys_exit_group+0x3f/0x40 [ 37.092286][ T414] x64_sys_call+0x832/0x9a0 [ 37.096814][ T414] do_syscall_64+0x4c/0xa0 [ 37.101245][ T414] ? clear_bhb_loop+0x50/0xa0 [ 37.106296][ T414] ? clear_bhb_loop+0x50/0xa0 [ 37.111017][ T414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.116966][ T414] RIP: 0033:0x7f2ed78c5e59 [ 37.121401][ T414] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 37.128845][ T414] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.137315][ T414] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 37.145337][ T414] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.153373][ T414] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 37.161635][ T414] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000029 [ 37.169694][ T414] R13: 00000000000927c0 R14: 0000000000008eb4 R15: 00007ffefa1eedc0 [ 37.177741][ T414] [ 37.180785][ T414] ---[ end trace 2cd116f6e4dca2aa ]--- [ 37.236264][ T417] ------------[ cut here ]------------ [ 37.242503][ T417] WARNING: CPU: 0 PID: 417 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.252879][ T417] Modules linked in: [ 37.256806][ T417] CPU: 0 PID: 417 Comm: syz.2.61 Tainted: G B W syzkaller #0 [ 37.265733][ T417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.276150][ T417] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.282782][ T417] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 37.303894][ T417] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 37.310004][ T417] RAX: ffffffff845dbbf7 RBX: ffff888115a99000 RCX: ffff888115808000 [ 37.318045][ T417] RDX: 0000000000000000 RSI: 000000000afe0ec0 RDI: 000000000c04eb7d [ 37.326060][ T417] RBP: ffffc90000a97bb0 R08: ffff888115a99083 R09: 1ffff11022b53210 [ 37.334090][ T417] R10: dffffc0000000000 R11: ffffed1022b53211 R12: dffffc0000000000 [ 37.342171][ T417] R13: dffffc0000000000 R14: 000000000afe0ec0 R15: ffff88812db7b400 [ 37.350425][ T417] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.359408][ T417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.366031][ T417] CR2: 00007f2ed8680060 CR3: 000000010f854000 CR4: 00000000003506a0 [ 37.374054][ T417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.382085][ T417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.390075][ T417] Call Trace: [ 37.393392][ T417] [ 37.396351][ T417] pppol2tp_release+0x150/0x2b0 [ 37.401231][ T417] sock_close+0xb8/0x200 [ 37.405531][ T417] ? sock_mmap+0xa0/0xa0 [ 37.409796][ T417] __fput+0x22b/0x900 [ 37.413840][ T417] ____fput+0x15/0x20 [ 37.417842][ T417] task_work_run+0x127/0x190 [ 37.422513][ T417] do_exit+0xb70/0x29a0 [ 37.426691][ T417] ? put_task_struct+0x90/0x90 [ 37.431480][ T417] ? __blkcg_punt_bio_submit+0x170/0x170 [ 37.437172][ T417] do_group_exit+0x149/0x310 [ 37.441792][ T417] __x64_sys_exit_group+0x3f/0x40 [ 37.446872][ T417] x64_sys_call+0x832/0x9a0 [ 37.451419][ T417] do_syscall_64+0x4c/0xa0 [ 37.455968][ T417] ? clear_bhb_loop+0x50/0xa0 [ 37.460679][ T417] ? clear_bhb_loop+0x50/0xa0 [ 37.466136][ T417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.472113][ T417] RIP: 0033:0x7f2ed78c5e59 [ 37.476543][ T417] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 37.484149][ T417] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.492646][ T417] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 37.500624][ T417] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.508637][ T417] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 37.516659][ T417] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 37.524691][ T417] R13: 00000000000927c0 R14: 0000000000009129 R15: 00007ffefa1eedc0 [ 37.532705][ T417] [ 37.535726][ T417] ---[ end trace 2cd116f6e4dca2ab ]--- [ 37.547281][ T418] ------------[ cut here ]------------ [ 37.552883][ T418] WARNING: CPU: 0 PID: 418 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.563092][ T418] Modules linked in: [ 37.567005][ T418] CPU: 0 PID: 418 Comm: syz.2.62 Tainted: G B W syzkaller #0 [ 37.575728][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.585970][ T418] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.592446][ T418] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 37.612156][ T418] RSP: 0018:ffffc90000ab7b90 EFLAGS: 00010293 [ 37.618235][ T418] RAX: ffffffff845dbbf7 RBX: ffff888115df4000 RCX: ffff888115990000 [ 37.626427][ T418] RDX: 0000000000000000 RSI: 000000000f230060 RDI: 000000000c04eb7d [ 37.634454][ T418] RBP: ffffc90000ab7bb0 R08: ffff888115df4083 R09: 1ffff11022bbe810 [ 37.642483][ T418] R10: dffffc0000000000 R11: ffffed1022bbe811 R12: dffffc0000000000 [ 37.650475][ T418] R13: dffffc0000000000 R14: 000000000f230060 R15: ffff88812db9fc00 [ 37.658506][ T418] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.667564][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.674193][ T418] CR2: 00007f2ed79865cc CR3: 000000010d6f6000 CR4: 00000000003506b0 [ 37.682237][ T418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.690239][ T418] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.698281][ T418] Call Trace: [ 37.701586][ T418] [ 37.704580][ T418] pppol2tp_release+0x150/0x2b0 [ 37.709471][ T418] sock_close+0xb8/0x200 [ 37.713753][ T418] ? sock_mmap+0xa0/0xa0 [ 37.718019][ T418] __fput+0x22b/0x900 [ 37.722014][ T418] ____fput+0x15/0x20 [ 37.726068][ T418] task_work_run+0x127/0x190 [ 37.730688][ T418] do_exit+0xb70/0x29a0 [ 37.734927][ T418] ? put_task_struct+0x90/0x90 [ 37.739716][ T418] ? __blkcg_punt_bio_submit+0x170/0x170 [ 37.746044][ T418] do_group_exit+0x149/0x310 [ 37.750675][ T418] __x64_sys_exit_group+0x3f/0x40 [ 37.755760][ T418] x64_sys_call+0x832/0x9a0 [ 37.760344][ T418] do_syscall_64+0x4c/0xa0 [ 37.764823][ T418] ? clear_bhb_loop+0x50/0xa0 [ 37.769524][ T418] ? clear_bhb_loop+0x50/0xa0 [ 37.774247][ T418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.780175][ T418] RIP: 0033:0x7f2ed78c5e59 [ 37.784642][ T418] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 37.792027][ T418] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.800525][ T418] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 37.808547][ T418] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.816563][ T418] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 37.824580][ T418] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002d [ 37.832586][ T418] R13: 00000000000927c0 R14: 000000000000915c R15: 00007ffefa1eedc0 [ 37.840561][ T418] [ 37.843635][ T418] ---[ end trace 2cd116f6e4dca2ac ]--- [ 37.857537][ T419] ------------[ cut here ]------------ [ 37.863053][ T419] WARNING: CPU: 0 PID: 419 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.873127][ T419] Modules linked in: [ 37.877030][ T419] CPU: 0 PID: 419 Comm: syz.2.63 Tainted: G B W syzkaller #0 2026/07/07 01:43:46 executed programs: 48 [ 37.885599][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.895731][ T419] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.902516][ T419] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 37.922182][ T419] RSP: 0018:ffffc90000ab7b90 EFLAGS: 00010293 [ 37.928252][ T419] RAX: ffffffff845dbbf7 RBX: ffff888115a9e000 RCX: ffff8881159962c0 [ 37.936264][ T419] RDX: 0000000000000000 RSI: 000000000afe0a60 RDI: 000000000c04eb7d [ 37.944279][ T419] RBP: ffffc90000ab7bb0 R08: ffff888115a9e083 R09: 1ffff11022b53c10 [ 37.952294][ T419] R10: dffffc0000000000 R11: ffffed1022b53c11 R12: dffffc0000000000 [ 37.960296][ T419] R13: dffffc0000000000 R14: 000000000afe0a60 R15: ffff88812dbc0000 [ 37.968479][ T419] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.977535][ T419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.984732][ T419] CR2: 00002aa447a71000 CR3: 000000010d64f000 CR4: 00000000003506a0 [ 37.992810][ T419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.001253][ T419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.009277][ T419] Call Trace: [ 38.012716][ T419] [ 38.016006][ T419] pppol2tp_release+0x150/0x2b0 [ 38.020866][ T419] sock_close+0xb8/0x200 [ 38.025148][ T419] ? sock_mmap+0xa0/0xa0 [ 38.029866][ T419] __fput+0x22b/0x900 [ 38.033900][ T419] ____fput+0x15/0x20 [ 38.037926][ T419] task_work_run+0x127/0x190 [ 38.042654][ T419] do_exit+0xb70/0x29a0 [ 38.047206][ T419] ? put_task_struct+0x90/0x90 [ 38.051974][ T419] ? __blkcg_punt_bio_submit+0x170/0x170 [ 38.057661][ T419] do_group_exit+0x149/0x310 [ 38.062294][ T419] __x64_sys_exit_group+0x3f/0x40 [ 38.067323][ T419] x64_sys_call+0x832/0x9a0 [ 38.072391][ T419] do_syscall_64+0x4c/0xa0 [ 38.076928][ T419] ? clear_bhb_loop+0x50/0xa0 [ 38.082485][ T419] ? clear_bhb_loop+0x50/0xa0 [ 38.087479][ T419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.093797][ T419] RIP: 0033:0x7f2ed78c5e59 [ 38.098666][ T419] Code: Unable to access opcode bytes at RIP 0x7f2ed78c5e2f. [ 38.106522][ T419] RSP: 002b:00007ffefa1eed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 38.115408][ T419] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed78c5e59 [ 38.123731][ T419] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.132788][ T419] RBP: 00007ffefa1eed6c R08: 0000000000000000 R09: 00000000000927c0 [ 38.141426][ T419] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002e [ 38.151022][ T419] R13: 00000000000927c0 R14: 000000000000929b R15: 00007ffefa1eedc0 [ 38.159583][ T419] [ 38.162664][ T419] ---[ end trace 2cd116f6e4dca2ad ]--- [ 38.180413][ T421] ------------[ cut here ]------------ [ 38.185991][ T421] WARNING: CPU: 1 PID: 421 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.197478][ T421] Modules linked in: [ 38.201528][ T421] CPU: 0 PID: 421 Comm: syz.2.65 Tainted: G B W syzkaller #0 [ 38.210539][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.221965][ T421] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.228441][ T421] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03 [ 38.248258][ T421] RSP: 0018:ffffc90000a97b90 EFLAGS: 00010293 [ 38.255132][ T421] RAX: ffffffff845dbbf7 RBX: ffff888115df3000 RCX: ffff88811580e2c0 [ 38.263589][ T421] RDX: 0000000000000000 RSI: 000000000f230b00 RDI: 000000000c04eb7d [ 38.271605][ T421] RBP: ffffc90000a97bb0 R08: ffff888115df3083 R09: 1ffff11022bbe610 [ 38.279643][ T421] R10: dffffc0000000000 R11: ffffed1022bbe611 R12: dffffc0000000000