Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. 2026/07/22 06:28:57 parsed 1 programs 2026/07/22 06:28:57 serving rpc on tcp://42217 [ 25.510817][ T30] audit: type=1400 audit(1784701737.179:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.531927][ T30] audit: type=1400 audit(1784701737.179:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.499207][ T30] audit: type=1400 audit(1784701738.169:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.502676][ T299] cgroup: Unknown subsys name 'net' [ 26.522212][ T30] audit: type=1400 audit(1784701738.169:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.549369][ T30] audit: type=1400 audit(1784701738.199:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.549829][ T299] cgroup: Unknown subsys name 'devices' [ 26.726325][ T299] cgroup: Unknown subsys name 'hugetlb' [ 26.731969][ T299] cgroup: Unknown subsys name 'rlimit' [ 26.910803][ T30] audit: type=1400 audit(1784701738.579:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.934125][ T30] audit: type=1400 audit(1784701738.579:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.954653][ T30] audit: type=1400 audit(1784701738.579:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.975113][ T30] audit: type=1400 audit(1784701738.579:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.995497][ T30] audit: type=1400 audit(1784701738.589:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.014365][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.069728][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.497725][ T306] request_module fs-gadgetfs succeeded, but still no fs? [ 27.875680][ T324] syz-executor (324) used greatest stack depth: 21984 bytes left [ 28.058472][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.065567][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.073087][ T339] device bridge_slave_0 entered promiscuous mode [ 28.080137][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.087195][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.094663][ T339] device bridge_slave_1 entered promiscuous mode [ 28.137073][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.144155][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.151476][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.158553][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.179609][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.187338][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.195169][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.205283][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.214246][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.221302][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.228801][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.237344][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.244813][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.256944][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.266451][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.280679][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.291903][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.300523][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.308250][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.316905][ T339] device veth0_vlan entered promiscuous mode [ 28.327288][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.336463][ T339] device veth1_macvtap entered promiscuous mode [ 28.346316][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.356300][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.396709][ T339] syz-executor (339) used greatest stack depth: 21504 bytes left 2026/07/22 06:29:00 executed programs: 0 [ 28.837878][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.845556][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.853111][ T368] device bridge_slave_0 entered promiscuous mode [ 28.860454][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.867899][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.875724][ T368] device bridge_slave_1 entered promiscuous mode [ 28.942927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.950641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.962060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.971181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.979709][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.986831][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.995721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.004648][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.013126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.021728][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.028881][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.040855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.050385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.065709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.077770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.085970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.093433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.101908][ T368] device veth0_vlan entered promiscuous mode [ 29.112248][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.121550][ T368] device veth1_macvtap entered promiscuous mode [ 29.131199][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.141644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.173007][ T372] ================================================================== [ 29.181107][ T372] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 29.189202][ T372] Read of size 4 at addr ffff88810fd37000 by task syz.2.17/372 [ 29.196746][ T372] [ 29.199076][ T372] CPU: 1 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.206181][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 29.216536][ T372] Call Trace: [ 29.219822][ T372] [ 29.222751][ T372] __dump_stack+0x21/0x30 [ 29.227123][ T372] dump_stack_lvl+0x110/0x170 [ 29.231814][ T372] ? show_regs_print_info+0x20/0x20 [ 29.237025][ T372] ? load_image+0x3f0/0x3f0 [ 29.241534][ T372] ? __local_bh_enable_ip+0x58/0x80 [ 29.246736][ T372] print_address_description+0x7f/0x2c0 [ 29.252287][ T372] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 29.258010][ T372] kasan_report+0x10f/0x150 [ 29.262515][ T372] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 29.268241][ T372] __asan_report_load4_noabort+0x14/0x20 [ 29.273877][ T372] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 29.279515][ T372] pppol2tp_release+0x150/0x2b0 [ 29.284382][ T372] sock_close+0xb8/0x200 [ 29.288647][ T372] ? sock_mmap+0xa0/0xa0 [ 29.293042][ T372] __fput+0x22b/0x900 [ 29.297093][ T372] ____fput+0x15/0x20 [ 29.301096][ T372] task_work_run+0x127/0x190 [ 29.305731][ T372] exit_to_user_mode_loop+0xd0/0xe0 [ 29.310948][ T372] exit_to_user_mode_prepare+0x87/0xd0 [ 29.316423][ T372] syscall_exit_to_user_mode+0x1a/0x30 [ 29.322287][ T372] do_syscall_64+0x58/0xa0 [ 29.326740][ T372] ? clear_bhb_loop+0x50/0xa0 [ 29.331674][ T372] ? clear_bhb_loop+0x50/0xa0 [ 29.336515][ T372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.342426][ T372] RIP: 0033:0x7f8fdf47be99 [ 29.346846][ T372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.366478][ T372] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.375008][ T372] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 29.383026][ T372] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.391106][ T372] RBP: 00000000000071db R08: 0000000000000001 R09: 0000000000000000 [ 29.399086][ T372] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 29.407066][ T372] R13: 00007f8fdf703fac R14: 000000000000720e R15: 00007f8fdf703fa0 [ 29.415168][ T372] [ 29.418214][ T372] [ 29.420546][ T372] Allocated by task 373: [ 29.424945][ T372] __kasan_kmalloc+0xd4/0x100 [ 29.429638][ T372] __kmalloc+0x13d/0x2c0 [ 29.433892][ T372] l2tp_session_create+0x39/0xb60 [ 29.438932][ T372] pppol2tp_connect+0xbf5/0x1640 [ 29.443901][ T372] __sys_connect+0x3cb/0x450 [ 29.448514][ T372] __x64_sys_connect+0x7a/0x90 [ 29.453300][ T372] x64_sys_call+0x7c/0x9a0 [ 29.457716][ T372] do_syscall_64+0x4c/0xa0 [ 29.462139][ T372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.468042][ T372] [ 29.470367][ T372] Freed by task 311: [ 29.474410][ T372] kasan_set_track+0x4a/0x70 [ 29.479031][ T372] kasan_set_free_info+0x23/0x40 [ 29.484010][ T372] ____kasan_slab_free+0x125/0x160 [ 29.489146][ T372] __kasan_slab_free+0x11/0x20 [ 29.493926][ T372] slab_free_freelist_hook+0xc2/0x190 [ 29.499322][ T372] kfree+0xc4/0x270 [ 29.503142][ T372] l2tp_session_put+0xaf/0x1a0 [ 29.507933][ T372] l2tp_session_delete+0x3a9/0x4a0 [ 29.513073][ T372] l2tp_tunnel_del_work+0x180/0x3d0 [ 29.518299][ T372] process_one_work+0x6c8/0xbb0 [ 29.523184][ T372] worker_thread+0xaa0/0x1250 [ 29.527871][ T372] kthread+0x3f5/0x4f0 [ 29.532062][ T372] ret_from_fork+0x1f/0x30 [ 29.536664][ T372] [ 29.538988][ T372] The buggy address belongs to the object at ffff88810fd37000 [ 29.538988][ T372] which belongs to the cache kmalloc-512 of size 512 [ 29.553231][ T372] The buggy address is located 0 bytes inside of [ 29.553231][ T372] 512-byte region [ffff88810fd37000, ffff88810fd37200) [ 29.566366][ T372] The buggy address belongs to the page: [ 29.572017][ T372] page:ffffea00043f4d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fd34 [ 29.582268][ T372] head:ffffea00043f4d00 order:2 compound_mapcount:0 compound_pincount:0 [ 29.590603][ T372] flags: 0x4000000000010200(slab|head|zone=1) [ 29.596719][ T372] raw: 4000000000010200 ffffea0004406f00 0000000400000004 ffff888100042f00 [ 29.605326][ T372] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 29.613925][ T372] page dumped because: kasan: bad access detected [ 29.620359][ T372] page_owner tracks the page as allocated [ 29.626093][ T372] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 5775964079, free_ts 0 [ 29.644171][ T372] post_alloc_hook+0x192/0x1b0 [ 29.648959][ T372] prep_new_page+0x1c/0x110 [ 29.653474][ T372] get_page_from_freelist+0x2c3a/0x2cd0 [ 29.659030][ T372] __alloc_pages+0x1a2/0x460 [ 29.663632][ T372] new_slab+0xa0/0x4d0 [ 29.667711][ T372] ___slab_alloc+0x3ac/0x840 [ 29.672333][ T372] __slab_alloc+0x49/0x90 [ 29.676675][ T372] __kmalloc_track_caller+0x169/0x2c0 [ 29.682061][ T372] __alloc_skb+0x210/0x730 [ 29.686492][ T372] alloc_uevent_skb+0x85/0x240 [ 29.691275][ T372] kobject_uevent_net_broadcast+0x335/0x5a0 [ 29.697187][ T372] kobject_uevent_env+0x52b/0x700 [ 29.702231][ T372] kobject_synth_uevent+0x457/0x940 [ 29.707457][ T372] store_uevent+0x16/0x30 [ 29.711828][ T372] module_attr_store+0x5f/0x80 [ 29.716610][ T372] sysfs_kf_write+0x129/0x150 [ 29.721493][ T372] page_owner free stack trace missing [ 29.726880][ T372] [ 29.729242][ T372] Memory state around the buggy address: [ 29.734887][ T372] ffff88810fd36f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.742962][ T372] ffff88810fd36f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.751034][ T372] >ffff88810fd37000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.759106][ T372] ^ [ 29.763190][ T372] ffff88810fd37080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.771287][ T372] ffff88810fd37100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.779368][ T372] ================================================================== [ 29.787494][ T372] Disabling lock debugging due to kernel taint [ 29.797717][ T372] ------------[ cut here ]------------ [ 29.803293][ T372] WARNING: CPU: 0 PID: 372 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.815526][ T372] Modules linked in: [ 29.819507][ T372] CPU: 0 PID: 372 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 29.829269][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 29.839843][ T372] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.846267][ T372] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 29.866128][ T372] RSP: 0018:ffffc90004007d10 EFLAGS: 00010293 [ 29.872285][ T372] RAX: ffffffff845e1247 RBX: ffff8881111bf000 RCX: ffff8881103ea780 [ 29.881449][ T372] RDX: 0000000000000000 RSI: 0000000005fe92a0 RDI: 000000000c04eb7d [ 29.889547][ T372] RBP: ffffc90004007d30 R08: 0000000000000003 R09: 0000000000000004 [ 29.897581][ T372] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: dffffc0000000000 [ 29.905669][ T372] R13: dffffc0000000000 R14: 0000000005fe92a0 R15: ffff88810fd37000 [ 29.913764][ T372] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.922835][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.929630][ T372] CR2: 0000000000000000 CR3: 0000000128ed2000 CR4: 00000000003506b0 [ 29.937856][ T372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.946356][ T372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.954468][ T372] Call Trace: [ 29.957852][ T372] [ 29.960879][ T372] pppol2tp_release+0x150/0x2b0 [ 29.967073][ T372] sock_close+0xb8/0x200 [ 29.971395][ T372] ? sock_mmap+0xa0/0xa0 [ 29.975966][ T372] __fput+0x22b/0x900 [ 29.980034][ T372] ____fput+0x15/0x20 [ 29.984182][ T372] task_work_run+0x127/0x190 [ 29.988803][ T372] exit_to_user_mode_loop+0xd0/0xe0 [ 29.994078][ T372] exit_to_user_mode_prepare+0x87/0xd0 [ 29.999568][ T372] syscall_exit_to_user_mode+0x1a/0x30 [ 30.005097][ T372] do_syscall_64+0x58/0xa0 [ 30.009556][ T372] ? clear_bhb_loop+0x50/0xa0 [ 30.014575][ T372] ? clear_bhb_loop+0x50/0xa0 [ 30.019330][ T372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.025296][ T372] RIP: 0033:0x7f8fdf47be99 [ 30.029738][ T372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.049587][ T372] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.058249][ T372] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 30.066344][ T372] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.074420][ T372] RBP: 00000000000071db R08: 0000000000000001 R09: 0000000000000000 [ 30.082463][ T372] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 30.090511][ T372] R13: 00007f8fdf703fac R14: 000000000000720e R15: 00007f8fdf703fa0 [ 30.099755][ T372] [ 30.102819][ T372] ---[ end trace 0694b3926eacea68 ]--- [ 30.120103][ T374] ------------[ cut here ]------------ [ 30.125671][ T374] WARNING: CPU: 0 PID: 374 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.135881][ T374] Modules linked in: [ 30.139808][ T374] CPU: 1 PID: 374 Comm: syz.2.18 Tainted: G B W syzkaller #0 [ 30.149119][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 30.160298][ T374] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.166876][ T374] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 30.191941][ T374] RSP: 0018:ffffc90004027d10 EFLAGS: 00010293 [ 30.198399][ T374] RAX: ffffffff845e1247 RBX: ffff888111c7d000 RCX: ffff888111220000 [ 30.206797][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 30.214849][ T374] RBP: ffffc90004027d30 R08: ffff888111c7d083 R09: 1ffff1102238fa10 [ 30.222973][ T374] R10: dffffc0000000000 R11: ffffed102238fa11 R12: dffffc0000000000 [ 30.231100][ T374] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881228ddc00 [ 30.239504][ T374] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.248665][ T374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.255767][ T374] CR2: 0000200000000240 CR3: 000000012bf40000 CR4: 00000000003506b0 [ 30.264382][ T374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.272439][ T374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.280700][ T374] Call Trace: [ 30.284408][ T374] [ 30.287408][ T374] pppol2tp_release+0x150/0x2b0 [ 30.292290][ T374] sock_close+0xb8/0x200 [ 30.296626][ T374] ? sock_mmap+0xa0/0xa0 [ 30.300892][ T374] __fput+0x22b/0x900 [ 30.304982][ T374] ____fput+0x15/0x20 [ 30.308999][ T374] task_work_run+0x127/0x190 [ 30.313727][ T374] exit_to_user_mode_loop+0xd0/0xe0 [ 30.319027][ T374] exit_to_user_mode_prepare+0x87/0xd0 [ 30.324710][ T374] syscall_exit_to_user_mode+0x1a/0x30 [ 30.330268][ T374] do_syscall_64+0x58/0xa0 [ 30.335009][ T374] ? clear_bhb_loop+0x50/0xa0 [ 30.339729][ T374] ? clear_bhb_loop+0x50/0xa0 [ 30.344503][ T374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.350463][ T374] RIP: 0033:0x7f8fdf47be99 [ 30.354987][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.374682][ T374] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.383162][ T374] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 30.391275][ T374] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.399313][ T374] RBP: 000000000000758f R08: 0000000000000001 R09: 0000000000000000 [ 30.407837][ T374] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 30.416393][ T374] R13: 00007f8fdf703fac R14: 00000000000075c1 R15: 00007f8fdf703fa0 [ 30.424474][ T374] [ 30.427587][ T374] ---[ end trace 0694b3926eacea69 ]--- [ 30.443413][ T376] ------------[ cut here ]------------ [ 30.449231][ T376] WARNING: CPU: 0 PID: 376 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.459443][ T376] Modules linked in: [ 30.463382][ T376] CPU: 0 PID: 376 Comm: syz.2.19 Tainted: G B W syzkaller #0 [ 30.472153][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 30.482582][ T376] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.489197][ T376] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 30.509665][ T376] RSP: 0018:ffffc90004027d10 EFLAGS: 00010293 [ 30.515877][ T376] RAX: ffffffff845e1247 RBX: ffff888111e8d000 RCX: ffff888111224f00 [ 30.523908][ T376] RDX: 0000000000000000 RSI: 000000000b0ff0a0 RDI: 000000000c04eb7d [ 30.524754][ T45] device bridge_slave_1 left promiscuous mode [ 30.532350][ T376] RBP: ffffc90004027d30 R08: ffff888111e8d083 R09: 1ffff110223d1a10 [ 30.539429][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.547053][ T376] R10: dffffc0000000000 R11: ffffed10223d1a11 R12: dffffc0000000000 [ 30.561625][ T376] R13: dffffc0000000000 R14: 000000000b0ff0a0 R15: ffff8881115d5c00 [ 30.562154][ T45] device bridge_slave_0 left promiscuous mode [ 30.570492][ T376] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.585559][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.592189][ T376] CR2: 0000000000000000 CR3: 00000001108ff000 CR4: 00000000003506b0 [ 30.594379][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.600366][ T376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.615785][ T376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.624185][ T376] Call Trace: [ 30.627759][ T376] [ 30.627963][ T45] device veth1_macvtap left promiscuous mode [ 30.630941][ T376] pppol2tp_release+0x150/0x2b0 [ 30.630971][ T376] sock_close+0xb8/0x200 [ 30.630989][ T376] ? sock_mmap+0xa0/0xa0 [ 30.637425][ T45] device veth0_vlan left promiscuous mode [ 30.642689][ T376] __fput+0x22b/0x900 [ 30.660498][ T376] ____fput+0x15/0x20 [ 30.667529][ T376] task_work_run+0x127/0x190 [ 30.672178][ T376] exit_to_user_mode_loop+0xd0/0xe0 [ 30.677512][ T376] exit_to_user_mode_prepare+0x87/0xd0 [ 30.683247][ T376] syscall_exit_to_user_mode+0x1a/0x30 [ 30.688834][ T376] do_syscall_64+0x58/0xa0 [ 30.693399][ T376] ? clear_bhb_loop+0x50/0xa0 [ 30.698207][ T376] ? clear_bhb_loop+0x50/0xa0 [ 30.703025][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.709051][ T376] RIP: 0033:0x7f8fdf47be99 [ 30.713598][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.733406][ T376] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.742069][ T376] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 30.750190][ T376] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.758224][ T376] RBP: 00000000000076d2 R08: 0000000000000001 R09: 0000000000000000 [ 30.766304][ T376] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 30.774341][ T376] R13: 00007f8fdf703fac R14: 0000000000007705 R15: 00007f8fdf703fa0 [ 30.782419][ T376] [ 30.785628][ T376] ---[ end trace 0694b3926eacea6a ]--- [ 30.797411][ T378] ------------[ cut here ]------------ [ 30.803068][ T378] WARNING: CPU: 1 PID: 378 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.813240][ T378] Modules linked in: [ 30.824334][ T378] CPU: 1 PID: 378 Comm: syz.2.20 Tainted: G B W syzkaller #0 [ 30.832971][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 30.843382][ T378] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.849851][ T378] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 30.869550][ T378] RSP: 0018:ffffc90004017d10 EFLAGS: 00010293 [ 30.876025][ T378] RAX: ffffffff845e1247 RBX: ffff8881120e6000 RCX: ffff8881112262c0 [ 30.884123][ T378] RDX: 0000000000000000 RSI: 0000000011eb83e0 RDI: 000000000c04eb7d [ 30.892170][ T378] RBP: ffffc90004017d30 R08: ffff8881120e6083 R09: 1ffff1102241cc10 [ 30.900448][ T378] R10: dffffc0000000000 R11: ffffed102241cc11 R12: dffffc0000000000 [ 30.908577][ T378] R13: dffffc0000000000 R14: 0000000011eb83e0 R15: ffff88810fd44400 [ 30.916655][ T378] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.926094][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.932771][ T378] CR2: 0000000000000000 CR3: 00000001108ff000 CR4: 00000000003506b0 [ 30.940850][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.948891][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.956959][ T378] Call Trace: [ 30.960267][ T378] [ 30.963227][ T378] pppol2tp_release+0x150/0x2b0 [ 30.968408][ T378] sock_close+0xb8/0x200 [ 30.972701][ T378] ? sock_mmap+0xa0/0xa0 [ 30.977171][ T378] __fput+0x22b/0x900 [ 30.981189][ T378] ____fput+0x15/0x20 [ 30.985326][ T378] task_work_run+0x127/0x190 [ 30.989943][ T378] exit_to_user_mode_loop+0xd0/0xe0 [ 30.995455][ T378] exit_to_user_mode_prepare+0x87/0xd0 [ 31.001024][ T378] syscall_exit_to_user_mode+0x1a/0x30 [ 31.006755][ T378] do_syscall_64+0x58/0xa0 [ 31.011234][ T378] ? clear_bhb_loop+0x50/0xa0 [ 31.015989][ T378] ? clear_bhb_loop+0x50/0xa0 [ 31.020705][ T378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.026709][ T378] RIP: 0033:0x7f8fdf47be99 [ 31.031167][ T378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.051149][ T378] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.059806][ T378] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 31.068035][ T378] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.076101][ T378] RBP: 0000000000007834 R08: 0000000000000001 R09: 0000000000000000 [ 31.084266][ T378] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 31.092271][ T378] R13: 