Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. 2026/10/25 00:41:59 parsed 1 programs 2026/10/25 00:41:59 serving rpc on tcp://35703 [ 24.121198][ T28] audit: type=1400 audit(1792888919.171:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.142006][ T28] audit: type=1400 audit(1792888919.171:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.312133][ T28] audit: type=1400 audit(1792888920.361:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.315273][ T300] cgroup: Unknown subsys name 'net' [ 25.334872][ T28] audit: type=1400 audit(1792888920.361:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.362094][ T28] audit: type=1400 audit(1792888920.391:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.362454][ T300] cgroup: Unknown subsys name 'devices' [ 25.475625][ T300] cgroup: Unknown subsys name 'hugetlb' [ 25.481263][ T300] cgroup: Unknown subsys name 'rlimit' [ 25.623405][ T28] audit: type=1400 audit(1792888920.671:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.646609][ T28] audit: type=1400 audit(1792888920.681:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.667230][ T28] audit: type=1400 audit(1792888920.681:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.678409][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.688057][ T28] audit: type=1400 audit(1792888920.681:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.716245][ T28] audit: type=1400 audit(1792888920.681:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.730877][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.459785][ T312] request_module fs-gadgetfs succeeded, but still no fs? [ 26.583209][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.593899][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.601467][ T313] device bridge_slave_0 entered promiscuous mode [ 26.609046][ T312] syz-executor (312) used greatest stack depth: 21856 bytes left [ 26.675215][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.682317][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.708414][ T313] device bridge_slave_1 entered promiscuous mode [ 26.900567][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.907676][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.915032][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.922120][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.042516][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.054290][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.090344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.102950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.154890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.170792][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.177870][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.186000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.194250][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.201292][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.233182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.252741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.267853][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.277047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.285157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.292622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.301295][ T313] device veth0_vlan entered promiscuous mode [ 27.315594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.334964][ T313] device veth1_macvtap entered promiscuous mode [ 27.345644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.359929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/10/25 00:42:02 executed programs: 0 [ 27.657294][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.664519][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.671943][ T372] device bridge_slave_0 entered promiscuous mode [ 27.680295][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.687382][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.694871][ T372] device bridge_slave_1 entered promiscuous mode [ 27.726829][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.733919][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.741228][ T377] device bridge_slave_0 entered promiscuous mode [ 27.757841][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.764956][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.772348][ T375] device bridge_slave_0 entered promiscuous mode [ 27.781965][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.789114][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.796687][ T377] device bridge_slave_1 entered promiscuous mode [ 27.814182][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.821234][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.828710][ T375] device bridge_slave_1 entered promiscuous mode [ 27.886399][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.893467][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.901045][ T373] device bridge_slave_0 entered promiscuous mode [ 27.910844][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.918197][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.925755][ T373] device bridge_slave_1 entered promiscuous mode [ 27.976388][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.983458][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.990945][ T378] device bridge_slave_0 entered promiscuous mode [ 28.013788][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.020880][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.028697][ T378] device bridge_slave_1 entered promiscuous mode [ 