Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. 2026/07/23 21:59:02 parsed 1 programs 2026/07/23 21:59:02 serving rpc on tcp://37525 [ 24.523503][ T24] audit: type=1400 audit(1784843942.620:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.544721][ T24] audit: type=1400 audit(1784843942.620:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.564465][ T24] audit: type=1400 audit(1784843942.620:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.131571][ T24] audit: type=1400 audit(1784843943.230:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.132557][ T293] cgroup: Unknown subsys name 'net' [ 25.154234][ T24] audit: type=1400 audit(1784843943.230:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.181441][ T24] audit: type=1400 audit(1784843943.260:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.181600][ T293] cgroup: Unknown subsys name 'devices' [ 25.291183][ T293] cgroup: Unknown subsys name 'hugetlb' [ 25.296777][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.409747][ T24] audit: type=1400 audit(1784843943.500:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.432901][ T24] audit: type=1400 audit(1784843943.510:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.453388][ T24] audit: type=1400 audit(1784843943.510:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.458681][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.473736][ T24] audit: type=1400 audit(1784843943.510:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.542333][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.018229][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 26.032886][ T306] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.097209][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.105359][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.113014][ T304] device bridge_slave_0 entered promiscuous mode [ 26.123292][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.130329][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.137564][ T304] device bridge_slave_1 entered promiscuous mode [ 26.244151][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.251233][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.258504][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.265551][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.316545][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.330727][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.348950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.356452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.399850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.408017][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.427829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.436010][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.443056][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.493834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.521740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.537121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.552543][ T304] device veth0_vlan entered promiscuous mode [ 26.570438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.580045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.587444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.600230][ T304] device veth1_macvtap entered promiscuous mode [ 26.611277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.632013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.644116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/23 21:59:04 executed programs: 0 [ 26.888979][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.896149][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.903532][ T371] device bridge_slave_0 entered promiscuous mode [ 26.919214][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.926316][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.933758][ T369] device bridge_slave_0 entered promiscuous mode [ 26.941428][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.948446][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.955850][ T369] device bridge_slave_1 entered promiscuous mode [ 26.965682][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.972779][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.980132][ T371] device bridge_slave_1 entered promiscuous mode [ 27.057331][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.064586][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.072014][ T373] device bridge_slave_0 entered promiscuous mode [ 27.078718][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.085895][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.093254][ T373] device bridge_slave_1 entered promiscuous mode [ 27.166073][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.173157][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.180610][ T377] device bridge_slave_0 entered promiscuous mode [ 27.200074][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.207114][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.214453][ T377] device bridge_slave_1 entered promiscuous mode [ 27.242732][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.249787][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.257016][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.264039][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.280342][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.287381][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.295111][ T376] device bridge_slave_0 entered promiscuous mode [ 27.302345][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.309363][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.316734][ T376] device bridge_slave_1 entered promiscuous mode [ 27.390081][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.397230][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.405112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.412470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.430265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.438525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.446761][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.453800][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.461441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.469652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.477901][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.484956][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.492302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.499667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.507134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.531835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.539515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.547705][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.554730][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.562830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.571064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.579120][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.586156][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.593570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.602257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.610582][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.617591][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.625061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.636208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.644333][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.651357][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.665892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.690623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.698609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.707458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.715695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.741363][ T369] device veth0_vlan entered promiscuous mode [ 27.750192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.758121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.765679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.773805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.781949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.790204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.798042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.806095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.814003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.832251][ T369] device veth1_macvtap entered promiscuous mode [ 27.845646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.853197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.862776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.871131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.878144][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.885557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.893874][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.900924][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.908277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.916564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.940600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.948902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.956937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.964459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.973414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.981650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.988656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.996165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.004043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.012094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.020034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.028168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.036625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.044744][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.051793][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.059170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.067340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.074966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.082308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.090892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.099109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.108598][ T371] device veth0_vlan entered promiscuous mode [ 28.115387][ T373] device veth0_vlan entered promiscuous mode [ 28.125061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.133241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.148604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.156731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.174508][ T376] device veth0_vlan entered promiscuous mode [ 28.184993][ T373] device veth1_macvtap entered promiscuous mode [ 28.197249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.204877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.213244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.221522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.229285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.237381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.245631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.253864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.262142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.270364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.277727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.287567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.295650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.305722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.314369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.326907][ T377] device veth0_vlan entered promiscuous mode [ 28.334033][ T371] device veth1_macvtap entered promiscuous mode [ 28.345785][ T376] device veth1_macvtap entered promiscuous mode [ 