00007f8fdf703fac R14: 0000000000007867 R15: 00007f8fdf703fa0 [ 31.100466][ T378] [ 31.103502][ T378] ---[ end trace 0694b3926eacea6b ]--- [ 31.119148][ T382] ------------[ cut here ]------------ [ 31.124697][ T382] WARNING: CPU: 0 PID: 382 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.136241][ T382] Modules linked in: [ 31.140183][ T382] CPU: 0 PID: 382 Comm: syz.2.22 Tainted: G B W syzkaller #0 [ 31.148804][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 31.159482][ T382] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.167419][ T382] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 31.187676][ T382] RSP: 0018:ffffc90004017d10 EFLAGS: 00010293 [ 31.193787][ T382] RAX: ffffffff845e1247 RBX: ffff888112c0e000 RCX: ffff888111e08000 [ 31.202059][ T382] RDX: 0000000000000000 RSI: 000000000b0ffd20 RDI: 000000000c04eb7d [ 31.210277][ T382] RBP: ffffc90004017d30 R08: ffff888112c0e083 R09: 1ffff11022581c10 [ 31.218645][ T382] R10: dffffc0000000000 R11: ffffed1022581c11 R12: dffffc0000000000 [ 31.227067][ T382] R13: dffffc0000000000 R14: 000000000b0ffd20 R15: ffff88812191c000 [ 31.235276][ T382] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.244682][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.251329][ T382] CR2: 0000177b6fa56000 CR3: 0000000128f22000 CR4: 00000000003506a0 [ 31.259580][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.267861][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.275912][ T382] Call Trace: [ 31.279319][ T382] [ 31.282311][ T382] pppol2tp_release+0x150/0x2b0 [ 31.287479][ T382] sock_close+0xb8/0x200 [ 31.291760][ T382] ? sock_mmap+0xa0/0xa0 [ 31.296079][ T382] __fput+0x22b/0x900 [ 31.300175][ T382] ____fput+0x15/0x20 [ 31.304223][ T382] task_work_run+0x127/0x190 [ 31.308839][ T382] exit_to_user_mode_loop+0xd0/0xe0 [ 31.314075][ T382] exit_to_user_mode_prepare+0x87/0xd0 [ 31.319553][ T382] syscall_exit_to_user_mode+0x1a/0x30 [ 31.325284][ T382] do_syscall_64+0x58/0xa0 [ 31.329729][ T382] ? clear_bhb_loop+0x50/0xa0 [ 31.334490][ T382] ? clear_bhb_loop+0x50/0xa0 [ 31.339275][ T382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.345230][ T382] RIP: 0033:0x7f8fdf47be99 [ 31.349669][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.369574][ T382] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.378208][ T382] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 31.386251][ T382] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.394267][ T382] RBP: 0000000000007976 R08: 0000000000000001 R09: 0000000000000000 [ 31.402264][ T382] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 31.410535][ T382] R13: 00007f8fdf703fac R14: 00000000000079a8 R15: 00007f8fdf703fa0 [ 31.418646][ T382] [ 31.421689][ T382] ---[ end trace 0694b3926eacea6c ]--- [ 31.435113][ T384] ------------[ cut here ]------------ [ 31.440623][ T384] WARNING: CPU: 1 PID: 384 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.450799][ T384] Modules linked in: [ 31.454729][ T384] CPU: 1 PID: 384 Comm: syz.2.23 Tainted: G B W syzkaller #0 [ 31.463255][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 31.473418][ T384] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.479831][ T384] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 31.499679][ T384] RSP: 0018:ffffc90004017d10 EFLAGS: 00010293 [ 31.506046][ T384] RAX: ffffffff845e1247 RBX: ffff888112563000 RCX: ffff888111e0e2c0 [ 31.514166][ T384] RDX: 0000000000000000 RSI: 0000000011eb8400 RDI: 000000000c04eb7d [ 31.522158][ T384] RBP: ffffc90004017d30 R08: ffff888112563083 R09: 1ffff110224ac610 [ 31.530207][ T384] R10: dffffc0000000000 R11: ffffed10224ac611 R12: dffffc0000000000 [ 31.538241][ T384] R13: dffffc0000000000 R14: 0000000011eb8400 R15: ffff888121b1e000 [ 31.546281][ T384] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.555372][ T384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.561972][ T384] CR2: 0000177b6fa57000 CR3: 0000000128f22000 CR4: 00000000003506b0 [ 31.570002][ T384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.578034][ T384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.586542][ T384] Call Trace: [ 31.589837][ T384] [ 31.592769][ T384] pppol2tp_release+0x150/0x2b0 [ 31.597698][ T384] sock_close+0xb8/0x200 [ 31.601961][ T384] ? sock_mmap+0xa0/0xa0 [ 31.606280][ T384] __fput+0x22b/0x900 [ 31.610293][ T384] ____fput+0x15/0x20 [ 31.614643][ T384] task_work_run+0x127/0x190 [ 31.619348][ T384] exit_to_user_mode_loop+0xd0/0xe0 [ 31.624858][ T384] exit_to_user_mode_prepare+0x87/0xd0 [ 31.630408][ T384] syscall_exit_to_user_mode+0x1a/0x30 [ 31.635951][ T384] do_syscall_64+0x58/0xa0 [ 31.640389][ T384] ? clear_bhb_loop+0x50/0xa0 [ 31.645134][ T384] ? clear_bhb_loop+0x50/0xa0 [ 31.649842][ T384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.656040][ T384] RIP: 0033:0x7f8fdf47be99 [ 31.660490][ T384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.680185][ T384] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.688767][ T384] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 31.696814][ T384] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.704819][ T384] RBP: 0000000000007ab2 R08: 0000000000000001 R09: 0000000000000000 [ 31.712797][ T384] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 31.720855][ T384] R13: 00007f8fdf703fac R14: 0000000000007ae4 R15: 00007f8fdf703fa0 [ 31.728870][ T384] [ 31.731906][ T384] ---[ end trace 0694b3926eacea6d ]--- [ 31.748461][ T388] ------------[ cut here ]------------ [ 31.754086][ T388] WARNING: CPU: 0 PID: 388 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.764585][ T388] Modules linked in: [ 31.768514][ T388] CPU: 1 PID: 388 Comm: syz.2.25 Tainted: G B W syzkaller #0 [ 31.777482][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 31.787793][ T388] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.794373][ T388] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 31.814051][ T388] RSP: 0018:ffffc90004047d10 EFLAGS: 00010293 [ 31.820151][ T388] RAX: ffffffff845e1247 RBX: ffff888113442000 RCX: ffff8881134e13c0 [ 31.828296][ T388] RDX: 0000000000000000 RSI: 000000000add7e40 RDI: 000000000c04eb7d [ 31.836311][ T388] RBP: ffffc90004047d30 R08: ffff888113442083 R09: 1ffff11022688410 [ 31.844364][ T388] R10: dffffc0000000000 R11: ffffed1022688411 R12: dffffc0000000000 [ 31.852361][ T388] R13: dffffc0000000000 R14: 000000000add7e40 R15: ffff8881213fbc00 [ 31.860422][ T388] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.869770][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.876428][ T388] CR2: 0000000000000000 CR3: 0000000128f2f000 CR4: 00000000003506a0 [ 31.884440][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.892424][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.900446][ T388] Call Trace: [ 31.903758][ T388] [ 31.906984][ T388] pppol2tp_release+0x150/0x2b0 [ 31.911863][ T388] sock_close+0xb8/0x200 [ 31.916158][ T388] ? sock_mmap+0xa0/0xa0 [ 31.920427][ T388] __fput+0x22b/0x900 [ 31.924453][ T388] ____fput+0x15/0x20 [ 31.928464][ T388] task_work_run+0x127/0x190 [ 31.933094][ T388] exit_to_user_mode_loop+0xd0/0xe0 [ 31.938481][ T388] exit_to_user_mode_prepare+0x87/0xd0 [ 31.944047][ T388] syscall_exit_to_user_mode+0x1a/0x30 [ 31.949533][ T388] do_syscall_64+0x58/0xa0 [ 31.954036][ T388] ? clear_bhb_loop+0x50/0xa0 [ 31.958765][ T388] ? clear_bhb_loop+0x50/0xa0 [ 31.963448][ T388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.969386][ T388] RIP: 0033:0x7f8fdf47be99 [ 31.973821][ T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.993491][ T388] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.002144][ T388] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 32.010166][ T388] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.018185][ T388] RBP: 0000000000007beb R08: 0000000000000001 R09: 0000000000000000 [ 32.026223][ T388] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 32.034283][ T388] R13: 00007f8fdf703fac R14: 0000000000007c1e R15: 00007f8fdf703fa0 [ 32.042268][ T388] [ 32.045358][ T388] ---[ end trace 0694b3926eacea6e ]--- [ 32.097615][ T394] ------------[ cut here ]------------ [ 32.103101][ T394] WARNING: CPU: 0 PID: 394 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.113287][ T394] Modules linked in: [ 32.117225][ T394] CPU: 0 PID: 394 Comm: syz.2.28 Tainted: G B W syzkaller #0 [ 32.126030][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 32.136174][ T394] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.142536][ T394] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 32.162378][ T394] RSP: 0018:ffffc90004017d10 EFLAGS: 00010293 [ 32.168593][ T394] RAX: ffffffff845e1247 RBX: ffff888113618000 RCX: ffff888113a2cf00 [ 32.176777][ T394] RDX: 0000000000000000 RSI: 00000000063946c0 RDI: 000000000c04eb7d [ 32.184859][ T394] RBP: ffffc90004017d30 R08: ffff888113618083 R09: 1ffff110226c3010 [ 32.192870][ T394] R10: dffffc0000000000 R11: ffffed10226c3011 R12: dffffc0000000000 [ 32.201151][ T394] R13: dffffc0000000000 R14: 00000000063946c0 R15: ffff888120870000 [ 32.209175][ T394] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.218147][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.224774][ T394] CR2: 0000000000000000 CR3: 0000000128f2f000 CR4: 00000000003506a0 [ 32.233220][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.241254][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.249321][ T394] Call Trace: [ 32.252618][ T394] [ 32.255772][ T394] pppol2tp_release+0x150/0x2b0 [ 32.260661][ T394] sock_close+0xb8/0x200 [ 32.264953][ T394] ? sock_mmap+0xa0/0xa0 [ 32.269216][ T394] __fput+0x22b/0x900 [ 32.273202][ T394] ____fput+0x15/0x20 [ 32.277219][ T394] task_work_run+0x127/0x190 [ 32.281838][ T394] exit_to_user_mode_loop+0xd0/0xe0 [ 32.287094][ T394] exit_to_user_mode_prepare+0x87/0xd0 [ 32.292578][ T394] syscall_exit_to_user_mode+0x1a/0x30 [ 32.298424][ T394] do_syscall_64+0x58/0xa0 [ 32.302995][ T394] ? clear_bhb_loop+0x50/0xa0 [ 32.307749][ T394] ? clear_bhb_loop+0x50/0xa0 [ 32.312455][ T394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.318421][ T394] RIP: 0033:0x7f8fdf47be99 [ 32.322951][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.342629][ T394] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.351083][ T394] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 32.359134][ T394] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.367593][ T394] RBP: 0000000000007d48 R08: 0000000000000001 R09: 0000000000000000 [ 32.375654][ T394] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 32.383653][ T394] R13: 00007f8fdf703fac R14: 0000000000007d7b R15: 00007f8fdf703fa0 [ 32.391706][ T394] [ 32.394787][ T394] ---[ end trace 0694b3926eacea6f ]--- [ 32.405818][ T396] ------------[ cut here ]------------ [ 32.411322][ T396] WARNING: CPU: 1 PID: 396 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.421530][ T396] Modules linked in: [ 32.425554][ T396] CPU: 1 PID: 396 Comm: syz.2.29 Tainted: G B W syzkaller #0 [ 32.434095][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 32.444455][ T396] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.450834][ T396] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 32.470521][ T396] RSP: 0018:ffffc90004017d10 EFLAGS: 00010293 [ 32.476750][ T396] RAX: ffffffff845e1247 RBX: ffff88811361c000 RCX: ffff888113a2e2c0 [ 32.484776][ T396] RDX: 0000000000000000 RSI: 0000000006394180 RDI: 000000000c04eb7d [ 32.492780][ T396] RBP: ffffc90004017d30 R08: ffff88811361c083 R09: 1ffff110226c3810 [ 32.500847][ T396] R10: dffffc0000000000 R11: ffffed10226c3811 R12: dffffc0000000000 [ 32.508864][ T396] R13: dffffc0000000000 R14: 0000000006394180 R15: ffff8881115e7000 [ 32.516910][ T396] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.525911][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.532510][ T396] CR2: 0000000000000000 CR3: 0000000128f2e000 CR4: 00000000003506a0 [ 32.540742][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.548887][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.557155][ T396] Call Trace: [ 32.560449][ T396] [ 32.563376][ T396] pppol2tp_release+0x150/0x2b0 [ 32.568279][ T396] sock_close+0xb8/0x200 [ 32.572545][ T396] ? sock_mmap+0xa0/0xa0 [ 32.576899][ T396] __fput+0x22b/0x900 [ 32.580924][ T396] ____fput+0x15/0x20 [ 32.584969][ T396] task_work_run+0x127/0x190 [ 32.589594][ T396] exit_to_user_mode_loop+0xd0/0xe0 [ 32.594839][ T396] exit_to_user_mode_prepare+0x87/0xd0 [ 32.600327][ T396] syscall_exit_to_user_mode+0x1a/0x30 [ 32.605820][ T396] do_syscall_64+0x58/0xa0 [ 32.610308][ T396] ? clear_bhb_loop+0x50/0xa0 [ 32.615035][ T396] ? clear_bhb_loop+0x50/0xa0 [ 32.619751][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.625724][ T396] RIP: 0033:0x7f8fdf47be99 [ 32.630177][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.650090][ T396] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.658548][ T396] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 32.666595][ T396] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.674616][ T396] RBP: 0000000000007e7c R08: 0000000000000001 R09: 0000000000000000 [ 32.682592][ T396] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 32.690725][ T396] R13: 00007f8fdf703fac R14: 0000000000007eaf R15: 00007f8fdf703fa0 [ 32.698910][ T396] [ 32.701934][ T396] ---[ end trace 0694b3926eacea70 ]--- [ 32.752327][ T400] ------------[ cut here ]------------ [ 32.758028][ T400] WARNING: CPU: 0 PID: 400 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.768523][ T400] Modules linked in: [ 32.772458][ T400] CPU: 0 PID: 400 Comm: syz.2.31 Tainted: G B W syzkaller #0 [ 32.781036][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 32.791178][ T400] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.797646][ T400] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 32.817454][ T400] RSP: 0018:ffffc90000ac7d10 EFLAGS: 00010293 [ 32.823660][ T400] RAX: ffffffff845e1247 RBX: ffff888113444000 RCX: ffff8881134e2780 [ 32.831736][ T400] RDX: 0000000000000000 RSI: 000000000ab13500 RDI: 000000000c04eb7d [ 32.839767][ T400] RBP: ffffc90000ac7d30 R08: ffff888113444083 R09: 1ffff11022688810 [ 32.847818][ T400] R10: dffffc0000000000 R11: ffffed1022688811 R12: dffffc0000000000 [ 32.855946][ T400] R13: dffffc0000000000 R14: 000000000ab13500 R15: ffff888121244800 [ 32.863924][ T400] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.872926][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.879588][ T400] CR2: 0000000000000000 CR3: 0000000128ea9000 CR4: 00000000003506b0 [ 32.887599][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.896147][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.904238][ T400] Call Trace: [ 32.907537][ T400] [ 32.910493][ T400] pppol2tp_release+0x150/0x2b0 [ 32.915398][ T400] sock_close+0xb8/0x200 [ 32.919663][ T400] ? sock_mmap+0xa0/0xa0 [ 32.923916][ T400] __fput+0x22b/0x900 [ 32.928031][ T400] ____fput+0x15/0x20 [ 32.932056][ T400] task_work_run+0x127/0x190 [ 32.936752][ T400] exit_to_user_mode_loop+0xd0/0xe0 [ 32.942001][ T400] exit_to_user_mode_prepare+0x87/0xd0 [ 32.947539][ T400] syscall_exit_to_user_mode+0x1a/0x30 [ 32.953040][ T400] do_syscall_64+0x58/0xa0 [ 32.957720][ T400] ? clear_bhb_loop+0x50/0xa0 [ 32.962508][ T400] ? clear_bhb_loop+0x50/0xa0 [ 32.967239][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.973154][ T400] RIP: 0033:0x7f8fdf47be99 [ 32.977792][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.997601][ T400] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.006081][ T400] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 33.014386][ T400] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.022395][ T400] RBP: 0000000000007fd7 R08: 0000000000000001 R09: 0000000000000000 [ 33.030494][ T400] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 33.038527][ T400] R13: 00007f8fdf703fac R14: 000000000000800a R15: 00007f8fdf703fa0 [ 33.046582][ T400] [ 33.049622][ T400] ---[ end trace 0694b3926eacea71 ]--- [ 33.067964][ T404] ------------[ cut here ]------------ [ 33.073663][ T404] WARNING: CPU: 0 PID: 404 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.083721][ T404] Modules linked in: [ 33.087677][ T404] CPU: 0 PID: 404 Comm: syz.2.33 Tainted: G B W syzkaller #0 [ 33.096384][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 33.106642][ T404] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.112982][ T404] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 33.132823][ T404] RSP: 0018:ffffc90004057d10 EFLAGS: 00010293 [ 33.138956][ T404] RAX: ffffffff845e1247 RBX: ffff888113b97000 RCX: ffff8881100e62c0 [ 33.147124][ T404] RDX: 0000000000000000 RSI: 000000000ab132e0 RDI: 000000000c04eb7d [ 33.155263][ T404] RBP: ffffc90004057d30 R08: ffff888113b97083 R09: 1ffff11022772e10 [ 33.163263][ T404] R10: dffffc0000000000 R11: ffffed1022772e11 R12: dffffc0000000000 [ 33.171307][ T404] R13: dffffc0000000000 R14: 000000000ab132e0 R15: ffff888121245800 [ 33.179494][ T404] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.188470][ T404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.195292][ T404] CR2: 0000000000000000 CR3: 000000010f82e000 CR4: 00000000003506b0 [ 33.203287][ T404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.211704][ T404] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.220621][ T404] Call Trace: [ 33.223914][ T404] [ 33.226967][ T404] pppol2tp_release+0x150/0x2b0 [ 33.232345][ T404] sock_close+0xb8/0x200 [ 33.236704][ T404] ? sock_mmap+0xa0/0xa0 [ 33.240979][ T404] __fput+0x22b/0x900 [ 33.245024][ T404] ____fput+0x15/0x20 [ 33.249160][ T404] task_work_run+0x127/0x190 [ 33.253757][ T404] exit_to_user_mode_loop+0xd0/0xe0 [ 33.259027][ T404] exit_to_user_mode_prepare+0x87/0xd0 [ 33.264658][ T404] syscall_exit_to_user_mode+0x1a/0x30 [ 33.270125][ T404] do_syscall_64+0x58/0xa0 [ 33.274587][ T404] ? clear_bhb_loop+0x50/0xa0 [ 33.279288][ T404] ? clear_bhb_loop+0x50/0xa0 [ 33.284060][ T404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.290004][ T404] RIP: 0033:0x7f8fdf47be99 [ 33.294587][ T404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.314857][ T404] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.323386][ T404] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 33.331554][ T404] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.339641][ T404] RBP: 0000000000008112 R08: 0000000000000001 R09: 0000000000000000 [ 33.348044][ T404] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 33.356072][ T404] R13: 00007f8fdf703fac R14: 0000000000008145 R15: 00007f8fdf703fa0 [ 33.364100][ T404] [ 33.367217][ T404] ---[ end trace 0694b3926eacea72 ]--- [ 33.385328][ T408] ------------[ cut here ]------------ [ 33.390978][ T408] WARNING: CPU: 1 PID: 408 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.401101][ T408] Modules linked in: [ 33.405121][ T408] CPU: 0 PID: 408 Comm: syz.2.35 Tainted: G B W syzkaller #0 [ 33.413870][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 33.424564][ T408] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.432190][ T408] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 33.452201][ T408] RSP: 0018:ffffc90000ac7d10 EFLAGS: 00010293 [ 33.458377][ T408] RAX: ffffffff845e1247 RBX: ffff8881141b7000 RCX: ffff8881134c3b40 [ 33.466477][ T408] RDX: 0000000000000000 RSI: 00000000065923a0 RDI: 000000000c04eb7d [ 33.474677][ T408] RBP: ffffc90000ac7d30 R08: ffff8881141b7083 R09: 1ffff11022836e10 [ 33.482781][ T408] R10: dffffc0000000000 R11: ffffed1022836e11 R12: dffffc0000000000 [ 33.491123][ T408] R13: dffffc0000000000 R14: 00000000065923a0 R15: ffff88812206bc00 [ 33.499166][ T408] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.508529][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.515251][ T408] CR2: 0000000000000000 CR3: 0000000128e96000 CR4: 00000000003506b0 [ 33.523238][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.531475][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.539620][ T408] Call Trace: [ 33.543048][ T408] [ 33.546598][ T408] pppol2tp_release+0x150/0x2b0 [ 33.551729][ T408] sock_close+0xb8/0x200 [ 33.556288][ T408] ? sock_mmap+0xa0/0xa0 [ 33.560584][ T408] __fput+0x22b/0x900 [ 33.564665][ T408] ____fput+0x15/0x20 [ 33.568700][ T408] task_work_run+0x127/0x190 [ 33.573320][ T408] exit_to_user_mode_loop+0xd0/0xe0 [ 33.578836][ T408] exit_to_user_mode_prepare+0x87/0xd0 [ 33.584367][ T408] syscall_exit_to_user_mode+0x1a/0x30 [ 33.589834][ T408] do_syscall_64+0x58/0xa0 [ 33.594300][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.599018][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.603723][ T408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.609716][ T408] RIP: 0033:0x7f8fdf47be99 [ 33.614175][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.634073][ T408] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.642643][ T408] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 33.650701][ T408] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.658922][ T408] RBP: 0000000000008250 R08: 0000000000000001 R09: 0000000000000000 [ 33.666960][ T408] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 33.674975][ T408] R13: 00007f8fdf703fac R14: 0000000000008282 R15: 00007f8fdf703fa0 [ 33.683087][ T408] [ 33.686173][ T408] ---[ end trace 0694b3926eacea73 ]--- [ 33.737438][ T414] ------------[ cut here ]------------ [ 33.742922][ T414] WARNING: CPU: 1 PID: 414 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.753103][ T414] Modules linked in: [ 33.757039][ T414] CPU: 1 PID: 414 Comm: syz.2.38 Tainted: G B W syzkaller #0 [ 33.765618][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 33.775971][ T414] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.782410][ T414] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 33.802318][ T414] RSP: 0018:ffffc90004057d10 EFLAGS: 00010293 [ 33.808486][ T414] RAX: ffffffff845e1247 RBX: ffff888113b95000 RCX: ffff8881140293c0 [ 33.816512][ T414] RDX: 0000000000000000 RSI: 000000000ab136c0 RDI: 000000000c04eb7d [ 33.824725][ T414] RBP: ffffc90004057d30 R08: ffff888113b95083 R09: 1ffff11022772a10 [ 33.832744][ T414] R10: dffffc0000000000 R11: ffffed1022772a11 R12: dffffc0000000000 [ 33.841095][ T414] R13: dffffc0000000000 R14: 000000000ab136c0 R15: ffff8881115fa400 [ 33.849122][ T414] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.858589][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.865235][ T414] CR2: 0000200000000240 CR3: 0000000129040000 CR4: 00000000003506a0 [ 33.873248][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.881272][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.889303][ T414] Call Trace: [ 33.892585][ T414] [ 33.895633][ T414] pppol2tp_release+0x150/0x2b0 [ 33.900520][ T414] sock_close+0xb8/0x200 [ 33.904885][ T414] ? sock_mmap+0xa0/0xa0 [ 33.909153][ T414] __fput+0x22b/0x900 [ 33.913141][ T414] ____fput+0x15/0x20 [ 33.917175][ T414] task_work_run+0x127/0x190 [ 33.921788][ T414] exit_to_user_mode_loop+0xd0/0xe0 [ 33.927199][ T414] exit_to_user_mode_prepare+0x87/0xd0 [ 33.932691][ T414] syscall_exit_to_user_mode+0x1a/0x30 [ 33.938227][ T414] do_syscall_64+0x58/0xa0 [ 33.942692][ T414] ? clear_bhb_loop+0x50/0xa0 [ 33.947464][ T414] ? clear_bhb_loop+0x50/0xa0 [ 33.952202][ T414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.958170][ T414] RIP: 0033:0x7f8fdf47be99 [ 33.962633][ T414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.982306][ T414] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.990900][ T414] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 33.998959][ T414] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.006977][ T414] RBP: 00000000000083b0 R08: 0000000000000001 R09: 0000000000000000 [ 34.015040][ T414] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 34.023044][ T414] R13: 00007f8fdf703fac R14: 00000000000083e3 R15: 00007f8fdf703fa0 [ 34.031118][ T414] [ 34.034223][ T414] ---[ end trace 0694b3926eacea74 ]--- 2026/07/22 06:29:05 executed programs: 24 [ 34.084900][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 34.084932][ T30] audit: type=1400 audit(1784701745.759:114): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[14731]" dev="pipefs" ino=14731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 34.096875][ T420] ------------[ cut here ]------------ [ 34.119815][ T420] WARNING: CPU: 0 PID: 420 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.129906][ T420] Modules linked in: [ 34.133806][ T420] CPU: 0 PID: 420 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 34.142508][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 34.152825][ T420] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.159208][ T420] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 34.179296][ T420] RSP: 0018:ffffc900040d7d10 EFLAGS: 00010293 [ 34.185431][ T420] RAX: ffffffff845e1247 RBX: ffff8881147a8000 RCX: ffff8881147493c0 [ 34.193417][ T420] RDX: 0000000000000000 RSI: 000000000ab13180 RDI: 000000000c04eb7d [ 34.201455][ T420] RBP: ffffc900040d7d30 R08: ffff8881147a8083 R09: 1ffff110228f5010 [ 34.209853][ T420] R10: dffffc0000000000 R11: ffffed10228f5011 R12: dffffc0000000000 [ 34.217885][ T420] R13: dffffc0000000000 R14: 000000000ab13180 R15: ffff8881115f3400 [ 34.225913][ T420] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.235105][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.241713][ T420] CR2: 0000000000000000 CR3: 0000000128e86000 CR4: 00000000003506b0 [ 34.249843][ T420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.258248][ T420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.266331][ T420] Call Trace: [ 34.269683][ T420] [ 34.272635][ T420] pppol2tp_release+0x150/0x2b0 [ 34.277766][ T420] sock_close+0xb8/0x200 [ 34.282041][ T420] ? sock_mmap+0xa0/0xa0 [ 34.286487][ T420] __fput+0x22b/0x900 [ 34.290510][ T420] ____fput+0x15/0x20 [ 34.294559][ T420] task_work_run+0x127/0x190 [ 34.299204][ T420] exit_to_user_mode_loop+0xd0/0xe0 [ 34.304600][ T420] exit_to_user_mode_prepare+0x87/0xd0 [ 34.310098][ T420] syscall_exit_to_user_mode+0x1a/0x30 [ 34.315623][ T420] do_syscall_64+0x58/0xa0 [ 34.320059][ T420] ? clear_bhb_loop+0x50/0xa0 [ 34.324823][ T420] ? clear_bhb_loop+0x50/0xa0 [ 34.329549][ T420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.335799][ T420] RIP: 0033:0x7f8fdf47be99 [ 34.340290][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.360465][ T420] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.369148][ T420] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 34.377328][ T420] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.385411][ T420] RBP: 0000000000008515 R08: 0000000000000001 R09: 0000000000000000 [ 34.393430][ T420] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 34.401461][ T420] R13: 00007f8fdf703fac R14: 000000000000854a R15: 00007f8fdf703fa0 [ 34.409480][ T420] [ 34.412507][ T420] ---[ end trace 0694b3926eacea75 ]--- [ 34.427547][ T424] ------------[ cut here ]------------ [ 34.433101][ T424] WARNING: CPU: 0 PID: 424 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.443159][ T424] Modules linked in: [ 34.447151][ T424] CPU: 0 PID: 424 Comm: syz.2.43 Tainted: G B W syzkaller #0 [ 34.455886][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 34.466216][ T424] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.472628][ T424] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 34.492395][ T424] RSP: 0018:ffffc90004057d10 EFLAGS: 00010293 [ 34.498747][ T424] RAX: ffffffff845e1247 RBX: ffff8881147af000 RCX: ffff8881142e8000 [ 34.506878][ T424] RDX: 0000000000000000 RSI: 000000000ab137e0 RDI: 000000000c04eb7d [ 34.514990][ T424] RBP: ffffc90004057d30 R08: ffff8881147af083 R09: 1ffff110228f5e10 [ 34.522982][ T424] R10: dffffc0000000000 R11: ffffed10228f5e11 R12: dffffc0000000000 [ 34.531066][ T424] R13: dffffc0000000000 R14: 000000000ab137e0 R15: ffff88812db40400 [ 34.539126][ T424] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.548155][ T424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.554806][ T424] CR2: 0000000000000000 CR3: 0000000128f38000 CR4: 00000000003506b0 [ 34.562798][ T424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.570827][ T424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.578874][ T424] Call Trace: [ 34.582184][ T424] [ 34.585180][ T424] pppol2tp_release+0x150/0x2b0 [ 34.590150][ T424] sock_close+0xb8/0x200 [ 34.594681][ T424] ? sock_mmap+0xa0/0xa0 [ 34.598958][ T424] __fput+0x22b/0x900 [ 34.602960][ T424] ____fput+0x15/0x20 [ 34.607016][ T424] task_work_run+0x127/0x190 [ 34.611643][ T424] exit_to_user_mode_loop+0xd0/0xe0 [ 34.616910][ T424] exit_to_user_mode_prepare+0x87/0xd0 [ 34.622395][ T424] syscall_exit_to_user_mode+0x1a/0x30 [ 34.627942][ T424] do_syscall_64+0x58/0xa0 [ 34.632383][ T424] ? clear_bhb_loop+0x50/0xa0 [ 34.637171][ T424] ? clear_bhb_loop+0x50/0xa0 [ 34.641878][ T424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.647838][ T424] RIP: 0033:0x7f8fdf47be99 [ 34.652278][ T424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.672226][ T424] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.680873][ T424] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 34.689028][ T424] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.697215][ T424] RBP: 0000000000008662 R08: 0000000000000001 R09: 0000000000000000 [ 34.705290][ T424] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 34.713275][ T424] R13: 00007f8fdf703fac R14: 0000000000008695 R15: 00007f8fdf703fa0 [ 34.721352][ T424] [ 34.724444][ T424] ---[ end trace 0694b3926eacea76 ]--- [ 34.738279][ T426] ------------[ cut here ]------------ [ 34.743885][ T426] WARNING: CPU: 0 PID: 426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.754057][ T426] Modules linked in: [ 34.757985][ T426] CPU: 0 PID: 426 Comm: syz.2.44 Tainted: G B W syzkaller #0 [ 34.766847][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 34.777192][ T426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.783606][ T426] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 34.803372][ T426] RSP: 0018:ffffc90004057d10 EFLAGS: 00010293 [ 34.809594][ T426] RAX: ffffffff845e1247 RBX: ffff8881147aa000 RCX: ffff88811474e2c0 [ 34.817791][ T426] RDX: 0000000000000000 RSI: 000000000ab13c20 RDI: 000000000c04eb7d [ 34.825828][ T426] RBP: ffffc90004057d30 R08: ffff8881147aa083 R09: 1ffff110228f5410 [ 34.833840][ T426] R10: dffffc0000000000 R11: ffffed10228f5411 R12: dffffc0000000000 [ 34.841908][ T426] R13: dffffc0000000000 R14: 000000000ab13c20 R15: ffff88812db40000 [ 34.849923][ T426] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.858916][ T426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.865557][ T426] CR2: 0000000000000000 CR3: 000000011093b000 CR4: 00000000003506b0 [ 34.873535][ T426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.881690][ T426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.890124][ T426] Call Trace: [ 34.893413][ T426] [ 34.896566][ T426] pppol2tp_release+0x150/0x2b0 [ 34.901552][ T426] sock_close+0xb8/0x200 [ 34.905935][ T426] ? sock_mmap+0xa0/0xa0 [ 34.910246][ T426] __fput+0x22b/0x900 [ 34.914297][ T426] ____fput+0x15/0x20 [ 34.918332][ T426] task_work_run+0x127/0x190 [ 34.922950][ T426] exit_to_user_mode_loop+0xd0/0xe0 [ 34.928249][ T426] exit_to_user_mode_prepare+0x87/0xd0 [ 34.933737][ T426] syscall_exit_to_user_mode+0x1a/0x30 [ 34.939282][ T426] do_syscall_64+0x58/0xa0 [ 34.943732][ T426] ? clear_bhb_loop+0x50/0xa0 [ 34.948464][ T426] ? clear_bhb_loop+0x50/0xa0 [ 34.953161][ T426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.959111][ T426] RIP: 0033:0x7f8fdf47be99 [ 34.963548][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.983458][ T426] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.992088][ T426] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 35.000135][ T426] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.008285][ T426] RBP: 0000000000008799 R08: 0000000000000001 R09: 0000000000000000 [ 35.016347][ T426] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 35.024368][ T426] R13: 00007f8fdf703fac R14: 00000000000087cb R15: 00007f8fdf703fa0 [ 35.032518][ T426] [ 35.035645][ T426] ---[ end trace 0694b3926eacea77 ]--- [ 35.048311][ T428] ------------[ cut here ]------------ [ 35.053804][ T428] WARNING: CPU: 0 PID: 428 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.064183][ T428] Modules linked in: [ 35.068133][ T428] CPU: 0 PID: 428 Comm: syz.2.45 Tainted: G B W syzkaller #0 [ 35.076742][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 35.086973][ T428] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.093317][ T428] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 35.113009][ T428] RSP: 0018:ffffc90004057d10 EFLAGS: 00010293 [ 35.119142][ T428] RAX: ffffffff845e1247 RBX: ffff888114df8000 RCX: ffff88811474bb40 [ 35.127430][ T428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 35.135789][ T428] RBP: ffffc90004057d30 R08: ffff888114df8083 R09: 1ffff110229bf010 [ 35.143792][ T428] R10: dffffc0000000000 R11: ffffed10229bf011 R12: dffffc0000000000 [ 35.151847][ T428] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888122a67000 [ 35.159862][ T428] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.169071][ T428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.175710][ T428] CR2: 0000200000000240 CR3: 0000000128ea1000 CR4: 00000000003506b0 [ 35.183707][ T428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.191755][ T428] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.199779][ T428] Call Trace: [ 35.203060][ T428] [ 35.206042][ T428] pppol2tp_release+0x150/0x2b0 [ 35.210925][ T428] sock_close+0xb8/0x200 [ 35.215247][ T428] ? sock_mmap+0xa0/0xa0 [ 35.219512][ T428] __fput+0x22b/0x900 [ 35.223501][ T428] ____fput+0x15/0x20 [ 35.227601][ T428] task_work_run+0x127/0x190 [ 35.232213][ T428] exit_to_user_mode_loop+0xd0/0xe0 [ 35.237475][ T428] exit_to_user_mode_prepare+0x87/0xd0 [ 35.242958][ T428] syscall_exit_to_user_mode+0x1a/0x30 [ 35.248627][ T428] do_syscall_64+0x58/0xa0 [ 35.253215][ T428] ? clear_bhb_loop+0x50/0xa0 [ 35.257987][ T428] ? clear_bhb_loop+0x50/0xa0 [ 35.262692][ T428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.268670][ T428] RIP: 0033:0x7f8fdf47be99 [ 35.273105][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.292852][ T428] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.301558][ T428] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 35.309622][ T428] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.317945][ T428] RBP: 00000000000088cf R08: 0000000000000001 R09: 0000000000000000 [ 35.325995][ T428] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 35.334124][ T428] R13: 00007f8fdf703fac R14: 0000000000008902 R15: 00007f8fdf703fa0 [ 35.342108][ T428] [ 35.345194][ T428] ---[ end trace 0694b3926eacea78 ]--- [ 35.361300][ T432] ------------[ cut here ]------------ [ 35.366882][ T432] WARNING: CPU: 0 PID: 432 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.377410][ T432] Modules linked in: [ 35.381340][ T432] CPU: 1 PID: 432 Comm: syz.2.47 Tainted: G B W syzkaller #0 [ 35.390177][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 35.400386][ T432] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.406843][ T432] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 35.426863][ T432] RSP: 0018:ffffc900041c7d10 EFLAGS: 00010293 [ 35.432984][ T432] RAX: ffffffff845e1247 RBX: ffff888114f48000 RCX: ffff888114f53b40 [ 35.441092][ T432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 35.449215][ T432] RBP: ffffc900041c7d30 R08: ffff888114f48083 R09: 1ffff110229e9010 [ 35.457259][ T432] R10: dffffc0000000000 R11: ffffed10229e9011 R12: dffffc0000000000 [ 35.465324][ T432] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888121998c00 [ 35.473308][ T432] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.482318][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.488954][ T432] CR2: 0000000000000000 CR3: 0000000128e54000 CR4: 00000000003506b0 [ 35.497019][ T432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.505062][ T432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.513060][ T432] Call Trace: [ 35.516410][ T432] [ 35.519359][ T432] pppol2tp_release+0x150/0x2b0 [ 35.524269][ T432] sock_close+0xb8/0x200 [ 35.528532][ T432] ? sock_mmap+0xa0/0xa0 [ 35.532852][ T432] __fput+0x22b/0x900 [ 35.537263][ T432] ____fput+0x15/0x20 [ 35.541294][ T432] task_work_run+0x127/0x190 [ 35.546002][ T432] exit_to_user_mode_loop+0xd0/0xe0 [ 35.551272][ T432] exit_to_user_mode_prepare+0x87/0xd0 [ 35.556799][ T432] syscall_exit_to_user_mode+0x1a/0x30 [ 35.562429][ T432] do_syscall_64+0x58/0xa0 [ 35.566926][ T432] ? clear_bhb_loop+0x50/0xa0 [ 35.571635][ T432] ? clear_bhb_loop+0x50/0xa0 [ 35.576404][ T432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.582360][ T432] RIP: 0033:0x7f8fdf47be99 [ 35.586865][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.606710][ T432] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.615179][ T432] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 35.623172][ T432] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.631211][ T432] RBP: 0000000000008a08 R08: 0000000000000001 R09: 0000000000000000 [ 35.639229][ T432] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 35.647275][ T432] R13: 00007f8fdf703fac R14: 0000000000008a3b R15: 00007f8fdf703fa0 [ 35.655324][ T432] [ 35.658359][ T432] ---[ end trace 0694b3926eacea79 ]--- [ 35.678556][ T436] ------------[ cut here ]------------ [ 35.684135][ T436] WARNING: CPU: 0 PID: 436 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.694224][ T436] Modules linked in: [ 35.698141][ T436] CPU: 0 PID: 436 Comm: syz.2.49 Tainted: G B W syzkaller #0 [ 35.706902][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 35.717708][ T436] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.724156][ T436] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 35.744060][ T436] RSP: 0018:ffffc900041c7d10 EFLAGS: 00010293 [ 35.750158][ T436] RAX: ffffffff845e1247 RBX: ffff888114f4b000 RCX: ffff888114f50000 [ 35.758306][ T436] RDX: 0000000000000000 RSI: 000000000ab98c00 RDI: 000000000c04eb7d [ 35.766353][ T436] RBP: ffffc900041c7d30 R08: ffff888114f4b083 R09: 1ffff110229e9610 [ 35.774406][ T436] R10: dffffc0000000000 R11: ffffed10229e9611 R12: dffffc0000000000 [ 35.782447][ T436] R13: dffffc0000000000 R14: 000000000ab98c00 R15: ffff88812199a000 [ 35.791221][ T436] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.800268][ T436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.806910][ T436] CR2: 0000177b6fa74020 CR3: 0000000128e46000 CR4: 00000000003506a0 [ 35.814962][ T436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.822987][ T436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.831114][ T436] Call Trace: [ 35.834443][ T436] [ 35.837481][ T436] pppol2tp_release+0x150/0x2b0 [ 35.842351][ T436] sock_close+0xb8/0x200 [ 35.846948][ T436] ? sock_mmap+0xa0/0xa0 [ 35.851225][ T436] __fput+0x22b/0x900 [ 35.855286][ T436] ____fput+0x15/0x20 [ 35.859292][ T436] task_work_run+0x127/0x190 [ 35.863884][ T436] exit_to_user_mode_loop+0xd0/0xe0 [ 35.869147][ T436] exit_to_user_mode_prepare+0x87/0xd0 [ 35.874950][ T436] syscall_exit_to_user_mode+0x1a/0x30 [ 35.880440][ T436] do_syscall_64+0x58/0xa0 [ 35.884906][ T436] ? clear_bhb_loop+0x50/0xa0 [ 35.889611][ T436] ? clear_bhb_loop+0x50/0xa0 [ 35.894348][ T436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.900280][ T436] RIP: 0033:0x7f8fdf47be99 [ 35.904764][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.924426][ T436] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.932851][ T436] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 35.940912][ T436] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.948962][ T436] RBP: 0000000000008b45 R08: 0000000000000001 R09: 0000000000000000 [ 35.957003][ T436] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 35.965025][ T436] R13: 00007f8fdf703fac R14: 0000000000008b78 R15: 00007f8fdf703fa0 [ 35.973004][ T436] [ 35.976070][ T436] ---[ end trace 0694b3926eacea7a ]--- [ 35.991522][ T440] ------------[ cut here ]------------ [ 35.997073][ T440] WARNING: CPU: 0 PID: 440 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.007154][ T440] Modules linked in: [ 36.011076][ T440] CPU: 0 PID: 440 Comm: syz.2.51 Tainted: G B W syzkaller #0 [ 36.019778][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 36.030074][ T440] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.036540][ T440] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 36.056461][ T440] RSP: 0018:ffffc900040d7d10 EFLAGS: 00010293 [ 36.062541][ T440] RAX: ffffffff845e1247 RBX: ffff88811536e000 RCX: ffff8881151ea780 [ 36.070622][ T440] RDX: 0000000000000000 RSI: 000000000ab98740 RDI: 000000000c04eb7d [ 36.078753][ T440] RBP: ffffc900040d7d30 R08: ffff88811536e083 R09: 1ffff11022a6dc10 [ 36.086944][ T440] R10: dffffc0000000000 R11: ffffed1022a6dc11 R12: dffffc0000000000 [ 36.094968][ T440] R13: dffffc0000000000 R14: 000000000ab98740 R15: ffff88811f317c00 [ 36.103383][ T440] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.112379][ T440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.119146][ T440] CR2: 0000000000000000 CR3: 0000000123605000 CR4: 00000000003506b0 [ 36.127206][ T440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.135246][ T440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.143371][ T440] Call Trace: [ 36.146720][ T440] [ 36.149686][ T440] pppol2tp_release+0x150/0x2b0 [ 36.154724][ T440] sock_close+0xb8/0x200 [ 36.158999][ T440] ? sock_mmap+0xa0/0xa0 [ 36.163250][ T440] __fput+0x22b/0x900 [ 36.167290][ T440] ____fput+0x15/0x20 [ 36.171392][ T440] task_work_run+0x127/0x190 [ 36.176052][ T440] exit_to_user_mode_loop+0xd0/0xe0 [ 36.181296][ T440] exit_to_user_mode_prepare+0x87/0xd0 [ 36.187153][ T440] syscall_exit_to_user_mode+0x1a/0x30 [ 36.192665][ T440] do_syscall_64+0x58/0xa0 [ 36.197123][ T440] ? clear_bhb_loop+0x50/0xa0 [ 36.201830][ T440] ? clear_bhb_loop+0x50/0xa0 [ 36.206687][ T440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.212726][ T440] RIP: 0033:0x7f8fdf47be99 [ 36.217352][ T440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.237117][ T440] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.245589][ T440] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 36.253607][ T440] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.261643][ T440] RBP: 0000000000008c7e R08: 0000000000000001 R09: 0000000000000000 [ 36.269662][ T440] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 36.277697][ T440] R13: 00007f8fdf703fac R14: 0000000000008cb1 R15: 00007f8fdf703fa0 [ 36.285816][ T440] [ 36.288859][ T440] ---[ end trace 0694b3926eacea7b ]--- [ 36.299702][ T442] ------------[ cut here ]------------ [ 36.305263][ T442] WARNING: CPU: 1 PID: 442 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.315358][ T442] Modules linked in: [ 36.319418][ T442] CPU: 0 PID: 442 Comm: syz.2.52 Tainted: G B W syzkaller #0 [ 36.328157][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 36.339289][ T442] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.345719][ T442] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 36.365692][ T442] RSP: 0018:ffffc900040ffd10 EFLAGS: 00010293 [ 36.371780][ T442] RAX: ffffffff845e1247 RBX: ffff888114dfa000 RCX: ffff888115163b40 [ 36.379801][ T442] RDX: 0000000000000000 RSI: 000000002d7b7340 RDI: 000000000c04eb7d [ 36.388011][ T442] RBP: ffffc900040ffd30 R08: ffff888114dfa083 R09: 1ffff110229bf410 [ 36.396056][ T442] R10: dffffc0000000000 R11: ffffed10229bf411 R12: dffffc0000000000 [ 36.404094][ T442] R13: dffffc0000000000 R14: 000000002d7b7340 R15: ffff88811fb73400 [ 36.412193][ T442] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.421180][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.427882][ T442] CR2: 0000000000000000 CR3: 0000000128e46000 CR4: 00000000003506b0 [ 36.435953][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.443931][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.451977][ T442] Call Trace: [ 36.455354][ T442] [ 36.458405][ T442] pppol2tp_release+0x150/0x2b0 [ 36.463270][ T442] sock_close+0xb8/0x200 [ 36.467579][ T442] ? sock_mmap+0xa0/0xa0 [ 36.471897][ T442] __fput+0x22b/0x900 [ 36.475967][ T442] ____fput+0x15/0x20 [ 36.479993][ T442] task_work_run+0x127/0x190 [ 36.484635][ T442] exit_to_user_mode_loop+0xd0/0xe0 [ 36.489875][ T442] exit_to_user_mode_prepare+0x87/0xd0 [ 36.495476][ T442] syscall_exit_to_user_mode+0x1a/0x30 [ 36.500977][ T442] do_syscall_64+0x58/0xa0 [ 36.505553][ T442] ? clear_bhb_loop+0x50/0xa0 [ 36.510269][ T442] ? clear_bhb_loop+0x50/0xa0 [ 36.515022][ T442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.521035][ T442] RIP: 0033:0x7f8fdf47be99 [ 36.525523][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.545202][ T442] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.553654][ T442] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 36.561695][ T442] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.569707][ T442] RBP: 0000000000008db2 R08: 0000000000000001 R09: 0000000000000000 [ 36.577776][ T442] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 36.585931][ T442] R13: 00007f8fdf703fac R14: 0000000000008de5 R15: 00007f8fdf703fa0 [ 36.593943][ T442] [ 36.597041][ T442] ---[ end trace 0694b3926eacea7c ]--- [ 36.614711][ T446] ------------[ cut here ]------------ [ 36.620228][ T446] WARNING: CPU: 1 PID: 446 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.630320][ T446] Modules linked in: [ 36.634389][ T446] CPU: 1 PID: 446 Comm: syz.2.54 Tainted: G B W syzkaller #0 [ 36.642896][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 36.653398][ T446] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.659859][ T446] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 36.679542][ T446] RSP: 0018:ffffc900040d7d10 EFLAGS: 00010293 [ 36.685705][ T446] RAX: ffffffff845e1247 RBX: ffff888114585000 RCX: ffff888115164f00 [ 36.693793][ T446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 36.701902][ T446] RBP: ffffc900040d7d30 R08: ffff888114585083 R09: 1ffff110228b0a10 [ 36.710342][ T446] R10: dffffc0000000000 R11: ffffed10228b0a11 R12: dffffc0000000000 [ 36.718551][ T446] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888123073c00 [ 36.726580][ T446] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.735621][ T446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.742420][ T446] CR2: 0000000000000000 CR3: 0000000112790000 CR4: 00000000003506a0 [ 36.750546][ T446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.758592][ T446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.766652][ T446] Call Trace: [ 36.769960][ T446] [ 36.773084][ T446] pppol2tp_release+0x150/0x2b0 [ 36.778015][ T446] sock_close+0xb8/0x200 [ 36.782297][ T446] ? sock_mmap+0xa0/0xa0 [ 36.786619][ T446] __fput+0x22b/0x900 [ 36.790638][ T446] ____fput+0x15/0x20 [ 36.794678][ T446] task_work_run+0x127/0x190 [ 36.799300][ T446] exit_to_user_mode_loop+0xd0/0xe0 [ 36.804579][ T446] exit_to_user_mode_prepare+0x87/0xd0 [ 36.810160][ T446] syscall_exit_to_user_mode+0x1a/0x30 [ 36.815683][ T446] do_syscall_64+0x58/0xa0 [ 36.820131][ T446] ? clear_bhb_loop+0x50/0xa0 [ 36.825174][ T446] ? clear_bhb_loop+0x50/0xa0 [ 36.829888][ T446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.835941][ T446] RIP: 0033:0x7f8fdf47be99 [ 36.840378][ T446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.860132][ T446] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.868587][ T446] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 36.876626][ T446] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.884696][ T446] RBP: 0000000000008eed R08: 0000000000000001 R09: 0000000000000000 [ 36.892674][ T446] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 36.900788][ T446] R13: 00007f8fdf703fac R14: 0000000000008f20 R15: 00007f8fdf703fa0 [ 36.908804][ T446] [ 36.911825][ T446] ---[ end trace 0694b3926eacea7d ]--- [ 36.927559][ T450] ------------[ cut here ]------------ [ 36.933064][ T450] WARNING: CPU: 1 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.943173][ T450] Modules linked in: [ 36.947210][ T450] CPU: 1 PID: 450 Comm: syz.2.56 Tainted: G B W syzkaller #0 [ 36.955807][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 36.966000][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.972541][ T450] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 36.992430][ T450] RSP: 0018:ffffc900040d7d10 EFLAGS: 00010293 [ 36.998709][ T450] RAX: ffffffff845e1247 RBX: ffff888114584000 RCX: ffff888115958000 [ 37.006751][ T450] RDX: 0000000000000000 RSI: 000000002d7b7ce0 RDI: 000000000c04eb7d [ 37.014898][ T450] RBP: ffffc900040d7d30 R08: ffff888114584083 R09: 1ffff110228b0810 [ 37.022917][ T450] R10: dffffc0000000000 R11: ffffed10228b0811 R12: dffffc0000000000 [ 37.031429][ T450] R13: dffffc0000000000 R14: 000000002d7b7ce0 R15: ffff888123073400 [ 37.039723][ T450] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.048732][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.055397][ T450] CR2: 000055555e155908 CR3: 000000010f81f000 CR4: 00000000003506b0 [ 37.063620][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.071660][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.079679][ T450] Call Trace: [ 37.082962][ T450] [ 37.085960][ T450] pppol2tp_release+0x150/0x2b0 [ 37.090843][ T450] sock_close+0xb8/0x200 [ 37.095147][ T450] ? sock_mmap+0xa0/0xa0 [ 37.099410][ T450] __fput+0x22b/0x900 [ 37.103418][ T450] ____fput+0x15/0x20 [ 37.107459][ T450] task_work_run+0x127/0x190 [ 37.112103][ T450] exit_to_user_mode_loop+0xd0/0xe0 [ 37.117478][ T450] exit_to_user_mode_prepare+0x87/0xd0 [ 37.122980][ T450] syscall_exit_to_user_mode+0x1a/0x30 [ 37.128498][ T450] do_syscall_64+0x58/0xa0 [ 37.132953][ T450] ? clear_bhb_loop+0x50/0xa0 [ 37.137722][ T450] ? clear_bhb_loop+0x50/0xa0 [ 37.142420][ T450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.148623][ T450] RIP: 0033:0x7f8fdf47be99 [ 37.153075][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.172754][ T450] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.181217][ T450] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 37.189253][ T450] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.197272][ T450] RBP: 0000000000009026 R08: 0000000000000001 R09: 0000000000000000 [ 37.205410][ T450] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 37.213605][ T450] R13: 00007f8fdf703fac R14: 0000000000009059 R15: 00007f8fdf703fa0 [ 37.221657][ T450] [ 37.224741][ T450] ---[ end trace 0694b3926eacea7e ]--- [ 37.235358][ T452] ------------[ cut here ]------------ [ 37.240935][ T452] WARNING: CPU: 1 PID: 452 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.251966][ T452] Modules linked in: [ 37.256003][ T452] CPU: 0 PID: 452 Comm: syz.2.57 Tainted: G B W syzkaller #0 [ 37.264813][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 37.275155][ T452] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.281549][ T452] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 37.301260][ T452] RSP: 0018:ffffc900042afd10 EFLAGS: 00010293 [ 37.307410][ T452] RAX: ffffffff845e1247 RBX: ffff888114587000 RCX: ffff88811595e2c0 [ 37.315472][ T452] RDX: 0000000000000000 RSI: 000000002d7b75a0 RDI: 000000000c04eb7d [ 37.323504][ T452] RBP: ffffc900042afd30 R08: ffff888114587083 R09: 1ffff110228b0e10 [ 37.331562][ T452] R10: dffffc0000000000 R11: ffffed10228b0e11 R12: dffffc0000000000 [ 37.339578][ T452] R13: dffffc0000000000 R14: 000000002d7b75a0 R15: ffff888123065000 [ 37.347620][ T452] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.356769][ T452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.363378][ T452] CR2: 000055555e155908 CR3: 0000000129042000 CR4: 00000000003506b0 [ 37.371410][ T452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.380340][ T452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.388378][ T452] Call Trace: [ 37.391678][ T452] [ 37.394654][ T452] pppol2tp_release+0x150/0x2b0 [ 37.399537][ T452] sock_close+0xb8/0x200 [ 37.403785][ T452] ? sock_mmap+0xa0/0xa0 [ 37.408092][ T452] __fput+0x22b/0x900 [ 37.412157][ T452] ____fput+0x15/0x20 [ 37.416201][ T452] task_work_run+0x127/0x190 [ 37.420814][ T452] exit_to_user_mode_loop+0xd0/0xe0 [ 37.426088][ T452] exit_to_user_mode_prepare+0x87/0xd0 [ 37.431590][ T452] syscall_exit_to_user_mode+0x1a/0x30 [ 37.437204][ T452] do_syscall_64+0x58/0xa0 [ 37.441644][ T452] ? clear_bhb_loop+0x50/0xa0 [ 37.446519][ T452] ? clear_bhb_loop+0x50/0xa0 [ 37.451229][ T452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.457191][ T452] RIP: 0033:0x7f8fdf47be99 [ 37.461628][ T452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.481531][ T452] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.490115][ T452] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 37.498165][ T452] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.506225][ T452] RBP: 000000000000915a R08: 0000000000000001 R09: 0000000000000000 [ 37.514273][ T452] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 37.522278][ T452] R13: 00007f8fdf703fac R14: 000000000000918d R15: 00007f8fdf703fa0 [ 37.530371][ T452] [ 37.533418][ T452] ---[ end trace 0694b3926eacea7f ]--- [ 37.544716][ T454] ------------[ cut here ]------------ [ 37.550258][ T454] WARNING: CPU: 1 PID: 454 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.560349][ T454] Modules linked in: [ 37.564283][ T454] CPU: 1 PID: 454 Comm: syz.2.58 Tainted: G B W syzkaller #0 [ 37.572783][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 37.582898][ T454] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.589494][ T454] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 37.609308][ T454] RSP: 0018:ffffc900041c7d10 EFLAGS: 00010293 [ 37.615422][ T454] RAX: ffffffff845e1247 RBX: ffff888115d9c000 RCX: ffff8881151d2780 [ 37.623403][ T454] RDX: 0000000000000000 RSI: 000000002d7b72e0 RDI: 000000000c04eb7d [ 37.631435][ T454] RBP: ffffc900041c7d30 R08: ffff888115d9c083 R09: 1ffff11022bb3810 [ 37.639448][ T454] R10: dffffc0000000000 R11: ffffed1022bb3811 R12: dffffc0000000000 [ 37.647486][ T454] R13: dffffc0000000000 R14: 000000002d7b72e0 R15: ffff888123045000 [ 37.655520][ T454] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.664493][ T454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.671118][ T454] CR2: 0000000000000000 CR3: 0000000128f25000 CR4: 00000000003506a0 [ 37.679173][ T454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.687201][ T454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.695422][ T454] Call Trace: [ 37.698744][ T454] [ 37.701679][ T454] pppol2tp_release+0x150/0x2b0 [ 37.706575][ T454] sock_close+0xb8/0x200 [ 37.710849][ T454] ? sock_mmap+0xa0/0xa0 [ 37.715154][ T454] __fput+0x22b/0x900 [ 37.719169][ T454] ____fput+0x15/0x20 [ 37.723198][ T454] task_work_run+0x127/0x190 [ 37.727842][ T454] exit_to_user_mode_loop+0xd0/0xe0 [ 37.733164][ T454] exit_to_user_mode_prepare+0x87/0xd0 [ 37.738703][ T454] syscall_exit_to_user_mode+0x1a/0x30 [ 37.744343][ T454] do_syscall_64+0x58/0xa0 [ 37.748787][ T454] ? clear_bhb_loop+0x50/0xa0 [ 37.753463][ T454] ? clear_bhb_loop+0x50/0xa0 [ 37.758190][ T454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.764119][ T454] RIP: 0033:0x7f8fdf47be99 [ 37.768536][ T454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.788182][ T454] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.796815][ T454] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 37.804838][ T454] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.812852][ T454] RBP: 000000000000928f R08: 0000000000000001 