28.101620][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.108696][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.116019][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.123061][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.189497][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.196586][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.203894][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.210941][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.275272][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.282343][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.289666][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.296714][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.306025][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.313074][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.320382][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.327439][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.342551][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.349620][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.357022][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.364077][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.396173][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.403443][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.410996][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.418277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.426971][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.434277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.442519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.451113][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.458457][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.465737][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.472871][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.505131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.514612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.522511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.530675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.539025][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.546110][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.553714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.562015][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.569080][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.583230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.590739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.611972][ T375] device veth0_vlan entered promiscuous mode [ 28.640109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.648493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.657434][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.665391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.673358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.681032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.688856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.696972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.705117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.712513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.720130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.728601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.736919][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.744006][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.751504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.759839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.767977][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.775058][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.782406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.790927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.799203][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.806282][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.813894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.821904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.829962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.842658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.850319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.857985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.867983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.876691][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.883763][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.894252][ T375] device veth1_macvtap entered promiscuous mode [ 28.903735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.911958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.920265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.931689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.940188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.955446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.964239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.972433][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.979517][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.987365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.995666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.003823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.011736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.020150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.028645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.037080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.052448][ T377] device veth0_vlan entered promiscuous mode [ 29.059643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.068053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.076398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.085014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.093129][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.100323][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.107855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.115815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.123918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.131364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.162689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.171193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.179413][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.187558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.195915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.216630][ T373] device veth0_vlan entered promiscuous mode [ 29.224912][ T378] device veth0_vlan entered promiscuous mode [ 29.237980][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 29.237992][ T28] audit: type=1400 