28.357698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.366287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.374321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.382703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.390934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.399185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.409011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.416825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.446243][ T377] device veth1_macvtap entered promiscuous mode [ 28.453488][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.463121][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.472664][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.481175][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.490042][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.498189][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.500698][ T393] ================================================================== [ 28.506539][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.514303][ T393] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 28.514311][ T393] Write of size 8 at addr ffff888113163d50 by task syz.6.18/393 [ 28.514313][ T393] [ 28.514327][ T393] CPU: 0 PID: 393 Comm: syz.6.18 Not tainted syzkaller #0 [ 28.514332][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.514335][ T393] Call Trace: [ 28.514348][ T393] __dump_stack+0x21/0x24 [ 28.514356][ T393] dump_stack_lvl+0x1a7/0x208 [ 28.514364][ T393] ? show_regs_print_info+0x18/0x18 [ 28.514372][ T393] ? thaw_kernel_threads+0x220/0x220 [ 28.514380][ T393] print_address_description+0x7f/0x2c0 [ 28.514388][ T393] ? mutex_lock+0x85/0xf0 [ 28.514397][ T393] kasan_report+0x100/0x140 [ 28.514404][ T393] ? mutex_lock+0x85/0xf0 [ 28.514418][ T393] kasan_check_range+0x249/0x2a0 [ 28.601871][ T393] __kasan_check_write+0x14/0x20 [ 28.606795][ T393] mutex_lock+0x85/0xf0 [ 28.610930][ T393] ? mutex_trylock+0xb0/0xb0 [ 28.615521][ T393] ? l2tp_session_put+0xb2/0x1a0 [ 28.620434][ T393] ? l2tp_session_delete+0x3a9/0x4a0 [ 28.625697][ T393] pppol2tp_release+0x178/0x2b0 [ 28.630549][ T393] sock_close+0xb8/0x200 [ 28.634763][ T393] ? sock_mmap+0xa0/0xa0 [ 28.638976][ T393] __fput+0x2dc/0x730 [ 28.642939][ T393] ____fput+0x15/0x20 [ 28.646984][ T393] task_work_run+0x127/0x190 [ 28.651577][ T393] do_exit+0xa7c/0x24e0 [ 28.655706][ T393] ? __kasan_check_write+0x14/0x20 [ 28.660792][ T393] ? switch_fpu_return+0x19c/0x330 [ 28.665874][ T393] ? put_task_struct+0x90/0x90 [ 28.670605][ T393] ? fpu__clear_all+0x20/0x20 [ 28.675254][ T393] ? __kasan_check_read+0x11/0x20 [ 28.678388][ T416] ------------[ cut here ]------------ [ 28.680258][ T393] __x64_sys_exit+0x40/0x40 [ 28.680268][ T393] do_syscall_64+0x31/0x40 [ 28.680277][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.680285][ T393] RIP: 0033:0x7f476781fe99 [ 28.680290][ T393] Code: Unable to access opcode bytes at RIP 0x7f476781fe6f. [ 28.680296][ T393] RSP: 002b:00007ffd7c4bcd98 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 28.680307][ T393] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f476781fe99 [ 28.680313][ T393] RDX: 00007f47677db017 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.680318][ T393] RBP: 00007f47678b5eaf R08: 0000000000000000 R09: 0000000000000058 [ 28.680323][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.680329][ T393] R13: 00007f4767aa7fac R14: 00007f4767aa7fa0 R15: 00007f4767aa7fa0 [ 28.680333][ T393] [ 28.680338][ T393] Allocated by task 392: [ 28.680347][ T393] __kasan_kmalloc+0xd4/0x100 [ 28.680354][ T393] __kmalloc+0x19f/0x330 [ 28.680363][ T393] l2tp_session_create+0x39/0xb60 [ 28.680369][ T393] pppol2tp_connect+0xbf5/0x1640 [ 28.680377][ T393] __sys_connect+0x3ce/0x450 [ 28.680384][ T393] __x64_sys_connect+0x7a/0x90 [ 28.680390][ T393] do_syscall_64+0x31/0x40 [ 28.680404][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.685849][ T416] WARNING: CPU: 1 PID: 416 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.690307][ T393] [ 28.690311][ T393] Freed by task 393: [ 28.690320][ T393] kasan_set_track+0x4a/0x70 [ 28.690327][ T393] kasan_set_free_info+0x23/0x40 [ 28.690333][ T393] ____kasan_slab_free+0x125/0x160 [ 28.690339][ T393] __kasan_slab_free+0x11/0x20 [ 28.690346][ T393] slab_free_freelist_hook+0xc5/0x190 [ 28.690353][ T393] kfree+0xc0/0x270 [ 28.690360][ T393] l2tp_session_put+0xb2/0x1a0 [ 28.690374][ T393] l2tp_session_delete+0x3a9/0x4a0 [ 28.697286][ T416] Modules linked in: [ 28.700626][ T393] pppol2tp_release+0x169/0x2b0 [ 28.700635][ T393] sock_close+0xb8/0x200 [ 28.700644][ T393] __fput+0x2dc/0x730 [ 28.700650][ T393] ____fput+0x15/0x20 [ 28.700659][ T393] task_work_run+0x127/0x190 [ 28.700666][ T393] do_exit+0xa7c/0x24e0 [ 28.700681][ T393] __ia32_sys_exit+0x0/0x40 [ 28.893872][ T393] do_syscall_64+0x31/0x40 [ 28.898263][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.904123][ T393] [ 28.906428][ T393] The buggy address belongs to the object at ffff888113163c00 [ 28.906428][ T393] which belongs to the cache kmalloc-512 of size 512 [ 28.920452][ T393] The buggy address is located 336 bytes inside of [ 28.920452][ T393] 512-byte region [ffff888113163c00, ffff888113163e00) [ 28.933700][ T393] The buggy address belongs to the page: [ 28.939323][ T393] page:ffffea00044c5800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113160 [ 28.949554][ T393] head:ffffea00044c5800 order:2 compound_mapcount:0 compound_pincount:0 [ 28.957852][ T393] flags: 0x4000000000010200(slab|head) [ 28.963286][ T393] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.971844][ T393] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 28.980406][ T393] page dumped because: kasan: bad access detected [ 28.986794][ T393] page_owner tracks the page as allocated [ 28.992507][ T393] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9, ts 28313849456, free_ts 28304551540 [ 29.010653][ T393] prep_new_page+0x176/0x190 [ 29.015222][ T393] get_page_from_freelist+0x225f/0x23f0 [ 29.020752][ T393] __alloc_pages_nodemask+0x29a/0x640 [ 29.026103][ T393] new_slab+0x84/0x3f0 [ 29.030145][ T393] ___slab_alloc+0x2f8/0x4c0 [ 29.034707][ T393] __slab_alloc+0x63/0xa0 [ 29.039010][ T393] __kmalloc+0x1f9/0x330 [ 29.043231][ T393] ___neigh_create+0x6ec/0x1a70 [ 29.048054][ T393] __neigh_create+0x31/0x40 [ 29.052541][ T393] ip6_finish_output2+0x8fe/0x1540 [ 29.057625][ T393] __ip6_finish_output+0x5fd/0x790 [ 29.062709][ T393] ip6_finish_output+0x33/0x1e0 [ 29.067531][ T393] ip6_output+0x1fa/0x420 [ 29.071833][ T393] mld_sendpack+0x61e/0xb00 [ 29.076307][ T393] mld_ifc_timer_expire+0x862/0xc60 [ 29.081479][ T393] call_timer_fn+0x38/0x290 [ 29.085949][ T393] page last free stack trace: [ 29.090709][ T393] __free_pages_ok+0x80b/0x830 [ 29.095451][ T393] __free_pages+0xd8/0x390 [ 29.099844][ T393] __free_slab+0xcf/0x190 [ 29.104178][ T393] unfreeze_partials+0x150/0x180 [ 29.109096][ T393] put_cpu_partial+0xc1/0x180 [ 29.113754][ T393] __slab_free+0x2c9/0x3a0 [ 29.118144][ T393] ___cache_free+0x10e/0x130 [ 29.122707][ T393] qlink_free+0x50/0x90 [ 29.126837][ T393] qlist_free_all+0x5f/0xb0 [ 29.131319][ T393] kasan_quarantine_reduce+0x14a/0x160 [ 29.136759][ T393] __kasan_slab_alloc+0x2f/0xe0 [ 29.141587][ T393] slab_post_alloc_hook+0x5d/0x2f0 [ 29.146677][ T393] kmem_cache_alloc+0x15a/0x2d0 [ 29.151504][ T393] __alloc_skb+0x9e/0x520 [ 29.155807][ T393] netlink_ack+0x35c/0xb30 [ 29.160198][ T393] netlink_rcv_skb+0x267/0x430 [ 29.164931][ T393] [ 29.167232][ T393] Memory state around the buggy address: [ 29.172838][ T393] ffff888113163c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.180873][ T393] ffff888113163c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.188907][ T393] >ffff888113163d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.196940][ T393] ^ [ 29.203593][ T393] ffff888113163d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.211632][ T393] ffff888113163e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.219667][ T393] ================================================================== [ 29.227701][ T393] Disabling lock debugging due to kernel taint [ 29.248741][ T416] [ 29.251160][ T416] CPU: 0 PID: 416 Comm: syz.6.32 Tainted: G B syzkaller #0 [ 29.260875][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 29.289625][ T416] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.290641][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.304705][ T416] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.316361][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.346886][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.363824][ T416] RSP: 0018:ffffc900013b7c40 EFLAGS: 00010293 [ 29.368491][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.386120][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.387023][ T416] RAX: ffffffff842ec3a7 RBX: ffff8881122ca800 RCX: ffff888113b162c0 [ 29.395018][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.421184][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.428330][ T431] ------------[ cut here ]------------ [ 29.430356][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.436380][ T416] RDX: 0000000000000000 RSI: 000000001333e7a0 RDI: 000000000c04eb7d [ 29.468458][ T431] WARNING: CPU: 0 PID: 431 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.483501][ T440] ------------[ cut here ]------------ [ 29.514294][ T431] Modules linked in: [ 29.518233][ T431] CPU: 1 PID: 431 Comm: syz.2.19 Tainted: G B syzkaller #0 [ 29.529857][ T440] WARNING: CPU: 0 PID: 440 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.540887][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 29.554605][ T431] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.569281][ T431] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.584414][ T416] RBP: ffffc900013b7c60 R08: ffff8881122ca883 R09: 1ffff11022459510 [ 29.592076][ T431] RSP: 0018:ffffc90001307c40 EFLAGS: 00010293 [ 29.603688][ T431] RAX: ffffffff842ec3a7 RBX: ffff888114255000 RCX: ffff888114324f00 [ 29.614607][ T431] RDX: 0000000000000000 RSI: 0000000000060000 RDI: 000000000c04eb7d [ 29.636295][ T431] RBP: ffffc90001307c60 R08: ffff888114255083 R09: 1ffff1102284aa10 [ 29.646544][ T440] Modules linked in: [ 29.662798][ T485] ------------[ cut here ]------------ [ 29.667159][ T440] CPU: 0 PID: 440 Comm: syz.6.38 Tainted: G B syzkaller #0 [ 29.676939][ T485] WARNING: CPU: 1 PID: 485 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.676948][ T485] Modules linked in: [ 29.693447][ T416] R10: dffffc0000000000 R11: ffffed1022459511 R12: dffffc0000000000 [ 29.697310][ T431] R10: dffffc0000000000 R11: ffffed102284aa11 R12: dffffc0000000000 [ 29.703402][ T416] R13: dffffc0000000000 R14: 000000001333e7a0 R15: ffff8881122d0c00 [ 29.710204][ T485] [ 29.733060][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 29.738276][ T495] ------------[ cut here ]------------ [ 29.750811][ T495] WARNING: CPU: 1 PID: 495 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.763326][ T431] R13: dffffc0000000000 R14: 0000000000060000 R15: ffff88812a367c00 [ 29.774857][ T416] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.777372][ T485] CPU: 1 PID: 485 Comm: syz.2.61 Tainted: G B syzkaller #0 [ 29.798212][ T495] Modules linked in: [ 29.822746][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.829975][ T431] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.832994][ T440] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.839055][ T431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.853047][ T495] CPU: 1 PID: 495 Comm: syz.5.21 Tainted: G B syzkaller #0 [ 29.857168][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 29.892586][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 29.902586][ T416] CR2: 00007f78f3202dac CR3: 000000012ab84000 CR4: 00000000003506b0 [ 29.930230][ T495] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.936590][ T495] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 29.947606][ T535] ------------[ cut here ]------------ [ 29.961384][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.964697][ T485] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.975489][ T431] CR2: 00007fc413875dac CR3: 00000001280aa000 CR4: 00000000003506a0 [ 29.992180][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.996770][ T535] WARNING: CPU: 1 PID: 535 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.014467][ T485] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.035783][ T440] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.050168][ T535] Modules linked in: [ 30.059511][ T440] RSP: 0018:ffffc90001407c40 EFLAGS: 00010293 [ 30.065621][ T440] RAX: ffffffff842ec3a7 RBX: ffff888114c64800 RCX: ffff88812a3b13c0 [ 30.075487][ T440] RDX: 0000000000000000 RSI: 00000000148e4f00 RDI: 000000000c04eb7d [ 30.083604][ T440] RBP: ffffc90001407c60 R08: ffff888114c64883 R09: 1ffff1102298c910 [ 30.092090][ T440] R10: dffffc0000000000 R11: ffffed102298c911 R12: dffffc0000000000 [ 30.092700][ T431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.108213][ T440] R13: dffffc0000000000 R14: 00000000148e4f00 R15: ffff888114c7ac00 [ 30.108223][ T440] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.108229][ T440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.108236][ T440] CR2: 00007f47685da060 CR3: 000000012ab84000 CR4: 00000000003506a0 [ 30.108245][ T440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.108251][ T440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.108254][ T440] Call Trace: [ 30.108277][ T440] pppol2tp_release+0x150/0x2b0 [ 30.108287][ T440] sock_close+0xb8/0x200 [ 30.108295][ T440] ? sock_mmap+0xa0/0xa0 [ 30.108305][ T440] __fput+0x2dc/0x730 [ 30.108314][ T440] ____fput+0x15/0x20 [ 30.108331][ T440] task_work_run+0x127/0x190 [ 30.117424][ T416] Call Trace: [ 30.137880][ T495] RSP: 0018:ffffc900046b7c40 EFLAGS: 00010293 [ 30.152419][ T535] CPU: 0 PID: 535 Comm: syz.3.85 Tainted: G B syzkaller #0 [ 30.157904][ T495] [ 30.206390][ T495] RAX: ffffffff842ec3a7 RBX: ffff8881166d4000 RCX: ffff8881165613c0 [ 30.214432][ T535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 30.214514][ T495] RDX: 0000000000000000 RSI: 00000000063eb2c0 RDI: 000000000c04eb7d [ 30.235607][ T495] RBP: ffffc900046b7c60 R08: ffff8881166d4083 R09: 1ffff11022cda810 [ 30.243880][ T495] R10: dffffc0000000000 R11: ffffed1022cda811 R12: dffffc0000000000 [ 30.252422][ T495] R13: dffffc0000000000 R14: 00000000063eb2c0 R15: ffff8881123d9400 [ 30.272946][ T535] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.276638][ T495] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.279308][ T535] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.288371][ T495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.288378][ T495] CR2: 00007f8343cc0010 CR3: 000000012ab84000 CR4: 00000000003506a0 [ 30.288388][ T495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.288395][ T495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.288398][ T495] Call Trace: [ 30.288413][ T495] pppol2tp_release+0x150/0x2b0 [ 30.288429][ T495] sock_close+0xb8/0x200 [ 30.314167][ T597] ------------[ cut here ]------------ [ 30.358977][ T495] ? sock_mmap+0xa0/0xa0 [ 30.362986][ T485] RSP: 0018:ffffc9000477fc40 EFLAGS: 00010293 [ 30.364087][ T431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.377743][ T485] RAX: ffffffff842ec3a7 RBX: ffff888115e29800 RCX: ffff8881163f3b40 [ 30.386496][ T485] RDX: 0000000000000000 RSI: 000000001483f540 RDI: 000000000c04eb7d [ 30.394513][ T485] RBP: ffffc9000477fc60 R08: ffff888115e29883 R09: 1ffff11022bc5310 [ 30.401144][ T440] do_exit+0xa7c/0x24e0 [ 30.406624][ T485] R10: dffffc0000000000 R11: ffffed1022bc5311 R12: dffffc0000000000 [ 30.406639][ T485] R13: dffffc0000000000 R14: 000000001483f540 R15: ffff8881162d2800 [ 30.416062][ T603] ------------[ cut here ]------------ [ 30.423053][ T485] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.437432][ T431] Call Trace: [ 30.438173][ T485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.456644][ T485] CR2: 00007f78f2f33fb0 CR3: 000000000640f000 CR4: 00000000003506a0 [ 30.459880][ T431] pppol2tp_release+0x150/0x2b0 [ 30.465396][ T485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.483380][ T440] ? __kasan_check_write+0x14/0x20 [ 30.488509][ T440] ? switch_fpu_return+0x19c/0x330 [ 30.495535][ T416] pppol2tp_release+0x150/0x2b0 [ 30.496566][ T495] __fput+0x2dc/0x730 [ 30.503535][ T416] sock_close+0xb8/0x200 [ 30.508676][ T416] ? sock_mmap+0xa0/0xa0 [ 30.513979][ T416] __fput+0x2dc/0x730 [ 30.514561][ T598] ------------[ cut here ]------------ [ 30.517969][ T416] ____fput+0x15/0x20 [ 30.524000][ T603] WARNING: CPU: 0 PID: 603 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.527468][ T416] task_work_run+0x127/0x190 [ 30.542018][ T416] do_exit+0xa7c/0x24e0 [ 30.546163][ T416] ? __kasan_check_write+0x14/0x20 [ 30.551283][ T416] ? switch_fpu_return+0x19c/0x330 [ 30.556433][ T416] ? put_task_struct+0x90/0x90 [ 30.560668][ T431] sock_close+0xb8/0x200 [ 30.561439][ T416] ? fpu__clear_all+0x20/0x20 [ 30.570752][ T416] ? __kasan_check_read+0x11/0x20 [ 30.574429][ T440] ? put_task_struct+0x90/0x90 [ 30.575823][ T416] __x64_sys_exit+0x40/0x40 [ 30.583440][ T597] WARNING: CPU: 0 PID: 597 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.595080][ T485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.606160][ T416] do_syscall_64+0x31/0x40 [ 30.609635][ T598] WARNING: CPU: 0 PID: 598 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.620537][ T495] ____fput+0x15/0x20 [ 30.625095][ T495] task_work_run+0x127/0x190 [ 30.629898][ T603] Modules linked in: [ 30.633811][ T603] CPU: 0 PID: 603 Comm: syz.5.104 Tainted: G B syzkaller #0 [ 30.647400][ T431] ? sock_mmap+0xa0/0xa0 [ 30.652721][ T440] ? fpu__clear_all+0x20/0x20 [ 30.657413][ T440] ? __kasan_check_read+0x11/0x20 [ 30.662720][ T597] Modules linked in: [ 30.666636][ T597] CPU: 0 PID: 597 Comm: syz.0.117 Tainted: G B syzkaller #0 [ 30.674337][ T416] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.691769][ T485] Call Trace: [ 30.695072][ T485] pppol2tp_release+0x150/0x2b0 [ 30.699960][ T598] Modules linked in: [ 30.703855][ T598] CPU: 0 PID: 598 Comm: syz.3.116 Tainted: G B syzkaller #0 [ 30.713546][ T629] ------------[ cut here ]------------ [ 30.720299][ T495] do_exit+0xa7c/0x24e0 [ 30.722444][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 30.728553][ T636] ------------[ cut here ]------------ [ 30.735497][ T431] __fput+0x2dc/0x730 [ 30.764882][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 30.774446][ T638] ------------[ cut here ]------------ [ 30.781517][ T416] RIP: 0033:0x7f476781fe99 [ 30.790965][ T495] ? __kasan_check_write+0x14/0x20 [ 30.800539][ T638] WARNING: CPU: 1 PID: 638 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.808088][ T597] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.819395][ T495] ? switch_fpu_return+0x19c/0x330 [ 30.827658][ T440] __x64_sys_exit+0x40/0x40 [ 30.830554][ T416] Code: Unable to access opcode bytes at RIP 0x7f476781fe6f. [ 30.835969][ T629] WARNING: CPU: 0 PID: 629 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.845040][ T535] RSP: 0018:ffffc900045efc40 EFLAGS: 00010293 [ 30.850483][ T485] sock_close+0xb8/0x200 [ 30.856550][ T495] ? put_task_struct+0x90/0x90 [ 30.864933][ T636] WARNING: CPU: 1 PID: 636 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.873036][ T440] do_syscall_64+0x31/0x40 [ 30.881665][ T638] Modules linked in: [ 30.884201][ T597] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 30.886841][ T416] RSP: 002b:00007ffd7c4bcd98 EFLAGS: 00000246 [ 30.905569][ T440] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.910982][ T535] RAX: ffffffff842ec3a7 RBX: ffff888117616800 RCX: ffff8881176e4f00 [ 30.926532][ T440] RIP: 0033:0x7f476781fe99 [ 30.931040][ T495] ? fpu__clear_all+0x20/0x20 [ 30.946894][ T603] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.948376][ T495] ? __kasan_check_read+0x11/0x20 [ 30.957874][ T431] ____fput+0x15/0x20 [ 30.963306][ T659] ------------[ cut here ]------------ [ 30.967419][ T636] Modules linked in: [ 30.968770][ T659] WARNING: CPU: 0 PID: 659 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.968773][ T636] [ 30.968789][ T636] CPU: 1 PID: 636 Comm: syz.0.126 Tainted: G B syzkaller #0 [ 30.982025][ T431] task_work_run+0x127/0x190 [ 30.986415][ T638] CPU: 1 PID: 638 Comm: syz.3.125 Tainted: G B syzkaller #0 [ 30.998708][ T598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.009058][ T495] __x64_sys_exit+0x40/0x40 [ 31.033825][ T636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.044496][ T629] Modules linked in: [ 31.048412][ T629] CPU: 0 PID: 629 Comm: syz.5.130 Tainted: G B syzkaller #0 [ 31.060821][ T535] RDX: 0000000000000000 RSI: 000000000b1330a0 RDI: 000000000c04eb7d [ 31.069322][ T416] ORIG_RAX: 000000000000003c [ 31.073626][ T597] RSP: 0018:ffffc90004907c40 EFLAGS: 00010293 [ 31.077154][ T416] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f476781fe99 [ 31.080119][ T440] Code: Unable to access opcode bytes at RIP 0x7f476781fe6f. [ 31.080125][ T440] RSP: 002b:00007ffd7c4bcd98 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.080136][ T440] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f476781fe99 [ 31.080142][ T440] RDX: 00007f47677db017 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.080147][ T440] RBP: 00007f47678b5eaf R08: 0000000000000000 R09: 0000000000000058 [ 31.080153][ T440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.080160][ T440] R13: 00007f4767aa7fac R14: 00007f4767aa7fa0 R15: 00007f4767aa7fa0 [ 31.080168][ T440] ---[ end trace c360f8024614297d ]--- [ 31.080263][ T659] Modules linked in: [ 31.088919][ T636] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.109142][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.129899][ T681] ------------[ cut here ]------------ [ 31.139478][ T597] RAX: ffffffff842ec3a7 RBX: ffff888119355000 RCX: ffff8881187ce2c0 [ 31.153733][ T416] RDX: 00007f47677db017 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.153739][ T416] RBP: 00007f47678b5eaf R08: 0000000000000000 R09: 0000000000000058 [ 31.153744][ T416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.153750][ T416] R13: 00007f4767aa7fac R14: 00007f4767aa7fa0 R15: 00007f4767aa7fa0 [ 31.153762][ T416] ---[ end trace c360f8024614297e ]--- [ 31.160899][ T431] do_exit+0xa7c/0x24e0 [ 31.171271][ T485] ? sock_mmap+0xa0/0xa0 [ 31.180486][ T431] ? __kasan_check_write+0x14/0x20 [ 31.187677][ T535] RBP: ffffc900045efc60 R08: ffff888117616883 R09: 1ffff11022ec2d10 [ 31.199620][ T659] [ 31.209646][ T697] ------------[ cut here ]------------ [ 31.227672][ T431] ? switch_fpu_return+0x19c/0x330 [ 31.230836][ T485] __fput+0x2dc/0x730 [ 31.252829][ T431] ? put_task_struct+0x90/0x90 [ 31.256680][ T495] do_syscall_64+0x31/0x40 [ 31.269899][ T603] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.285339][ T431] ? fpu__clear_all+0x20/0x20 [ 31.291200][ T697] WARNING: CPU: 1 PID: 697 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.295277][ T629] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.305099][ T636] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.315159][ T597] RDX: 0000000000000000 RSI: 00000000195d2800 RDI: 000000000c04eb7d [ 31.330813][ T485] ____fput+0x15/0x20 [ 31.343289][ T714] ------------[ cut here ]------------ [ 31.344355][ T697] Modules linked in: [ 31.348753][ T714] WARNING: CPU: 0 PID: 714 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.348762][ T714] Modules linked in: [ 31.352874][ T598] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.362672][ T659] CPU: 0 PID: 659 Comm: syz.6.139 Tainted: G B W syzkaller #0 [ 31.368719][ T495] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.379058][ T597] RBP: ffffc90004907c60 R08: ffff888119355083 R09: 1ffff1102326aa10 [ 31.382442][ T697] CPU: 1 PID: 697 Comm: syz.6.155 Tainted: G B W syzkaller #0 [ 31.388931][ T681] WARNING: CPU: 0 PID: 681 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.395934][ T495] RIP: 0033:0x7f78f2f78e99 [ 31.406928][ T629] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.414310][ T485] task_work_run+0x127/0x190 [ 31.425663][ T431] ? __kasan_check_read+0x11/0x20 [ 31.438494][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.458471][ T598] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.469065][ T597] R10: dffffc0000000000 R11: ffffed102326aa11 R12: dffffc0000000000 [ 31.478430][ T603] RSP: 0018:ffffc900014d7c40 EFLAGS: 00010293 [ 31.486200][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.486217][ T638] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.486226][ T638] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.486232][ T638] RSP: 0018:ffffc9000479fc40 EFLAGS: 00010293 [ 31.494860][ T636] RSP: 0018:ffffc90004ab7c40 EFLAGS: 00010293 [ 31.510456][ T659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.528804][ T495] Code: Unable to access opcode bytes at RIP 0x7f78f2f78e6f. [ 31.541456][ T629] RSP: 0018:ffffc900047cfc40 EFLAGS: 00010293 [ 31.551436][ T697] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.558645][ T431] __x64_sys_exit+0x40/0x40 [ 31.564778][ T598] RSP: 0018:ffffc900048c7c40 EFLAGS: 00010293 [ 31.572877][ T681] Modules linked in: [ 31.576516][ T726] ------------[ cut here ]------------ [ 31.584561][ T597] R13: dffffc0000000000 R14: 00000000195d2800 R15: ffff888116ba2400 [ 31.587816][ T714] [ 31.598885][ T638] RAX: ffffffff842ec3a7 RBX: ffff888117c50800 RCX: ffff88811a7b0000 [ 31.601604][ T598] [ 31.610043][ T659] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.614571][ T697] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.617915][ T597] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.637888][ T603] [ 31.655809][ T431] do_syscall_64+0x31/0x40 [ 31.670721][ T731] ------------[ cut here ]------------ [ 31.671227][ T535] R10: dffffc0000000000 R11: ffffed1022ec2d11 R12: dffffc0000000000 [ 31.676216][ T731] WARNING: CPU: 0 PID: 731 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.685197][ T728] ------------[ cut here ]------------ [ 31.698783][ T681] [ 31.700506][ T726] WARNING: CPU: 1 PID: 726 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.706936][ T681] CPU: 0 PID: 681 Comm: syz.3.146 Tainted: G B W syzkaller #0 [ 31.717153][ T715] ------------[ cut here ]------------ [ 31.723356][ T431] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.740698][ T629] [ 31.743080][ T629] RAX: ffffffff842ec3a7 RBX: ffff888116982800 RCX: ffff88811a35e2c0 [ 31.751897][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.755721][ T598] RAX: ffffffff842ec3a7 RBX: ffff8881194fa000 RCX: ffff8881187c8000 [ 31.758488][ T597] CR2: 00005555856c84e8 CR3: 000000010e9ed000 CR4: 00000000003506b0 [ 31.769210][ T728] WARNING: CPU: 1 PID: 728 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.794372][ T431] RIP: 0033:0x7f8343d04e99 [ 31.796725][ T636] [ 31.798811][ T431] Code: Unable to access opcode bytes at RIP 0x7f8343d04e6f. [ 31.801689][ T603] RAX: ffffffff842ec3a7 RBX: ffff8881194fc800 RCX: ffff888119c74f00 2026/07/23 21:59:09 executed programs: 187 [ 31.813994][ T659] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 31.821266][ T697] RSP: 0018:ffffc90004c97c40 EFLAGS: 00010293 [ 31.836179][ T715] WARNING: CPU: 1 PID: 715 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.838040][ T638] RDX: 0000000000000000 RSI: 000000001a5a4f00 RDI: 000000000c04eb7d [ 31.842644][ T535] R13: dffffc0000000000 R14: 000000000b1330a0 R15: ffff888117678800 [ 31.856925][ T629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 31.864758][ T636] RAX: ffffffff842ec3a7 RBX: ffff888117c50000 RCX: ffff88811a7b2780 [ 31.876903][ T731] Modules linked in: [ 31.888325][ T495] RSP: 002b:00007fff7d8c54b8 EFLAGS: 00000246 [ 31.889001][ T714] CPU: 1 PID: 714 Comm: syz.2.171 Tainted: G B W syzkaller #0 [ 31.896606][ T485] do_exit+0xa7c/0x24e0 [ 31.902366][ T726] Modules linked in: [ 31.911288][ T495] ORIG_RAX: 000000000000003c [ 31.911366][ T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.916135][ T751] ------------[ cut here ]------------ [ 31.927689][ T659] RSP: 0018:ffffc90004cefc40 EFLAGS: 00010293 [ 31.937888][ T715] Modules linked in: [ 31.939875][ T681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.946449][ T697] [ 31.959897][ T597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.964884][ T714] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.973667][ T681] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.978365][ T603] RDX: 0000000000000000 RSI: 0000000008797c80 RDI: 000000000c04eb7d [ 31.981952][ T731] [ 31.989061][ T715] [ 31.993635][ T431] RSP: 002b:00007ffe5bb21498 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.997726][ T726] [ 32.005914][ T629] RBP: ffffc900047cfc60 R08: ffff888116982883 R09: 1ffff11022d30510 [ 32.014818][ T49] device bridge_slave_1 left promiscuous mode [ 32.020977][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.020995][ T715] CPU: 1 PID: 715 Comm: syz.0.172 Tainted: G B W syzkaller #0 [ 32.033393][ T597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.040690][ T598] RDX: 0000000000000000 RSI: 0000000014887d60 RDI: 000000000c04eb7d [ 32.048180][ T638] RBP: ffffc9000479fc60 R08: ffff888117c50883 R09: 1ffff11022f8a110 [ 32.052745][ T603] RBP: ffffc900014d7c60 R08: ffff8881194fc883 R09: 1ffff1102329f910 [ 32.067005][ T766] ------------[ cut here ]------------ [ 32.072951][ T728] Modules linked in: [ 32.074394][ T49] device bridge_slave_0 left promiscuous mode [ 32.077895][ T728] CPU: 1 PID: 728 Comm: syz.2.178 Tainted: G B W syzkaller #0 [ 32.085872][ T659] [ 32.098364][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.106434][ T495] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78f2f78e99 [ 32.118617][ T726] CPU: 1 PID: 726 Comm: syz.5.164 Tainted: G B W syzkaller #0 [ 32.121087][ T766] WARNING: CPU: 0 PID: 766 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.138434][ T49] device veth1_macvtap left promiscuous mode [ 32.147365][ T731] CPU: 0 PID: 731 Comm: syz.6.173 Tainted: G B W syzkaller #0 [ 32.156960][ T770] ------------[ cut here ]------------ [ 32.157366][ T751] WARNING: CPU: 1 PID: 751 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.162751][ T49] device veth0_vlan left promiscuous mode [ 32.178625][ T636] RDX: 0000000000000000 RSI: 0000000015f78b00 RDI: 000000000c04eb7d [ 32.178742][ T629] R10: dffffc0000000000 R11: ffffed1022d30511 R12: dffffc0000000000 [ 32.187908][ T775] ------------[ cut here ]------------ [ 32.198940][ T659] RAX: ffffffff842ec3a7 RBX: ffff8881131cf000 RCX: ffff88811aa94f00 [ 32.204431][ T535] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.208275][ T659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 32.220291][ T697] RAX: ffffffff842ec3a7 RBX: ffff88811d174800 RCX: ffff88811a9b3b40 [ 32.226051][ T681] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.233772][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.254896][ T597] Call Trace: [ 32.267071][ T789] ------------[ cut here ]------------ [ 32.268790][ T485] ? __kasan_check_write+0x14/0x20 [ 32.276646][ T603] R10: dffffc0000000000 R11: ffffed102329f911 R12: dffffc0000000000 [ 32.282867][ T431] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8343d04e99 [ 32.290310][ T789] WARNING: CPU: 1 PID: 789 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.296172][ T495] RDX: 00007f78f2f34017 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.328937][ T770] WARNING: CPU: 0 PID: 770 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.334936][ T598] RBP: ffffc900048c7c60 R08: ffff8881194fa083 R09: 1ffff1102329f410 [ 32.339034][ T485] ? switch_fpu_return+0x19c/0x330 [ 32.347106][ T726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.357359][ T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.362764][ T714] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.392690][ T697] RDX: 0000000000000000 RSI: 000000000dfb4500 RDI: 000000000c04eb7d [ 32.404665][ T799] ------------[ cut here ]------------ [ 32.420415][ T535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.427019][ T535] CR2: 00007fc4143a6060 CR3: 000000012951b000 CR4: 00000000003506a0 [ 32.427674][ T770] Modules linked in: [ 32.435354][ T697] RBP: ffffc90004c97c60 R08: ffff88811d174883 R09: 1ffff11023a2e910 [ 32.436945][ T766] Modules linked in: [ 32.439239][ T697] R10: dffffc0000000000 R11: ffffed1023a2e911 R12: dffffc0000000000 [ 32.439246][ T697] R13: dffffc0000000000 R14: 000000000dfb4500 R15: ffff88811c7d5400 [ 32.439260][ T697] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.450323][ T629] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811a715000 [ 32.451772][ T636] RBP: ffffc90004ab7c60 R08: ffff888117c50083 R09: 1ffff11022f8a010 [ 32.459160][ T629] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.467375][ T775] WARNING: CPU: 1 PID: 775 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.502362][ T597] pppol2tp_release+0x150/0x2b0 [ 32.511387][ T598] R10: dffffc0000000000 R11: ffffed102329f411 R12: dffffc0000000000 [ 32.516317][ T731] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.524257][ T638] R10: dffffc0000000000 R11: ffffed1022f8a111 R12: dffffc0000000000 [ 32.530346][ T431] RDX: 00007f8343cc0017 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.530390][ T431] RBP: 00007f8343d9aeaf R08: 0000000000000000 R09: 0000000000000058 [ 32.538600][ T697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.549670][ T803] ------------[ cut here ]------------ [ 32.555309][ T789] Modules linked in: [ 32.566589][ T799] WARNING: CPU: 1 PID: 799 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.579064][ T770] [ 32.581130][ T697] CR2: 00007fc41383b2f8 CR3: 000000012ab84000 CR4: 00000000003506a0 [ 32.591240][ T638] R13: dffffc0000000000 R14: 000000001a5a4f00 R15: ffff88811a998c00 [ 32.591693][ T731] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.599236][ T638] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.619978][ T770] CPU: 0 PID: 770 Comm: syz.0.200 Tainted: G B W syzkaller #0 [ 32.630877][ T659] RBP: ffffc90004cefc60 R08: ffff8881131cf083 R09: 1ffff11022639e10 [ 32.643496][ T728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.646976][ T697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.656673][ T751] Modules linked in: [ 32.662800][ T495] RBP: 00007f78f300eeaf R08: 0000000000000000 R09: 0000000000000058 [ 32.662968][ T714] RSP: 0018:ffffc90000e87c40 EFLAGS: 00010293 [ 32.674756][ T603] R13: dffffc0000000000 R14: 0000000008797c80 R15: ffff888116ba3800 [ 32.674773][ T603] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.691502][ T726] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.700868][ T485] ? put_task_struct+0x90/0x90 [ 32.708910][ T485] ? fpu__clear_all+0x20/0x20 [ 32.708931][ T636] R10: dffffc0000000000 R11: ffffed1022f8a011 R12: dffffc0000000000 [ 32.714116][ T751] [ 32.721857][ T789] [ 32.726369][ T726] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 32.731048][ T597] sock_close+0xb8/0x200 [ 32.746290][ T659] R10: dffffc0000000000 R11: ffffed1022639e11 R12: dffffc0000000000 [ 32.750424][ T803] WARNING: CPU: 0 PID: 803 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.758431][ T598] R13: dffffc0000000000 R14: 0000000014887d60 R15: ffff888116ba0800 [ 32.774132][ T751] CPU: 0 PID: 751 Comm: syz.3.186 Tainted: G B W syzkaller #0 [ 32.776465][ T799] Modules linked in: [ 32.784770][ T659] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811ad38c00 [ 32.795676][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.797048][ T799] [ 32.807083][ T766] [ 32.809952][ T789] CPU: 1 PID: 789 Comm: syz.3.207 Tainted: G B W syzkaller #0 [ 32.813897][ T766] CPU: 0 PID: 766 Comm: syz.2.198 Tainted: G B W syzkaller #0 [ 32.819433][ T697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.829812][ T770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.837064][ T535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.847190][ T731] RSP: 0018:ffffc90000f4fc40 EFLAGS: 00010293 [ 32.855600][ T714] [ 32.866019][ T823] ------------[ cut here ]------------ [ 32.871593][ T636] R13: dffffc0000000000 R14: 0000000015f78b00 R15: ffff88811a998000 [ 32.874112][ T495] R13: 00007f78f3200fac R14: 00007f78f3200fa0 R15: 00007f78f3200fa0 [ 32.879564][ T636] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.890098][ T728] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.896897][ T726] RSP: 0018:ffffc90000dc7c40 EFLAGS: 00010293 [ 32.902966][ T659] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.910003][ T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.918310][ T714] RAX: ffffffff842ec3a7 RBX: ffff88811dc43000 RCX: ffff88811e1fe2c0 [ 32.928525][ T731] [ 32.936240][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.944968][ T731] RAX: ffffffff842ec3a7 RBX: ffff888106dcd800 RCX: ffff88811cd062c0 [ 32.948645][ T823] WARNING: CPU: 1 PID: 823 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.956519][ T731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 32.956533][ T731] RBP: ffffc90000f4fc60 R08: ffff888106dcd883 R09: 1ffff11020db9b10 [ 32.972746][ T681] RSP: 0018:ffffc90000d87c40 EFLAGS: 00010293 [ 32.982523][ T775] Modules linked in: [ 32.983166][ T638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.988787][ T697] Call Trace: [ 32.993499][ T638] CR2: 00007fc41383b2f8 CR3: 000000010d51d000 CR4: 00000000003506a0 [ 33.000018][ T751] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.002415][ T638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.010699][ T629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.016644][ T638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.025690][ T799] CPU: 1 PID: 799 Comm: syz.0.208 Tainted: G B W syzkaller #0 [ 33.040108][ T638] Call Trace: [ 33.049988][ T731] R10: dffffc0000000000 R11: ffffed1020db9b11 R12: dffffc0000000000 [ 33.051315][ T638] pppol2tp_release+0x150/0x2b0 [ 33.075080][ T598] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.080322][ T603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.084509][ T598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.093045][ T837] ------------[ cut here ]------------ [ 33.097190][ T598] CR2: 00007f47685da060 CR3: 000000000640f000 CR4: 00000000003506b0 [ 33.110692][ T598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.118881][ T598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.126902][ T598] Call Trace: [ 33.131185][ T598] pppol2tp_release+0x150/0x2b0 [ 33.135876][ T770] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.145397][ T495] ---[ end trace c360f8024614297f ]--- [ 33.151225][ T838] ------------[ cut here ]------------ [ 33.156715][ T838] WARNING: CPU: 1 PID: 838 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.173118][ T638] sock_close+0xb8/0x200 [ 33.175318][ T598] sock_close+0xb8/0x200 [ 33.179783][ T638] ? sock_mmap+0xa0/0xa0 [ 33.186739][ T833] ------------[ cut here ]------------ [ 33.192310][ T597] ? sock_mmap+0xa0/0xa0 [ 33.196576][ T597] __fput+0x2dc/0x730 [ 33.200785][ T726] [ 33.203132][ T726] RAX: ffffffff842ec3a7 RBX: ffff88811d39f000 RCX: ffff88811b2993c0 [ 33.211154][ T823] Modules linked in: [ 33.211172][ T823] CPU: 0 PID: 823 Comm: syz.5.224 Tainted: G B W syzkaller #0 [ 33.211176][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.211191][ T823] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.211198][ T823] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.211205][ T823] RSP: 0018:ffffc900013a7c40 EFLAGS: 00010293 [ 33.211215][ T823] RAX: ffffffff842ec3a7 RBX: ffff888126c8f800 RCX: ffff88812ccf2780 [ 33.211221][ T823] RDX: 0000000000000000 RSI: 000000002c92a800 RDI: 000000000c04eb7d [ 33.211227][ T823] RBP: ffffc900013a7c60 R08: ffff888126c8f883 R09: 1ffff11024d91f10 [ 33.211234][ T823] R10: dffffc0000000000 R11: ffffed1024d91f11 R12: dffffc0000000000 [ 33.211240][ T823] R13: dffffc0000000000 R14: 000000002c92a800 R15: ffff88810add5800 [ 33.211248][ T823] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.211254][ T823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.211260][ T823] CR2: 00007ffd7c4bd084 CR3: 000000012ab84000 CR4: 00000000003506b0 [ 33.211270][ T823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.211276][ T823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.211278][ T823] Call Trace: [ 33.211288][ T823] pppol2tp_release+0x150/0x2b0 [ 33.211298][ T823] sock_close+0xb8/0x200 [ 33.211306][ T823] ? sock_mmap+0xa0/0xa0 [ 33.211315][ T823] __fput+0x2dc/0x730 [ 33.211330][ T823] ____fput+0x15/0x20 [ 33.242413][ T837] WARNING: CPU: 1 PID: 837 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.260274][ T728] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.260289][ T728] RSP: 0018:ffffc90000e17c40 EFLAGS: 00010293 [ 33.271192][ T431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.288098][ T659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.292521][ T775] [ 33.302483][ T681] [ 33.306675][ T715] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.320668][ T854] ------------[ cut here ]------------ [ 33.322095][ T731] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811d063000 [ 33.338597][ T855] ------------[ cut here ]------------ [ 33.379850][ T775] CPU: 1 PID: 775 Comm: syz.5.197 Tainted: G B W syzkaller #0 [ 33.384360][ T770] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.400582][ T833] WARNING: CPU: 1 PID: 833 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.407349][ T751] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.414541][ T597] ____fput+0x15/0x20 [ 33.423936][ T714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 33.460238][ T638] __fput+0x2dc/0x730 [ 33.481078][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.493589][ T715] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.510029][ T789] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.530514][ T731] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.537898][ T697] pppol2tp_release+0x150/0x2b0 [ 33.557374][ T833] Modules linked in: [ 33.561798][ T838] Modules linked in: [ 33.571914][ T728] [ 33.588904][ T770] RSP: 0018:ffffc900012e7c40 EFLAGS: 00010293 [ 33.595356][ T535] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.603474][ T854] WARNING: CPU: 1 PID: 854 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.613549][ T838] [ 33.613560][ T838] CPU: 0 PID: 838 Comm: syz.6.228 Tainted: G B W syzkaller #0 [ 33.613566][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.613581][ T838] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.613590][ T838] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 33.613596][ T838] RSP: 0018:ffffc900016afc40 EFLAGS: 00010293 [ 33.613606][ T838] RAX: ffffffff842ec3a7 RBX: ffff88812abcf000 RCX: ffff88812b3b13c0 [ 33.613612][ T838] RDX: 0000000000000000 RSI: 000000000d500ec0 RDI: 000000000c04eb7d [ 33.613619][ T838] RBP: ffffc900016afc60 R08: ffff88812abcf083 R09: 1ffff11025579e10 [ 33.613626][ T838] R10: dffffc0000000000 R11: ffffed1025579e11 R12: dffffc0000000000 [ 33.613631][ T838] R13: dffffc0000000000 R14: 000000000d500ec0 R15: ffff88812843b800 [ 33.613639][ T838] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.613645][ T838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.613652][ T838] CR2: 00007f47685d7690 CR3: 000000010d6e0000 CR4: 00000000003506b0 [ 33.613662][ T838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.613667][ T838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.613670][ T838] Call Trace: [ 33.613681][ T838] pppol2tp_release+0x150/0x2b0 [ 33.613691][ T838] sock_close+0xb8/0x200 [ 33.613700][ T838] ? sock_mmap+0xa0/0xa0 [ 33.613710][ T838] __fput+0x2dc/0x730 [ 33.613720][ T838] ____fput+0x15/0x20 [ 33.613728][ T838] task_work_run+0x127/0x190 [ 33.613739][ T838] do_exit+0xa7c/0x24e0 [ 33.613749][ T838] ? __kasan_check_write+0x14/0x20 [ 33.613766][ T838] ? switch_fpu_return+0x19c/0x330 [ 33.617759][ T862] ------------[ cut here ]------------ [ 33.627571][ T485] ? __kasan_check_read+0x11/0x20 [ 33.636506][ T726] RDX: 0000000000000000 RSI: 0000000017b48a00 RDI: 000000000c04eb7d [ 33.658882][ T770] RAX: ffffffff842ec3a7 RBX: ffff88810abce000 RCX: ffff88810099e2c0 [ 33.661184][ T597] task_work_run+0x127/0x190 [ 33.685818][ T431] R13: 00007f8343f8cfac R14: 00007f8343f8cfa0 R15: 00007f8343f8cfa0 [ 33.692380][ T874] ------------[ cut here ]------------ [ 33.721609][ T770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 33.726349][ T659] CR2: 00007f8343cc0010 CR3: 000000010d6e0000 CR4: 00000000003506a0 [ 33.753988][ T697] sock_close+0xb8/0x200 [ 33.765943][ T535] Call Trace: [ 33.771438][ T751] RSP: 0018:ffffc90000e37c40 EFLAGS: 00010293 [ 33.771449][ T751] RAX: ffffffff842ec3a7 RBX: ffff8881211bc000 RCX: ffff88811d2c2780 [ 33.771454][ T751] RDX: 0000000000000000 RSI: 0000000017b48140 RDI: 000000000c04eb7d [ 33.771461][ T751] RBP: ffffc90000e37c60 R08: ffff8881211bc083 R09: 1ffff11024237810 [ 33.771467][ T751] R10: dffffc0000000000 R11: ffffed1024237811 R12: dffffc0000000000 [ 33.771472][ T751] R13: dffffc0000000000 R14: 0000000017b48140 R15: ffff88811bd14c00 [ 33.771479][ T751] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.771486][ T751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.771492][ T751] CR2: 00007f47685da060 CR3: 000000000640f000 CR4: 00000000003506b0 [ 33.771502][ T751] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.771507][ T751] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.771510][ T751] Call Trace: [ 33.771525][ T751] pppol2tp_release+0x150/0x2b0 [ 33.771536][ T751] sock_close+0xb8/0x200 [ 33.771544][ T751] ? sock_mmap+0xa0/0xa0 [ 33.771554][ T751] __fput+0x2dc/0x730 [ 33.771563][ T751] ____fput+0x15/0x20 [ 33.771572][ T751] task_work_run+0x127/0x190 [ 33.771588][ T751] do_exit+0xa7c/0x24e0 [ 33.776499][ T854] Modules linked in: [ 33.787076][ T766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.793220][ T823] task_work_run+0x127/0x190 [ 33.806733][ T838] ? put_task_struct+0x90/0x90 [ 33.812112][ T681] RAX: ffffffff842ec3a7 RBX: ffff888114016000 RCX: ffff88811acda780 [ 33.823745][ T598] ? sock_mmap+0xa0/0xa0 [ 33.832789][ T728] RAX: ffffffff842ec3a7 RBX: ffff88811de6e000 RCX: ffff88810f4fa780 [ 33.838942][ T770] RBP: ffffc900012e7c60 R08: ffff88810abce083 R09: 1ffff11021579c10 [ 33.843230][ T636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.853730][ T847] ------------[ cut here ]------------ [ 33.856288][ T862] WARNING: CPU: 1 PID: 862 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.859105][ T803] Modules linked in: [ 33.865400][ T726] RBP: ffffc90000dc7c60 R08: ffff88811d39f083 R09: 1ffff11023a73e10 [ 33.874825][ T838] ? fpu__clear_all+0x20/0x20 [ 33.882086][ T715] RSP: 0018:ffffc90004a37c40 EFLAGS: 00010293 [ 33.889187][ T847] WARNING: CPU: 0 PID: 847 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.897251][ T833] [ 33.909791][ T799] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.915714][ T535] pppol2tp_release+0x150/0x2b0 [ 33.921622][ T751] ? __kasan_check_write+0x14/0x20 [ 33.929539][ T636] CR2: 00007f8343cc0010 CR3: 000000010e9ed000 CR4: 00000000003506a0 [ 33.960102][ T914] ------------[ cut here ]------------ [ 33.963393][ T659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.965496][ T914] WARNING: CPU: 0 PID: 914 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.969451][ T659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.974289][ T775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.978488][ T823] do_exit+0xa7c/0x24e0 [ 33.983810][ T697] ? sock_mmap+0xa0/0xa0 [ 33.992324][ T833] CPU: 1 PID: 833 Comm: syz.2.232 Tainted: G B W syzkaller #0 [ 34.011327][ T485] __x64_sys_exit+0x40/0x40 [ 34.015463][ T862] Modules linked in: [ 34.024423][ T775] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.029955][ T855] WARNING: CPU: 1 PID: 855 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.045291][ T916] ------------[ cut here ]------------ [ 34.054537][ T603] CR2: 00007fc4143a6060 CR3: 000000012710d000 CR4: 00000000003506b0 [ 34.060603][ T770] R10: dffffc0000000000 R11: ffffed1021579c11 R12: dffffc0000000000 [ 34.064173][ T681] RDX: 0000000000000000 RSI: 000000001a25b100 RDI: 000000000c04eb7d [ 34.068955][ T906] ------------[ cut here ]------------ [ 34.076344][ T726] R10: dffffc0000000000 R11: ffffed1023a73e11 R12: dffffc0000000000 [ 34.086147][ T728] RDX: 0000000000000000 RSI: 000000001e2d24e0 RDI: 000000000c04eb7d [ 34.087251][ T854] [ 34.093826][ T770] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881002f0c00 [ 34.101213][ T789] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.104307][ T775] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.111760][ T854] CPU: 1 PID: 854 Comm: syz.0.239 Tainted: G B W syzkaller #0 [ 34.141456][ T731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.143064][ T629] CR2: 00007f78f2f33fb0 CR3: 000000011637a000 CR4: 00000000003506b0 [ 34.153126][ T431] ---[ end trace c360f80246142980 ]--- [ 34.157230][ T837] Modules linked in: [ 34.161751][ T766] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.170164][ T823] ? __kasan_check_write+0x14/0x20 [ 34.175351][ T597] do_exit+0xa7c/0x24e0 [ 34.178594][ T659] Call Trace: [ 34.194414][ T598] __fput+0x2dc/0x730 [ 34.194995][ T603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.216696][ T916] WARNING: CPU: 0 PID: 916 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.226698][ T535] sock_close+0xb8/0x200 [ 34.260975][ T847] Modules linked in: [ 34.275805][ T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.314931][ T874] WARNING: CPU: 0 PID: 874 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.321339][ T926] ------------[ cut here ]------------ [ 34.344053][ T638] ____fput+0x15/0x20 [ 34.346921][ T855] Modules linked in: [ 34.351737][ T799] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.358931][ T726] R13: dffffc0000000000 R14: 0000000017b48a00 R15: ffff88811cf9a800 [ 34.389763][ T728] RBP: ffffc90000e17c60 R08: ffff88811de6e083 R09: 1ffff11023bcdc10 [ 34.397344][ T715] [ 34.407110][ T598] ____fput+0x15/0x20 [ 34.410880][ T659] pppol2tp_release+0x150/0x2b0 [ 34.436362][ T731] CR2: 0000555563519908 CR3: 000000010de03000 CR4: 00000000003506a0 [ 34.446805][ T715] RAX: ffffffff842ec3a7 RBX: ffff88811b853000 RCX: ffff88811e1fa780 [ 34.453934][ T485] do_syscall_64+0x31/0x40 [ 34.461231][ T926] WARNING: CPU: 1 PID: 926 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.465692][ T697] __fput+0x2dc/0x730 [ 34.473181][ T715] RDX: 0000000000000000 RSI: 000000000cfc8460 RDI: 000000000c04eb7d [ 34.478244][ T770] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.488097][ T789] RSP: 0018:ffffc90000d97c40 EFLAGS: 00010293 [ 34.496562][ T714] RBP: ffffc90000e87c60 R08: ffff88811dc43083 R09: 1ffff11023b88610 [ 34.503793][ T681] RBP: ffffc90000d87c60 R08: ffff888114016083 R09: 1ffff11022802c10 [ 34.512197][ T916] Modules linked in: [ 34.514802][ T914] Modules linked in: [ 34.527302][ T636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.534269][ T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.543621][ T766] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.553708][ T823] ? switch_fpu_return+0x19c/0x330 [ 34.565744][ T597] ? __kasan_check_write+0x14/0x20 [ 34.585889][ T906] WARNING: CPU: 1 PID: 906 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.589544][ T940] ------------[ cut here ]------------ [ 34.596759][ T855] [ 34.605211][ T629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.609588][ T926] Modules linked in: [ 34.614575][ T935] ------------[ cut here ]------------ [ 34.615994][ T681] R10: dffffc0000000000 R11: ffffed1022802c11 R12: dffffc0000000000 [ 34.618507][ T935] WARNING: CPU: 0 PID: 935 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.624255][ T838] ? __kasan_check_read+0x11/0x20 [ 34.632380][ T629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.642088][ T926] [ 34.649322][ T862] [ 34.659035][ T803] [ 34.662244][ T874] Modules linked in: [ 34.664401][ T942] ------------[ cut here ]------------ [ 34.666273][ T775] RSP: 0018:ffffc90001077c40 EFLAGS: 00010293 [ 34.671609][ T789] [ 34.674150][ T636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.681659][ T638] task_work_run+0x127/0x190 [ 34.693681][ T731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.696119][ T803] CPU: 1 PID: 803 Comm: syz.2.216 Tainted: G B W syzkaller #0 [ 34.707924][ T837] [ 34.714589][ T485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.716852][ T775] [ 34.721860][ T837] CPU: 0 PID: 837 Comm: syz.3.234 Tainted: G B W syzkaller #0 [ 34.723102][ T775] RAX: ffffffff842ec3a7 RBX: ffff88810ad7f000 RCX: ffff88811d2c4f00 [ 34.733115][ T933] ------------[ cut here ]------------ [ 34.740193][ T855] CPU: 1 PID: 855 Comm: syz.6.238 Tainted: G B W syzkaller #0 [ 34.748004][ T697] ____fput+0x15/0x20 [ 34.754695][ T937] ------------[ cut here ]------------ [ 34.759895][ T714] R10: dffffc0000000000 R11: ffffed1023b88611 R12: dffffc0000000000 [ 34.766747][ T715] RBP: ffffc90004a37c60 R08: ffff88811b853083 R09: 1ffff1102370a610 [ 34.783050][ T751] ? switch_fpu_return+0x19c/0x330 [ 34.788314][ T942] WARNING: CPU: 0 PID: 942 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.791762][ T789] RAX: ffffffff842ec3a7 RBX: ffff88811b857800 RCX: ffff888109b22780 [ 34.802631][ T862] CPU: 0 PID: 862 Comm: syz.3.237 Tainted: G B W syzkaller #0 [ 34.810528][ T728] R10: dffffc0000000000 R11: ffffed1023bcdc11 R12: dffffc0000000000 [ 34.822493][ T629] Call Trace: [ 34.826211][ T770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.827133][ T949] ------------[ cut here ]------------ [ 34.838922][ T603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.842490][ T855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.849108][ T935] Modules linked in: [ 34.860949][ T854] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.871316][ T629] pppol2tp_release+0x150/0x2b0 [ 34.878040][ T916] [ 34.882913][ T823] ? put_task_struct+0x90/0x90 [ 34.884482][ T597] ? switch_fpu_return+0x19c/0x330 [ 34.892430][ T906] Modules linked in: [ 34.894467][ T968] ------------[ cut here ]------------ [ 34.896940][ T906] CPU: 1 PID: 906 Comm: syz.3.255 Tainted: G B W syzkaller #0 [ 34.909793][ T629] sock_close+0xb8/0x200 [ 34.915036][ T629] ? sock_mmap+0xa0/0xa0 [ 34.915773][ T847] [ 34.919441][ T940] WARNING: CPU: 0 PID: 940 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.921602][ T874] CPU: 1 PID: 874 Comm: syz.2.233 Tainted: G B W syzkaller #0 [ 34.921607][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.921618][ T874] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.921626][ T874] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 34.921633][ T874] RSP: 0018:ffffc9000176fc40 EFLAGS: 00010293 [ 34.921643][ T874] RAX: ffffffff842ec3a7 RBX: ffff88810b0e6000 RCX: ffff88812b2a8000 [ 34.921650][ T874] RDX: 0000000000000000 RSI: 000000000af05f80 RDI: 000000000c04eb7d [ 34.921657][ T874] RBP: ffffc9000176fc60 R08: ffff88810b0e6083 R09: 1ffff1102161cc10 [ 34.921663][ T874] R10: dffffc0000000000 R11: ffffed102161cc11 R12: dffffc0000000000 [ 34.921676][ T874] R13: dffffc0000000000 R14: 000000000af05f80 R15: ffff88810b182400 [ 34.932944][ T937] WARNING: CPU: 0 PID: 937 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.940606][ T799] RSP: 0018:ffffc90001447c40 EFLAGS: 00010293 [ 34.951343][ T485] RIP: 0033:0x7f8343d04e99 [ 34.956780][ T949] WARNING: CPU: 1 PID: 949 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.977624][ T636] Call Trace: [ 34.982699][ T751] ? put_task_struct+0x90/0x90 [ 34.991010][ T916] CPU: 0 PID: 916 Comm: syz.6.266 Tainted: G B W syzkaller #0 [ 34.998846][ T659] sock_close+0xb8/0x200 [ 35.007053][ T933] WARNING: CPU: 0 PID: 933 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.016257][ T598] task_work_run+0x127/0x190 [ 35.024559][ T838] __x64_sys_exit+0x40/0x40 [ 35.033780][ T966] ------------[ cut here ]------------ [ 35.038961][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.045855][ T715] R10: dffffc0000000000 R11: ffffed102370a611 R12: dffffc0000000000 [ 35.058275][ T770] CR2: 00007f6e6154e060 CR3: 000000010e9ed000 CR4: 00000000003506b0 [ 35.061663][ T766] RSP: 0018:ffffc90001037c40 EFLAGS: 00010293 [ 35.076138][ T731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.088376][ T823] ? fpu__clear_all+0x20/0x20 [ 35.089442][ T603] Call Trace: [ 35.094608][ T997] ------------[ cut here ]------------ [ 35.104860][ T714] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811d18e800 [ 35.111422][ T775] RDX: 0000000000000000 RSI: 0000000017b48760 RDI: 000000000c04eb7d [ 35.123583][ T603] pppol2tp_release+0x150/0x2b0 [ 35.125277][ T966] WARNING: CPU: 1 PID: 966 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.150993][ T681] R13: dffffc0000000000 R14: 000000001a25b100 R15: ffff88811c78d400 [ 35.153797][ T855] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.169762][ T697] task_work_run+0x127/0x190 [ 35.177038][ T638] do_exit+0xa7c/0x24e0 [ 35.184508][ T926] CPU: 0 PID: 926 Comm: syz.0.274 Tainted: G B W syzkaller #0 [ 35.193974][ T847] CPU: 1 PID: 847 Comm: syz.5.231 Tainted: G B W syzkaller #0 [ 35.210778][ T935] [ 35.216392][ T968] WARNING: CPU: 1 PID: 968 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.227576][ T726] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.237075][ T597] ? put_task_struct+0x90/0x90 [ 35.248988][ T942] Modules linked in: [ 35.250901][ T751] ? fpu__clear_all+0x20/0x20 [ 35.259487][ T751] ? __kasan_check_read+0x11/0x20 [ 35.264732][ T823] ? __kasan_check_read+0x11/0x20 [ 35.269848][ T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.275060][ T789] RDX: 0000000000000000 RSI: 000000000af11220 RDI: 000000000c04eb7d [ 35.281042][ T629] __fput+0x2dc/0x730 [ 35.289281][ T942] [ 35.294568][ T854] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.296365][ T1001] ------------[ cut here ]------------ [ 35.316289][ T942] CPU: 0 PID: 942 Comm: syz.6.284 Tainted: G B W syzkaller #0 [ 35.320267][ T751] __x64_sys_exit+0x40/0x40 [ 35.333031][ T823] __x64_sys_exit+0x40/0x40 [ 35.338739][ T823] do_syscall_64+0x31/0x40 [ 35.342937][ T914] [ 35.344846][ T1002] ------------[ cut here ]------------ [ 35.345464][ T914] CPU: 0 PID: 914 Comm: syz.2.256 Tainted: G B W syzkaller #0 [ 35.351109][ T997] WARNING: CPU: 1 PID: 997 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.370942][ T681] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.372339][ T799] [ 35.380058][ T731] Call Trace: [ 35.382568][ T659] ? sock_mmap+0xa0/0xa0 [ 35.385557][ T731] pppol2tp_release+0x150/0x2b0 [ 35.389957][ T775] RBP: ffffc90001077c60 R08: ffff88810ad7f083 R09: 1ffff110215afe10 [ 35.402592][ T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.402609][ T926] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.402619][ T926] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.402626][ T926] RSP: 0018:ffffc9000180fc40 EFLAGS: 00010293 [ 35.402637][ T926] RAX: ffffffff842ec3a7 RBX: ffff88810b38b000 RCX: ffff888112a813c0 [ 35.402644][ T926] RDX: 0000000000000000 RSI: 000000000ac273c0 RDI: 000000000c04eb7d [ 35.402651][ T926] RBP: ffffc9000180fc60 R08: ffff88810b38b083 R09: 1ffff11021671610 [ 35.402659][ T926] R10: dffffc0000000000 R11: ffffed1021671611 R12: dffffc0000000000 [ 35.402666][ T926] R13: dffffc0000000000 R14: 000000000ac273c0 R15: ffff88812979d000 [ 35.402675][ T926] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.402681][ T926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.402695][ T926] CR2: 00007f78f3d306b8 CR3: 000000012710d000 CR4: 00000000003506b0 [ 35.417163][ T1002] WARNING: CPU: 1 PID: 1002 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.429533][ T874] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.443586][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.471183][ T949] Modules linked in: [ 35.479098][ T597] ? fpu__clear_all+0x20/0x20 [ 35.488316][ T837] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.494884][ T1007] ------------[ cut here ]------------ [ 35.506699][ T697] do_exit+0xa7c/0x24e0 [ 35.513799][ T629] ____fput+0x15/0x20 [ 35.518853][ T770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.529640][ T799] RAX: ffffffff842ec3a7 RBX: ffff88812cae4800 RCX: ffff88812b44a780 [ 35.542069][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.548233][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.557497][ T603] sock_close+0xb8/0x200 [ 35.558415][ T968] Modules linked in: [ 35.565028][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.566544][ T1007] WARNING: CPU: 1 PID: 1007 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.576422][ T728] R13: dffffc0000000000 R14: 000000001e2d24e0 R15: ffff88811d2eb800 [ 35.582491][ T833] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.592628][ T1020] ------------[ cut here ]------------ [ 35.602888][ T1001] WARNING: CPU: 1 PID: 1001 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.606648][ T937] Modules linked in: [ 35.610694][ T823] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.620619][ T636] pppol2tp_release+0x150/0x2b0 [ 35.632022][ T838] do_syscall_64+0x31/0x40 [ 35.661119][ T731] sock_close+0xb8/0x200 [ 35.665833][ T1025] ------------[ cut here ]------------ [ 35.675307][ T603] ? sock_mmap+0xa0/0xa0 [ 35.679847][ T906] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.684213][ T766] [ 35.689606][ T862] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.708949][ T854] RSP: 0018:ffffc9000166fc40 EFLAGS: 00010293 [ 35.716137][ T751] do_syscall_64+0x31/0x40 [ 35.721505][ T598] do_exit+0xa7c/0x24e0 [ 35.722916][ T968] [ 35.727977][ T968] CPU: 1 PID: 968 Comm: syz.2.291 Tainted: G B W syzkaller #0 [ 35.729055][ T715] R13: dffffc0000000000 R14: 000000000cfc8460 R15: ffff88811dab1c00 [ 35.736891][ T799] RDX: 0000000000000000 RSI: 000000001c252d00 RDI: 000000000c04eb7d [ 35.744634][ T598] ? __kasan_check_write+0x14/0x20 [ 35.753432][ T789] RBP: ffffc90000d97c60 R08: ffff88811b857883 R09: 1ffff1102370af10 [ 35.757700][ T1020] WARNING: CPU: 0 PID: 1020 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.767089][ T933] Modules linked in: [ 35.776420][ T726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.776502][ T855] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.783068][ T940] Modules linked in: [ 35.786942][ T803] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.808883][ T847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.814406][ T638] ? __kasan_check_write+0x14/0x20 [ 35.817001][ T906] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 35.826948][ T697] ? __kasan_check_write+0x14/0x20 [ 35.837116][ T714] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.857830][ T926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.872400][ T597] ? __kasan_check_read+0x11/0x20 [ 35.881122][ T726] CR2: 00007f78f3d33060 CR3: 000000012710d000 CR4: 00000000003506b0 [ 35.889108][ T726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.897363][ T597] __x64_sys_exit+0x40/0x40 [ 35.898720][ T681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.908590][ T535] ? sock_mmap+0xa0/0xa0 [ 35.912862][ T766] RAX: ffffffff842ec3a7 RBX: ffff88810abc9000 RCX: ffff88811d0b2780 [ 35.921749][ T949] [ 35.924081][ T949] CPU: 0 PID: 949 Comm: syz.5.280 Tainted: G B W syzkaller #0 [ 35.929787][ T854] RAX: ffffffff842ec3a7 RBX: ffff88812b21d800 RCX: ffff88810c56e2c0 [ 35.934363][ T997] Modules linked in: [ 35.940671][ T636] sock_close+0xb8/0x200 [ 35.943036][ T751] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.949886][ T681] CR2: 00007fc4135a6fb0 CR3: 000000012a662000 CR4: 00000000003506b0 [ 35.959722][ T847] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.966431][ T636] ? sock_mmap+0xa0/0xa0 [ 35.969911][ T1035] ------------[ cut here ]------------ [ 35.975774][ T874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.978773][ T914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.991019][ T942] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.996394][ T1001] Modules linked in: [ 36.001606][ T933] [ 36.001923][ T966] Modules linked in: [ 36.005498][ T933] CPU: 1 PID: 933 Comm: syz.5.275 Tainted: G B W syzkaller #0 [ 36.005504][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.005528][ T933] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.007895][ T603] __fput+0x2dc/0x730 [ 36.012136][ T597] do_syscall_64+0x31/0x40 [ 36.021663][ T837] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.030508][ T862] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.043520][ T485] Code: Unable to access opcode bytes at RIP 0x7f8343d04e6f. [ 36.045369][ T1035] WARNING: CPU: 1 PID: 1035 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.064999][ T1025] WARNING: CPU: 0 PID: 1025 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.084542][ T629] task_work_run+0x127/0x190 [ 36.097949][ T659] __fput+0x2dc/0x730 [ 36.106718][ T789] R10: dffffc0000000000 R11: ffffed102370af11 R12: dffffc0000000000 [ 36.117159][ T535] __fput+0x2dc/0x730 [ 36.122740][ T935] CPU: 1 PID: 935 Comm: syz.2.273 Tainted: G B W syzkaller #0 [ 36.135404][ T598] ? switch_fpu_return+0x19c/0x330 [ 36.141467][ T1001] [ 36.148865][ T1001] CPU: 1 PID: 1001 Comm: syz.0.311 Tainted: G B W syzkaller #0 [ 36.159646][ T847] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.160152][ T1041] ------------[ cut here ]------------ [ 36.179411][ T1007] Modules linked in: [ 36.187726][ T942] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.187919][ T937] [ 36.191821][ T997] [ 36.213278][ T728] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.218060][ T942] RSP: 0018:ffffc90001c47c40 EFLAGS: 00010293 [ 36.225070][ T799] RBP: ffffc90001447c60 R08: ffff88812cae4883 R09: 1ffff1102595c910 [ 36.227617][ T966] [ 36.232138][ T854] RDX: 0000000000000000 RSI: 000000001d197200 RDI: 000000000c04eb7d [ 36.250175][ T728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.256763][ T728] CR2: 00007f8344abf060 CR3: 00000001280aa000 CR4: 00000000003506a0 [ 36.260965][ T766] RDX: 0000000000000000 RSI: 000000001e2affe0 RDI: 000000000c04eb7d [ 36.264838][ T933] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.273293][ T715] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.292765][ T535] ____fput+0x15/0x20 [ 36.302122][ T659] ____fput+0x15/0x20 [ 36.308653][ T770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.313321][ T940] [ 36.319693][ T638] ? switch_fpu_return+0x19c/0x330 [ 36.325133][ T874] CR2: 00007f78f3202dac CR3: 000000011b2da000 CR4: 00000000003506b0 [ 36.333386][ T823] RIP: 0033:0x7f78f2f78e99 [ 36.340138][ T942] [ 36.342469][ T942] RAX: ffffffff842ec3a7 RBX: ffff888111c8f800 RCX: ffff88812a534f00 [ 36.351759][ T1053] ------------[ cut here ]------------ [ 36.357339][ T638] ? put_task_struct+0x90/0x90 [ 36.358086][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.362218][ T1053] WARNING: CPU: 1 PID: 1053 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.362228][ T1053] Modules linked in: [ 36.380614][ T823] Code: Unable to access opcode bytes at RIP 0x7f78f2f78e6f. [ 36.385072][ T854] RBP: ffffc9000166fc60 R08: ffff88812b21d883 R09: 1ffff11025643b10 [ 36.386284][ T837] RSP: 0018:ffffc90004a87c40 EFLAGS: 00010293 [ 36.395377][ T751] RIP: 0033:0x7fc4135ebe99 [ 36.405702][ T838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.412631][ T1002] Modules linked in: [ 36.422119][ T726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.430984][ T636] __fput+0x2dc/0x730 [ 36.434964][ T636] ____fput+0x15/0x20 [ 36.438931][ T636] task_work_run+0x127/0x190 [ 36.443622][ T681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.446301][ T914] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.458239][ T598] ? put_task_struct+0x90/0x90 [ 36.463520][ T823] RSP: 002b:00007fff7d8c54b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.469875][ T659] task_work_run+0x127/0x190 [ 36.473228][ T1062] ------------[ cut here ]------------ [ 36.476536][ T659] do_exit+0xa7c/0x24e0 [ 36.482901][ T1043] ------------[ cut here ]------------ [ 36.492270][ T966] CPU: 0 PID: 966 Comm: syz.0.293 Tainted: G B W syzkaller #0 [ 36.494157][ T731] ? sock_mmap+0xa0/0xa0 [ 36.502638][ T833] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.506373][ T603] ____fput+0x15/0x20 [ 36.528454][ T940] CPU: 0 PID: 940 Comm: syz.6.279 Tainted: G B W syzkaller #0 [ 36.528860][ T597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.537851][ T906] RSP: 0018:ffffc90001467c40 EFLAGS: 00010293 [ 36.547814][ T1007] [ 36.556396][ T803] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.577111][ T629] do_exit+0xa7c/0x24e0 [ 36.581116][ T799] R10: dffffc0000000000 R11: ffffed102595c911 R12: dffffc0000000000 [ 36.581621][ T598] ? fpu__clear_all+0x20/0x20 [ 36.590501][ T799] R13: dffffc0000000000 R14: 000000001c252d00 R15: ffff88812cb03000 [ 36.594242][ T855] RSP: 0018:ffffc9000167fc40 EFLAGS: 00010293 [ 36.601913][ T775] R10: dffffc0000000000 R11: ffffed10215afe11 R12: dffffc0000000000 [ 36.608423][ T862] RSP: 0018:ffffc9000165fc40 EFLAGS: 00010293 [ 36.616449][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.622351][ T916] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.623568][ T855] [ 36.632890][ T926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.639903][ T726] Call Trace: [ 36.645164][ T638] ? fpu__clear_all+0x20/0x20 [ 36.649329][ T1062] WARNING: CPU: 1 PID: 1062 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.662263][ T697] ? switch_fpu_return+0x19c/0x330 [ 36.667590][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.690467][ T874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.698452][ T874] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.706772][ T949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.709303][ T1081] ------------[ cut here ]------------ [ 36.716899][ T1001] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.716916][ T1001] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.723947][ T823] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78f2f78e99 [ 36.731614][ T1053] [ 36.757522][ T942] RDX: 0000000000000000 RSI: 0000000011b6cf00 RDI: 000000000c04eb7d [ 36.760495][ T1020] Modules linked in: [ 36.767080][ T906] [ 36.770665][ T766] RBP: ffffc90001037c60 R08: ffff88810abc9083 R09: 1ffff11021579210 [ 36.770672][ T766] R10: dffffc0000000000 R11: ffffed1021579211 R12: dffffc0000000000 [ 36.770679][ T766] R13: dffffc0000000000 R14: 000000001e2affe0 R15: ffff8881002f2400 [ 36.770687][ T766] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.770694][ T766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.770700][ T766] CR2: 00007ffd7c4bd084 CR3: 000000000640f000 CR4: 00000000003506a0 [ 36.770712][ T766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.773575][ T770] Call Trace: [ 36.782676][ T1086] ------------[ cut here ]------------ [ 36.789287][ T862] [ 36.797041][ T629] ? __kasan_check_write+0x14/0x20 [ 36.797053][ T629] ? switch_fpu_return+0x19c/0x330 [ 36.797062][ T629] ? put_task_struct+0x90/0x90 [ 36.797071][ T629] ? fpu__clear_all+0x20/0x20 [ 36.797081][ T629] ? __kasan_check_read+0x11/0x20 [ 36.797090][ T629] __x64_sys_exit+0x40/0x40 [ 36.797106][ T629] do_syscall_64+0x31/0x40 [ 36.807302][ T1043] WARNING: CPU: 0 PID: 1043 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.812700][ T854] R10: dffffc0000000000 R11: ffffed1025643b11 R12: dffffc0000000000 [ 36.821736][ T731] __fput+0x2dc/0x730 2026/07/23 21:59:15 executed programs: 357 [ 36.828782][ T1002] CPU: 1 PID: 1002 Comm: syz.2.307 Tainted: G B W syzkaller #0 [ 36.832887][ T940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.838061][ T728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.847802][ T966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.852344][ T681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.860927][ T838] RIP: 0033:0x7f476781fe99 [ 36.864691][ T1041] WARNING: CPU: 1 PID: 1041 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.869053][ T838] Code: Unable to access opcode bytes at RIP 0x7f476781fe6f. [ 36.873534][ T636] do_exit+0xa7c/0x24e0 [ 36.888821][ T926] Call Trace: [ 36.913728][ T726] pppol2tp_release+0x150/0x2b0 [ 36.922939][ T906] RAX: ffffffff842ec3a7 RBX: ffff88810b1a8000 RCX: ffff888129b0a780 [ 36.932637][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.956302][ T914] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 36.965291][ T789] R13: dffffc0000000000 R14: 000000000af11220 R15: ffff888109b81800 [ 36.971397][ T603] task_work_run+0x127/0x190 [ 36.975020][ T1035] Modules linked in: [ 37.025390][ T1007] CPU: 1 PID: 1007 Comm: syz.3.312 Tainted: G B W syzkaller #0 [ 37.038236][ T847] RSP: 0018:ffffc9000173fc40 EFLAGS: 00010293 [ 37.047022][ T597] RIP: 0033:0x7f6e60793e99 [ 37.047673][ T968] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.051745][ T949] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.059186][ T659] ? __kasan_check_write+0x14/0x20 [ 37.068262][ T751] Code: Unable to access opcode bytes at RIP 0x7fc4135ebe6f. [ 37.073834][ T837] [ 37.079520][ T854] R13: dffffc0000000000 R14: 000000001d197200 R15: ffff88810f15e800 [ 37.081140][ T966] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.087829][ T1020] CPU: 1 PID: 1020 Comm: syz.5.318 Tainted: G B W syzkaller #0 [ 37.095875][ T916] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.111269][ T997] CPU: 1 PID: 997 Comm: syz.3.295 Tainted: G B W syzkaller #0 [ 37.126422][ T535] task_work_run+0x127/0x190 [ 37.132822][ T1001] RSP: 0018:ffffc90001d5fc40 EFLAGS: 00010293 [ 37.136520][ T714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.141935][ T485] RSP: 002b:00007ffe5bb21498 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.149423][ T603] do_exit+0xa7c/0x24e0 [ 37.156971][ T775] R13: dffffc0000000000 R14: 0000000017b48760 R15: ffff888101b9a000 [ 37.161329][ T638] ? __kasan_check_read+0x11/0x20 [ 37.169361][ T847] RAX: ffffffff842ec3a7 RBX: ffff88810b08b800 RCX: ffff88810d5acf00 [ 37.180729][ T799] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.182334][ T597] Code: Unable to access opcode bytes at RIP 0x7f6e60793e6f. [ 37.192054][ T1043] Modules linked in: [ 37.199060][ T789] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.207308][ T823] RDX: 00007f78f2f34017 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.211386][ T1041] Modules linked in: [ 37.228164][ T697] ? put_task_struct+0x90/0x90 [ 37.235125][ T1081] WARNING: CPU: 0 PID: 1081 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.245426][ T1025] Modules linked in: [ 37.246689][ T837] RAX: ffffffff842ec3a7 RBX: ffff88812abcb000 RCX: ffff88810d6613c0 [ 37.249333][ T1025] CPU: 1 PID: 1025 Comm: syz.0.322 Tainted: G B W syzkaller #0 [ 37.263825][ T935] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.266255][ T766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.272356][ T855] RAX: ffffffff842ec3a7 RBX: ffff88812b218800 RCX: ffff88810c56bb40 [ 37.280477][ T775] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.290887][ T535] do_exit+0xa7c/0x24e0 [ 37.298211][ T598] ? __kasan_check_read+0x11/0x20 [ 37.306462][ T874] Call Trace: [ 37.310011][ T803] RSP: 0018:ffffc900010ffc40 EFLAGS: 00010293 [ 37.316080][ T803] RAX: ffffffff842ec3a7 RBX: ffff88810afc5800 RCX: ffff88810be613c0 [ 37.322428][ T940] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.330496][ T1086] WARNING: CPU: 1 PID: 1086 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.331728][ T770] pppol2tp_release+0x150/0x2b0 [ 37.340763][ T629] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.358479][ T914] RSP: 0018:ffffc90001b2fc40 EFLAGS: 00010293 [ 37.359738][ T854] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.373858][ T681] Call Trace: [ 37.374845][ T933] RSP: 0018:ffffc90001c27c40 EFLAGS: 00010293 [ 37.377231][ T681] pppol2tp_release+0x150/0x2b0 [ 37.377234][ T933] [ 37.377248][ T933] RAX: ffffffff842ec3a7 RBX: ffff888129175800 RCX: ffff888111a98000 [ 37.383585][ T949] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.388260][ T942] RBP: ffffc90001c47c60 R08: ffff888111c8f883 R09: 1ffff11022391f10 [ 37.399392][ T728] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.423530][ T1062] Modules linked in: [ 37.426769][ T1041] CPU: 1 PID: 1041 Comm: syz.5.331 Tainted: G B W syzkaller #0 [ 37.447220][ T751] RSP: 002b:00007ffeff6517d8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.455777][ T731] ____fput+0x15/0x20 [ 37.461271][ T874] pppol2tp_release+0x150/0x2b0 [ 37.464311][ T1007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.473650][ T968] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.477075][ T1001] RAX: ffffffff842ec3a7 RBX: ffff8881132ed000 RCX: ffff888128dd62c0 [ 37.497531][ T799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.506226][ T731] task_work_run+0x127/0x190 [ 37.514714][ T1132] ------------[ cut here ]------------ [ 37.515895][ T937] CPU: 1 PID: 937 Comm: syz.3.277 Tainted: G B W syzkaller #0 [ 37.520536][ T638] __x64_sys_exit+0x40/0x40 [ 37.529299][ T1113] ------------[ cut here ]------------ [ 37.540877][ T847] RDX: 0000000000000000 RSI: 000000000a926400 RDI: 000000000c04eb7d [ 37.544395][ T697] ? fpu__clear_all+0x20/0x20 [ 37.548856][ T847] RBP: ffffc9000173fc60 R08: ffff88810b08b883 R09: 1ffff11021611710 [ 37.559234][ T966] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.562065][ T1113] WARNING: CPU: 1 PID: 1113 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.587952][ T1132] WARNING: CPU: 0 PID: 1132 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.603580][ T874] sock_close+0xb8/0x200 [ 37.605665][ T598] __x64_sys_exit+0x40/0x40 [ 37.613179][ T833] RSP: 0018:ffffc90000db7c40 EFLAGS: 00010293 [ 37.618080][ T874] ? sock_mmap+0xa0/0xa0 [ 37.619251][ T833] RAX: ffffffff842ec3a7 RBX: ffff88812ce96000 RCX: ffff88812bec4f00 [ 37.623633][ T659] ? switch_fpu_return+0x19c/0x330 [ 37.639452][ T1139] ------------[ cut here ]------------ [ 37.645160][ T914] RAX: ffffffff842ec3a7 RBX: ffff88812d6cf000 RCX: ffff88812b60e2c0 [ 37.653339][ T789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.653619][ T603] ? __kasan_check_write+0x14/0x20 [ 37.659952][ T597] RSP: 002b:00007ffc03926818 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.668064][ T837] RDX: 0000000000000000 RSI: 000000000d748500 RDI: 000000000c04eb7d [ 37.673569][ T1086] Modules linked in: [ 37.681498][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.681812][ T659] ? put_task_struct+0x90/0x90 [ 37.685442][ T726] sock_close+0xb8/0x200 [ 37.695636][ T714] CR2: 00007f8344abf060 CR3: 00000001280aa000 CR4: 00000000003506a0 [ 37.700375][ T751] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4135ebe99 [ 37.704728][ T1081] Modules linked in: [ 37.712481][ T636] ? __kasan_check_write+0x14/0x20 [ 37.720518][ T935] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.725250][ T485] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8343d04e99 [ 37.729355][ T935] RSP: 0018:ffffc900018dfc40 EFLAGS: 00010293 [ 37.749991][ T940] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 37.758789][ T1148] ------------[ cut here ]------------ [ 37.763134][ T1020] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.782910][ T1139] WARNING: CPU: 0 PID: 1139 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.788358][ T715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.794596][ T697] ? __kasan_check_read+0x11/0x20 [ 37.804763][ T681] sock_close+0xb8/0x200 [ 37.822998][ T838] RSP: 002b:00007ffd7c4bcd98 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.831611][ T598] do_syscall_64+0x31/0x40 [ 37.836032][ T598] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.842146][ T854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.844886][ T770] sock_close+0xb8/0x200 [ 37.848727][ T854] CR2: 00007ffd7c4bd084 CR3: 000000000640f000 CR4: 00000000003506a0 [ 37.853253][ T535] ? __kasan_check_write+0x14/0x20 [ 37.861245][ T731] do_exit+0xa7c/0x24e0 [ 37.870152][ T1146] ------------[ cut here ]------------ [ 37.870872][ T629] RIP: 0033:0x7f78f2f78e99 [ 37.875686][ T1146] WARNING: CPU: 0 PID: 1146 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.875696][ T1146] Modules linked in: [ 37.880972][ T766] Call Trace: [ 37.890934][ T855] RDX: 0000000000000000 RSI: 000000001e22ed00 RDI: 000000000c04eb7d [ 37.894290][ T862] RAX: ffffffff842ec3a7 RBX: ffff88810b0e0800 RCX: ffff88810f8ee2c0 [ 37.897331][ T855] RBP: ffffc9000167fc60 R08: ffff88812b218883 R09: 1ffff11025643110 [ 37.907882][ T949] RSP: 0018:ffffc90001d17c40 EFLAGS: 00010293 [ 37.919077][ T823] RBP: 00007f78f300eeaf R08: 0000000000000000 R09: 0000000000000058 [ 37.923228][ T940] RSP: 0018:ffffc9000171fc40 EFLAGS: 00010293 [ 37.932669][ T1043] CPU: 0 PID: 1043 Comm: syz.2.333 Tainted: G B W syzkaller #0 [ 37.935574][ T636] ? switch_fpu_return+0x19c/0x330 [ 37.957543][ T906] RDX: 0000000000000000 RSI: 000000000f590000 RDI: 000000000c04eb7d [ 37.965728][ T803] RDX: 0000000000000000 RSI: 00000000059827a0 RDI: 000000000c04eb7d [ 37.973981][ T775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.980914][ T789] CR2: 00007fc4143a6060 CR3: 000000012951b000 CR4: 00000000003506a0 [ 37.984266][ T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.988919][ T1007] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.003064][ T714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.006001][ T838] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f476781fe99 [ 38.016220][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.019570][ T766] pppol2tp_release+0x150/0x2b0 [ 38.030863][ T1053] CPU: 0 PID: 1053 Comm: syz.6.330 Tainted: G B W syzkaller #0 [ 38.036692][ T597] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6e60793e99 [ 38.047862][ T874] __fput+0x2dc/0x730 [ 38.051041][ T629] Code: Unable to access opcode bytes at RIP 0x7f78f2f78e6f. [ 38.055608][ T799] CR2: 00007f6e6154e060 CR3: 000000010e9ed000 CR4: 00000000003506b0 [ 38.062506][ T731] ? __kasan_check_write+0x14/0x20 [ 38.074421][ T914] RDX: 0000000000000000 RSI: 00000000111de300 RDI: 000000000c04eb7d [ 38.076205][ T1062] [ 38.086170][ T933] RDX: 0000000000000000 RSI: 0000000029651e00 RDI: 000000000c04eb7d [ 38.094697][ T926] pppol2tp_release+0x150/0x2b0 [ 38.099553][ T926] sock_close+0xb8/0x200 [ 38.104014][ T1086] [ 38.106371][ T1086] CPU: 1 PID: 1086 Comm: syz.3.350 Tainted: G B W syzkaller #0 [ 38.107234][ T1139] Modules linked in: [ 38.116091][ T1162] ------------[ cut here ]------------ [ 38.128226][ T803] RBP: ffffc900010ffc60 R08: ffff88810afc5883 R09: 1ffff110215f8b10 [ 38.132028][ T659] ? fpu__clear_all+0x20/0x20 [ 38.137247][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.148584][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.151513][ T1161] ------------[ cut here ]------------ [ 38.167350][ T603] ? switch_fpu_return+0x19c/0x330 [ 38.172768][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.175043][ T1081] [ 38.183132][ T916] RSP: 0018:ffffc900017dfc40 EFLAGS: 00010293 [ 38.186060][ T638] do_syscall_64+0x31/0x40 [ 38.191508][ T833] RDX: 0000000000000000 RSI: 000000000bc0fc20 RDI: 000000000c04eb7d [ 38.204233][ T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.211692][ T1132] Modules linked in: [ 38.216242][ T838] RDX: 00007f47677db017 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.217531][ T697] __x64_sys_exit+0x40/0x40 [ 38.228574][ T775] CR2: 00007f6e6074efb0 CR3: 000000010d51d000 CR4: 00000000003506a0 [ 38.234884][ T1132] CPU: 0 PID: 1132 Comm: syz.5.372 Tainted: G B W syzkaller #0 [ 38.241102][ T906] RBP: ffffc90001467c60 R08: ffff88810b1a8083 R09: 1ffff11021635010 [ 38.256326][ T926] ? sock_mmap+0xa0/0xa0 [ 38.260255][ T1002] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.260824][ T726] ? sock_mmap+0xa0/0xa0 [ 38.266899][ T1002] Code: 5d c3 e8 dc df 35 fd be 02 00 00 00 eb 0a e8 d0 df 35 fd be 01 00 00 00 4c 89 f7 e8 43 55 0f fe e9 0f ff ff ff e8 b9 df 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 a8 df 35 fd 4c 89 f7 be 03 [ 38.271483][ T1001] RDX: 0000000000000000 RSI: 000000001b9b9400 RDI: 000000000c04eb7d [ 38.291025][ T715] CR2: 00007f8344abf060 CR3: 000000010d6e0000 CR4: 00000000003506b0 [ 38.298919][ T1162] WARNING: CPU: 1 PID: 1162 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.307517][ T837] RBP: ffffc90004a87c60 R08: ffff88812abcb083 R09: 1ffff11025579610 [ 38.318117][ T728] Call Trace: [ 38.326883][ T1180] ------------[ cut here ]------------ [ 38.333301][ T751] RDX: 00007fc4135a7017 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.342000][ T949] [ 38.343697][ T603] ? put_task_struct+0x90/0x90 [ 38.344344][ T949] RAX: ffffffff842ec3a7 RBX: ffff88812c6c8800 RCX: ffff88812c79cf00 [ 38.349097][ T770] ? sock_mmap+0xa0/0xa0 [ 38.357360][ T598] RIP: 0033:0x7fc4135ebe99 [ 38.366674][ T803] R10: dffffc0000000000 R11: ffffed10215f8b11 R12: dffffc0000000000 [ 38.377318][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.379103][ T862] RDX: 0000000000000000 RSI: 000000002c30ad00 RDI: 000000000c04eb7d [ 38.391473][ T874] ____fput+0x15/0x20 [ 38.396734][ T942] R10: dffffc0000000000 R11: ffffed1022391f11 R12: dffffc0000000000 [ 38.399383][ T874] task_work_run+0x127/0x190 [ 38.407631][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.413313][ T823] R13: 00007f78f3200fac R14: 00007f78f3200fa0 R15: 00007f78f3200fa0 [ 38.423772][ T926] __fput+0x2dc/0x730 [ 38.430986][ T1180] WARNING: CPU: 0 PID: 1180 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.434386][ T766] sock_close+0xb8/0x200 [ 38.445844][ T966] RSP: 0018:ffffc90001d07c40 EFLAGS: 00010293 [ 38.449542][ T1195] ------------[ cut here ]------------ [ 38.454522][ T535] ? switch_fpu_return+0x19c/0x330 [ 38.460116][ T597] RDX: 00007f6e6074f017 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.470799][ T1081] CPU: 0 PID: 1081 Comm: syz.0.346 Tainted: G B W syzkaller #0 [ 38.473574][ T847] R10: dffffc0000000000 R11: ffffed1021611711 R12: dffffc0000000000 [ 38.491018][ T916] RAX: ffffffff842ec3a7 RBX: ffff88812956f800 RCX: ffff88812b608000 [ 38.492176][ T940] [ 38.499137][ T916] RDX: 0000000000000000 RSI: 00000000111dc500 RDI: 000000000c04eb7d