R09: 0000000000000000 [ 37.820914][ T454] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 37.828988][ T454] R13: 00007f8fdf703fac R14: 00000000000092c2 R15: 00007f8fdf703fa0 [ 37.837086][ T454] [ 37.840128][ T454] ---[ end trace 0694b3926eacea80 ]--- [ 37.856335][ T458] ------------[ cut here ]------------ [ 37.861951][ T458] WARNING: CPU: 1 PID: 458 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.872441][ T458] Modules linked in: [ 37.876457][ T458] CPU: 1 PID: 458 Comm: syz.2.60 Tainted: G B W syzkaller #0 [ 37.885048][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 37.895184][ T458] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.901547][ T458] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 37.921241][ T458] RSP: 0018:ffffc900041c7d10 EFLAGS: 00010293 [ 37.927361][ T458] RAX: ffffffff845e1247 RBX: ffff88811e6a9000 RCX: ffff888115da0000 [ 37.935444][ T458] RDX: 0000000000000000 RSI: 000000002d7b70a0 RDI: 000000000c04eb7d [ 37.943443][ T458] RBP: ffffc900041c7d30 R08: ffff88811e6a9083 R09: 1ffff11023cd5210 [ 37.951589][ T458] R10: dffffc0000000000 R11: ffffed1023cd5211 R12: dffffc0000000000 [ 37.960126][ T458] R13: dffffc0000000000 R14: 000000002d7b70a0 R15: ffff888123044800 [ 37.968360][ T458] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.977387][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.984078][ T458] CR2: 0000177b6fa7e000 CR3: 000000012bf43000 CR4: 00000000003506b0 [ 37.992075][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.000224][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.008326][ T458] Call Trace: [ 38.011627][ T458] [ 38.014643][ T458] pppol2tp_release+0x150/0x2b0 [ 38.019527][ T458] sock_close+0xb8/0x200 [ 38.023790][ T458] ? sock_mmap+0xa0/0xa0 [ 38.028105][ T458] __fput+0x22b/0x900 [ 38.032112][ T458] ____fput+0x15/0x20 [ 38.036149][ T458] task_work_run+0x127/0x190 [ 38.040762][ T458] exit_to_user_mode_loop+0xd0/0xe0 [ 38.046001][ T458] exit_to_user_mode_prepare+0x87/0xd0 [ 38.051498][ T458] syscall_exit_to_user_mode+0x1a/0x30 [ 38.057024][ T458] do_syscall_64+0x58/0xa0 [ 38.061471][ T458] ? clear_bhb_loop+0x50/0xa0 [ 38.066249][ T458] ? clear_bhb_loop+0x50/0xa0 [ 38.071055][ T458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.076998][ T458] RIP: 0033:0x7f8fdf47be99 [ 38.081432][ T458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.101094][ T458] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.109554][ T458] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 38.117583][ T458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.125618][ T458] RBP: 00000000000093c7 R08: 0000000000000001 R09: 0000000000000000 [ 38.134092][ T458] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 38.142171][ T458] R13: 00007f8fdf703fac R14: 00000000000093fa R15: 00007f8fdf703fa0 [ 38.150192][ T458] [ 38.153227][ T458] ---[ end trace 0694b3926eacea81 ]--- [ 38.173202][ T462] ------------[ cut here ]------------ [ 38.178737][ T462] WARNING: CPU: 1 PID: 462 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.188833][ T462] Modules linked in: [ 38.192752][ T462] CPU: 0 PID: 462 Comm: syz.2.62 Tainted: G B W syzkaller #0 [ 38.201433][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 38.211624][ T462] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.218218][ T462] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 38.238040][ T462] RSP: 0018:ffffc90004327d10 EFLAGS: 00010293 [ 38.244223][ T462] RAX: ffffffff845e1247 RBX: ffff88811e6af000 RCX: ffff8881160913c0 [ 38.252269][ T462] RDX: 0000000000000000 RSI: 000000000cb2f580 RDI: 000000000c04eb7d [ 38.260357][ T462] RBP: ffffc90004327d30 R08: ffff88811e6af083 R09: 1ffff11023cd5e10 [ 38.268440][ T462] R10: dffffc0000000000 R11: ffffed1023cd5e11 R12: dffffc0000000000 [ 38.276525][ T462] R13: dffffc0000000000 R14: 000000000cb2f580 R15: ffff888123019400 [ 38.284623][ T462] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.293629][ T462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.300312][ T462] CR2: 0000177b6fa81000 CR3: 0000000128ed4000 CR4: 00000000003506a0 [ 38.308349][ T462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.316400][ T462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.324624][ T462] Call Trace: [ 38.328036][ T462] [ 38.330980][ T462] pppol2tp_release+0x150/0x2b0 [ 38.335897][ T462] sock_close+0xb8/0x200 [ 38.340174][ T462] ? sock_mmap+0xa0/0xa0 [ 38.344487][ T462] __fput+0x22b/0x900 [ 38.348703][ T462] ____fput+0x15/0x20 [ 38.352693][ T462] task_work_run+0x127/0x190 [ 38.357339][ T462] exit_to_user_mode_loop+0xd0/0xe0 [ 38.362567][ T462] exit_to_user_mode_prepare+0x87/0xd0 [ 38.368091][ T462] syscall_exit_to_user_mode+0x1a/0x30 [ 38.373581][ T462] do_syscall_64+0x58/0xa0 [ 38.378057][ T462] ? clear_bhb_loop+0x50/0xa0 [ 38.383017][ T462] ? clear_bhb_loop+0x50/0xa0 [ 38.387750][ T462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.393688][ T462] RIP: 0033:0x7f8fdf47be99 [ 38.398154][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.418106][ T462] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.426602][ T462] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 38.434833][ T462] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.442820][ T462] RBP: 0000000000009504 R08: 0000000000000001 R09: 0000000000000000 [ 38.450947][ T462] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 38.458973][ T462] R13: 00007f8fdf703fac R14: 0000000000009536 R15: 00007f8fdf703fa0 [ 38.467055][ T462] [ 38.470095][ T462] ---[ end trace 0694b3926eacea82 ]--- [ 38.481042][ T464] ------------[ cut here ]------------ [ 38.486600][ T464] WARNING: CPU: 1 PID: 464 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.496752][ T464] Modules linked in: [ 38.500814][ T464] CPU: 0 PID: 464 Comm: syz.2.63 Tainted: G B W syzkaller #0 [ 38.509805][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 38.520480][ T464] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.527277][ T464] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 38.547272][ T464] RSP: 0018:ffffc900042afd10 EFLAGS: 00010293 [ 38.553377][ T464] RAX: ffffffff845e1247 RBX: ffff888115f89000 RCX: ffff8881151d3b40 [ 38.561472][ T464] RDX: 0000000000000000 RSI: 000000000cb2fa00 RDI: 000000000c04eb7d [ 38.569595][ T464] RBP: ffffc900042afd30 R08: ffff888115f89083 R09: 1ffff11022bf1210 [ 38.577668][ T464] R10: dffffc0000000000 R11: ffffed1022bf1211 R12: dffffc0000000000 [ 38.585692][ T464] R13: dffffc0000000000 R14: 000000000cb2fa00 R15: ffff888123019000 [ 38.593679][ T464] FS: 000055555e13a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 38.602714][ T464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.609432][ T464] CR2: 0000001b33b24000 CR3: 0000000128ed8000 CR4: 00000000003506b0 [ 38.617492][ T464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.625734][ T464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.633764][ T464] Call Trace: [ 38.637136][ T464] [ 38.640097][ T464] pppol2tp_release+0x150/0x2b0 [ 38.645008][ T464] sock_close+0xb8/0x200 [ 38.649278][ T464] ? sock_mmap+0xa0/0xa0 [ 38.653663][ T464] __fput+0x22b/0x900 [ 38.657725][ T464] ____fput+0x15/0x20 [ 38.661747][ T464] task_work_run+0x127/0x190 [ 38.666440][ T464] exit_to_user_mode_loop+0xd0/0xe0 [ 38.671955][ T464] exit_to_user_mode_prepare+0x87/0xd0 [ 38.677503][ T464] syscall_exit_to_user_mode+0x1a/0x30 [ 38.682988][ T464] do_syscall_64+0x58/0xa0 [ 38.687487][ T464] ? clear_bhb_loop+0x50/0xa0 [ 38.692188][ T464] ? clear_bhb_loop+0x50/0xa0 [ 38.696923][ T464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.702860][ T464] RIP: 0033:0x7f8fdf47be99 [ 38.707330][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.726994][ T464] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.735574][ T464] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 38.743584][ T464] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.751648][ T464] RBP: 0000000000009637 R08: 0000000000000001 R09: 0000000000000000 [ 38.759674][ T464] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 38.767713][ T464] R13: 00007f8fdf703fac R14: 000000000000966a R15: 00007f8fdf703fa0 [ 38.775913][ T464] [ 38.779048][ T464] ---[ end trace 0694b3926eacea83 ]--- [ 38.789782][ T466] ------------[ cut here ]------------ [ 38.795316][ T466] WARNING: CPU: 1 PID: 466 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.805713][ T466] Modules linked in: [ 38.809668][ T466] CPU: 1 PID: 466 Comm: syz.2.64 Tainted: G B W syzkaller #0 [ 38.818412][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 38.828732][ T466] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.835365][ T466] Code: 5d c3 e8 bc a4 0b fd be 02 00 00 00 eb 0a e8 b0 a4 0b fd be 01 00 00 00 4c 89 f7 e8 53 23 f2 fd e9 0f ff ff ff e8 99 a4 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 88 a4 0b fd 4c 89 f7 be 03 [ 38.855116][ T466] RSP: 0018:ffffc9000439fd10 EFLAGS: 00010293 [ 38.861213][ T466] RAX: ffffffff845e1247 RBX: ffff888115f88000 RCX: ffff8881160962c0 [ 38.869710][ T466] RDX: 0000000000000000 RSI: 000000002bf2c860 RDI: 000000000c04eb7d [ 38.877762][ T466] RBP: ffffc9000439fd30 R08: ffff888115f88083 R09: 1ffff11022bf1010 [ 38.885793][ T466] R10: dffffc0000000000 R11: ffffed1022bf1011 R12: dffffc0000000000 [ 38.893779][ T466] R13: dffffc0000000000 R14: 000000002bf2c860 R15: ffff888122ba1400 [ 38.901827][ T466] FS: 000055555e13a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.910807][ T466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.917447][ T466] CR2: 0000000000000000 CR3: 000000012bf21000 CR4: 00000000003506a0 [ 38.925492][ T466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.933646][ T466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.941687][ T466] Call Trace: [ 38.945012][ T466] [ 38.947952][ T466] pppol2tp_release+0x150/0x2b0 [ 38.952834][ T466] sock_close+0xb8/0x200 [ 38.957334][ T466] ? sock_mmap+0xa0/0xa0 [ 38.961700][ T466] __fput+0x22b/0x900 [ 38.965782][ T466] ____fput+0x15/0x20 [ 38.969788][ T466] task_work_run+0x127/0x190 [ 38.974465][ T466] exit_to_user_mode_loop+0xd0/0xe0 [ 38.979690][ T466] exit_to_user_mode_prepare+0x87/0xd0 [ 38.985504][ T466] syscall_exit_to_user_mode+0x1a/0x30 [ 38.991001][ T466] do_syscall_64+0x58/0xa0 [ 38.995503][ T466] ? clear_bhb_loop+0x50/0xa0 [ 39.000230][ T466] ? clear_bhb_loop+0x50/0xa0 [ 39.005007][ T466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.010925][ T466] RIP: 0033:0x7f8fdf47be99 [ 39.015406][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.035408][ T466] RSP: 002b:00007ffc262b6c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.043831][ T466] RAX: 0000000000000000 RBX: 00007ffc262b6cf0 RCX: 00007f8fdf47be99 [ 39.051895][ T466] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 39.059939][ T466] RBP: 000000000000976c R08: 0000000000000001 R09: 0000000000000000 [ 39.067976][ T466] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc262b6d30 [ 39.076014][ T466] R13: 00007f8fdf703fac R14: 000000000000979f R15: 00007f8fdf703fa0 [ 39.084067][ T466] [ 39.087112][ T466] ---[ end trace 0694b3926eacea84 ]--- 2026/07/22 06:29:10 executed programs: 50