audit(1792888924.291:106): avc: denied { create } for pid=395 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.265441][ T377] device veth1_macvtap entered promiscuous mode [ 29.274257][ T28] audit: type=1400 audit(1792888924.291:107): avc: denied { connect } for pid=395 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.294107][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.302546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.308377][ T28] audit: type=1400 audit(1792888924.331:108): avc: denied { ioctl } for pid=395 comm="syz.2.19" path="socket:[16779]" dev="sockfs" ino=16779 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.315223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.342539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.350181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.357855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.365682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.374109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.382343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.390856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.426235][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.435189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.443419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.454139][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.464526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.472829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.481339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.489588][ C0] ================================================================== [ 29.497698][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 29.505119][ C0] Read of size 8 at addr ffff888113666990 by task ksoftirqd/0/13 [ 29.512870][ C0] [ 29.515222][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 29.522551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.532676][ C0] Call Trace: [ 29.535978][ C0] [ 29.538935][ C0] __dump_stack+0x21/0x24 [ 29.543297][ C0] dump_stack_lvl+0x110/0x170 [ 29.548035][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.553096][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 29.558152][ C0] print_address_description+0x71/0x200 [ 29.563742][ C0] print_report+0x4a/0x60 [ 29.567573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.568136][ C0] kasan_report+0x122/0x150 [ 29.580712][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 29.585776][ C0] __asan_report_load8_noabort+0x14/0x20 [ 29.591453][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 29.596333][ C0] rcu_do_batch+0x40d/0xc30 [ 29.600863][ C0] ? rcu_core+0xf00/0xf00 [ 29.605224][ C0] rcu_core+0x486/0xf00 [ 29.609384][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 29.614607][ C0] ? sched_clock+0x9/0x10 [ 29.618940][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 29.623789][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 29.629003][ C0] ? __schedule+0xcbb/0x1700 [ 29.633602][ C0] ? irqtime_account_irq+0x75/0x240 [ 29.638845][ C0] rcu_core_si+0x9/0x10 [ 29.643022][ C0] handle_softirqs+0x1dd/0x5f0 [ 29.647782][ C0] ? __cfi_run_ksoftirqd+0x10/0x10 [ 29.652891][ C0] run_ksoftirqd+0x28/0x30 [ 29.657337][ C0] smpboot_thread_fn+0x48c/0x8e0 [ 29.662278][ C0] kthread+0x281/0x320 [ 29.666342][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 29.671823][ C0] ? __cfi_kthread+0x10/0x10 [ 29.676456][ C0] ret_from_fork+0x1f/0x30 [ 29.680904][ C0] [ 29.683941][ C0] [ 29.686258][ C0] Allocated by task 396: [ 29.690489][ C0] kasan_set_track+0x4b/0x70 [ 29.695082][ C0] kasan_save_alloc_info+0x1f/0x30 [ 29.700190][ C0] __kasan_kmalloc+0x95/0xb0 [ 29.704776][ C0] __kmalloc+0xb4/0x1e0 [ 29.708925][ C0] l2tp_session_create+0x38/0xbd0 [ 29.713950][ C0] pppol2tp_connect+0xbf5/0x1640 [ 29.718891][ C0] __sys_connect+0x3da/0x460 [ 29.723521][ C0] __x64_sys_connect+0x7a/0x90 [ 29.728314][ C0] x64_sys_call+0x88d/0x9a0 [ 29.732823][ C0] do_syscall_64+0x4c/0xa0 [ 29.737246][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.743134][ C0] [ 29.745448][ C0] Freed by task 43: [ 29.749249][ C0] kasan_set_track+0x4b/0x70 [ 29.753859][ C0] kasan_save_free_info+0x2b/0x40 [ 29.758875][ C0] ____kasan_slab_free+0x132/0x180 [ 29.763990][ C0] __kasan_slab_free+0x11/0x20 [ 29.768769][ C0] slab_free_freelist_hook+0xc2/0x190 [ 29.774152][ C0] __kmem_cache_free+0xb7/0x1b0 [ 29.779001][ C0] kfree+0x6f/0xf0 [ 29.782715][ C0] l2tp_session_put+0xaf/0x1a0 [ 29.787479][ C0] l2tp_session_delete+0x3df/0x4d0 [ 29.792597][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 29.797852][ C0] process_one_work+0x717/0xc30 [ 29.802707][ C0] worker_thread+0xa4d/0x11d0 [ 29.807381][ C0] kthread+0x281/0x320 [ 29.811472][ C0] ret_from_fork+0x1f/0x30 [ 29.815886][ C0] [ 29.818213][ C0] Last potentially related work creation: [ 29.823921][ C0] kasan_save_stack+0x3a/0x60 [ 29.828612][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 29.833989][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 29.839813][ C0] call_rcu+0xcf/0xf50 [ 29.843906][ C0] pppol2tp_release+0x1e3/0x2b0 [ 29.848760][ C0] sock_close+0xc9/0x220 [ 29.853015][ C0] __fput+0x1fd/0x8f0 [ 29.857001][ C0] ____fput+0x15/0x20 [ 29.860987][ C0] task_work_run+0x1e1/0x250 [ 29.865581][ C0] do_exit+0xb0d/0x29f0 [ 29.869742][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 29.874766][ C0] x64_sys_call+0x67/0x9a0 [ 29.879199][ C0] do_syscall_64+0x4c/0xa0 [ 29.883617][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.889523][ C0] [ 29.891850][ C0] The buggy address belongs to the object at ffff888113666800 [ 29.891850][ C0] which belongs to the cache kmalloc-512 of size 512 [ 29.905893][ C0] The buggy address is located 400 bytes inside of [ 29.905893][ C0] 512-byte region [ffff888113666800, ffff888113666a00) [ 29.919164][ C0] [ 29.921484][ C0] The buggy address belongs to the physical page: [ 29.927885][ C0] page:ffffea00044d9900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113664 [ 29.938132][ C0] head:ffffea00044d9900 order:2 compound_mapcount:0 compound_pincount:0 [ 29.946466][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 29.952549][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 29.961151][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 29.969726][ C0] page dumped because: kasan: bad access detected [ 29.976141][ C0] page_owner tracks the page as allocated [ 29.981844][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 107, tgid 107 (udevd), ts 5831243832, free_ts 0 [ 30.001457][ C0] post_alloc_hook+0x1f5/0x210 [ 30.006232][ C0] prep_new_page+0x1c/0x110 [ 30.010762][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 30.016317][ C0] __alloc_pages+0x1fa/0x610 [ 30.020909][ C0] alloc_slab_page+0x6e/0xf0 [ 30.025504][ C0] new_slab+0x98/0x3e0 [ 30.029572][ C0] ___slab_alloc+0x70f/0xb70 [ 30.034163][ C0] __slab_alloc+0x5e/0xa0 [ 30.038502][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 30.043961][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 30.049685][ C0] __alloc_skb+0x226/0x4a0 [ 30.054133][ C0] alloc_skb_with_frags+0xa8/0x620 [ 30.059272][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 30.064472][ C0] unix_dgram_sendmsg+0x5c1/0x1710 [ 30.069587][ C0] sock_write_iter+0x2ea/0x3f0 [ 30.074354][ C0] vfs_write+0x5ef/0xd00 [ 30.078616][ C0] page_owner free stack trace missing [ 30.083976][ C0] [ 30.086292][ C0] Memory state around the buggy address: [ 30.091912][ C0] ffff888113666880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.099992][ C0] ffff888113666900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.108050][ C0] >ffff888113666980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.116102][ C0] ^ [ 30.120688][ C0] ffff888113666a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.128743][ C0] ffff888113666a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.136793][ C0] ================================================================== [ 30.144915][ C0] Disabling lock debugging due to kernel taint [ 30.159242][ T372] device veth0_vlan entered promiscuous mode [ 30.167009][ T28] audit: type=1400 audit(1792888925.231:109): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.188920][ T28] audit: type=1400 audit(1792888925.231:110): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.211051][ T28] audit: type=1400 audit(1792888925.231:111): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.232493][ T28] audit: type=1400 audit(1792888925.231:112): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.253451][ T28] audit: type=1400 audit(1792888925.231:113): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.274047][ T28] audit: type=1400 audit(1792888925.231:114): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.297045][ T28] audit: type=1400 audit(1792888925.231:115): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.297393][ T373] device veth1_macvtap entered promiscuous mode [ 30.326820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.335004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.353101][ T372] device veth1_macvtap entered promiscuous mode [ 30.360634][ T378] device veth1_macvtap entered promiscuous mode [ 30.372188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.380109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.389866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.398961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.407791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.452359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.460952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.471069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.479862][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.489900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.498430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.506990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.521492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.534812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.543215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.552291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.562729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.694993][ T8] device bridge_slave_1 left promiscuous mode [ 30.701214][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708899][ T490] ------------[ cut here ]------------ [ 30.714545][ T490] WARNING: CPU: 1 PID: 490 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.724697][ T490] Modules linked in: [ 30.728626][ T490] CPU: 1 PID: 490 Comm: syz.2.50 Tainted: G B syzkaller #0 [ 30.737334][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.747513][ T490] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.753986][ T490] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 30.773745][ T490] RSP: 0018:ffffc90000defb90 EFLAGS: 00010293 [ 30.779835][ T490] RAX: ffffffff849cb317 RBX: ffff888130edb000 RCX: ffff888130f59440 [ 30.787978][ T490] RDX: 0000000000000000 RSI: 000000001572f6d0 RDI: 000000000c04eb7d [ 30.796064][ T490] RBP: ffffc90000defbb0 R08: ffff888130edb083 R09: 1ffff110261db610 [ 30.804130][ T490] R10: dffffc0000000000 R11: ffffed10261db611 R12: dffffc0000000000 [ 30.812152][ T490] R13: dffffc0000000000 R14: 000000001572f6d0 R15: ffff88812f691800 [ 30.820220][ T490] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.829204][ T490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.835861][ T490] CR2: 0000200000000240 CR3: 000000000700f000 CR4: 00000000003506a0 [ 30.843906][ T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.851894][ T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.859929][ T490] Call Trace: [ 30.863223][ T490] [ 30.866220][ T490] pppol2tp_release+0x150/0x2b0 [ 30.871125][ T490] sock_close+0xc9/0x220 [ 30.875551][ T490] ? __cfi_sock_close+0x10/0x10 [ 30.880464][ T490] __fput+0x1fd/0x8f0 [ 30.884500][ T490] ____fput+0x15/0x20 [ 30.888514][ T490] task_work_run+0x1e1/0x250 [ 30.893145][ T490] ? __cfi_task_work_run+0x10/0x10 [ 30.898328][ T490] ? free_nsproxy+0x21f/0x270 [ 30.903060][ T490] do_exit+0xb0d/0x29f0 [ 30.907314][ T490] ? __cfi_do_exit+0x10/0x10 [ 30.911931][ T490] ? xfd_validate_state+0x70/0x150 [ 30.917121][ T490] ? __kasan_check_write+0x14/0x20 [ 30.922271][ T490] __x64_sys_exit+0x40/0x40 [ 30.926852][ T490] x64_sys_call+0x67/0x9a0 [ 30.931305][ T490] do_syscall_64+0x4c/0xa0 [ 30.935779][ T490] ? clear_bhb_loop+0x30/0x80 [ 30.940493][ T490] ? clear_bhb_loop+0x30/0x80 [ 30.945241][ T490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.951164][ T490] RIP: 0033:0x7f78e779f559 [ 30.955796][ T490] Code: Unable to access opcode bytes at 0x7f78e779f52f. [ 30.962846][ T490] RSP: 002b:00007f78e8688ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.971337][ T490] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78e779f559 [ 30.979361][ T490] RDX: 00007f78e86899c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.987386][ T490] RBP: 00007f78e7836b20 R08: 0000000000000000 R09: 0000000000000058 [ 30.995419][ T490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.003422][ T490] R13: 00007f78e7a26038 R14: 00007f78e7a25fa0 R15: 00007ffcce933128 [ 31.011464][ T490] [ 31.014531][ T490] ---[ end trace 0000000000000000 ]--- [ 31.020501][ T8] device bridge_slave_0 left promiscuous mode [ 31.029805][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.056096][ T8] device veth1_macvtap left promiscuous mode [ 31.075462][ T8] device veth0_vlan left promiscuous mode [ 31.189802][ T599] ------------[ cut here ]------------ [ 31.195485][ T599] WARNING: CPU: 1 PID: 599 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.205701][ T599] Modules linked in: [ 31.209622][ T599] CPU: 1 PID: 599 Comm: syz.5.85 Tainted: G B W syzkaller #0 [ 31.218270][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.228396][ T599] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.234841][ T599] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 31.254563][ T599] RSP: 0018:ffffc900012f7b90 EFLAGS: 00010293 [ 31.260675][ T599] RAX: ffffffff849cb317 RBX: ffff88811930e000 RCX: ffff88811931e540 [ 31.268726][ T599] RDX: 0000000000000000 RSI: 000000002dff6978 RDI: 000000000c04eb7d [ 31.277069][ T599] RBP: ffffc900012f7bb0 R08: ffff88811930e083 R09: 1ffff11023261c10 [ 31.285104][ T599] R10: dffffc0000000000 R11: ffffed1023261c11 R12: dffffc0000000000 [ 31.293102][ T599] R13: dffffc0000000000 R14: 000000002dff6978 R15: ffff88811624ac00 [ 31.301167][ T599] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.310138][ T599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.316773][ T599] CR2: 00007f456e75a670 CR3: 0000000121cc3000 CR4: 00000000003506a0 [ 31.324830][ T599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.332844][ T599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.340920][ T599] Call Trace: [ 31.344243][ T599] [ 31.347189][ T599] pppol2tp_release+0x150/0x2b0 [ 31.352074][ T599] sock_close+0xc9/0x220 [ 31.356511][ T599] ? __cfi_sock_close+0x10/0x10 [ 31.361402][ T599] __fput+0x1fd/0x8f0 [ 31.365457][ T599] ____fput+0x15/0x20 [ 31.369494][ T599] task_work_run+0x1e1/0x250 [ 31.374157][ T599] ? __cfi_task_work_run+0x10/0x10 [ 31.379299][ T599] ? free_nsproxy+0x21f/0x270 [ 31.384041][ T599] do_exit+0xb0d/0x29f0 [ 31.388234][ T599] ? __cfi_do_exit+0x10/0x10 [ 31.392857][ T599] ? xfd_validate_state+0x70/0x150 [ 31.398032][ T599] ? __kasan_check_write+0x14/0x20 [ 31.403174][ T599] __x64_sys_exit+0x40/0x40 [ 31.407745][ T599] x64_sys_call+0x67/0x9a0 [ 31.412199][ T599] do_syscall_64+0x4c/0xa0 [ 31.416706][ T599] ? clear_bhb_loop+0x30/0x80 [ 31.421423][ T599] ? clear_bhb_loop+0x30/0x80 [ 31.426159][ T599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.432117][ T599] RIP: 0033:0x7f4aac59f559 [ 31.436643][ T599] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 31.443739][ T599] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.452172][ T599] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 31.460251][ T599] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.468277][ T599] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 31.476303][ T599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.484329][ T599] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 31.492331][ T599] [ 31.495399][ T599] ---[ end trace 0000000000000000 ]--- [ 31.637917][ T708] ------------[ cut here ]------------ [ 31.643493][ T708] WARNING: CPU: 0 PID: 708 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.653754][ T708] Modules linked in: [ 31.657678][ T708] CPU: 0 PID: 708 Comm: syz.4.120 Tainted: G B W syzkaller #0 [ 31.666489][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.676729][ T708] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.683200][ T708] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 31.702993][ T708] RSP: 0018:ffffc900017d7b90 EFLAGS: 00010293 [ 31.709184][ T708] RAX: ffffffff849cb317 RBX: ffff888119fb1000 RCX: ffff888119f9e540 [ 31.717350][ T708] RDX: 0000000000000000 RSI: 000000001845d400 RDI: 000000000c04eb7d [ 31.725468][ T708] RBP: ffffc900017d7bb0 R08: ffff888119fb1083 R09: 1ffff110233f6210 [ 31.733467][ T708] R10: dffffc0000000000 R11: ffffed10233f6211 R12: dffffc0000000000 [ 31.741551][ T708] R13: dffffc0000000000 R14: 000000001845d400 R15: ffff88811845e400 [ 31.749676][ T708] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.758779][ T708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.765502][ T708] CR2: 00007f02ca9f62f8 CR3: 000000000700f000 CR4: 00000000003506b0 [ 31.773566][ T708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.781573][ T708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.789618][ T708] Call Trace: [ 31.793032][ T708] [ 31.796018][ T708] pppol2tp_release+0x150/0x2b0 [ 31.800934][ T708] sock_close+0xc9/0x220 [ 31.805240][ T708] ? __cfi_sock_close+0x10/0x10 [ 31.810124][ T708] __fput+0x1fd/0x8f0 [ 31.814165][ T708] ____fput+0x15/0x20 [ 31.818183][ T708] task_work_run+0x1e1/0x250 [ 31.822808][ T708] ? __cfi_task_work_run+0x10/0x10 [ 31.828034][ T708] ? free_nsproxy+0x21f/0x270 [ 31.832751][ T708] do_exit+0xb0d/0x29f0 [ 31.837010][ T708] ? __cfi_do_exit+0x10/0x10 [ 31.841637][ T708] ? xfd_validate_state+0x70/0x150 [ 31.846815][ T708] ? __kasan_check_write+0x14/0x20 [ 31.851972][ T708] __x64_sys_exit+0x40/0x40 [ 31.856560][ T708] x64_sys_call+0x67/0x9a0 [ 31.861014][ T708] do_syscall_64+0x4c/0xa0 [ 31.865486][ T708] ? clear_bhb_loop+0x30/0x80 [ 31.870205][ T708] ? clear_bhb_loop+0x30/0x80 [ 31.874943][ T708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.880872][ T708] RIP: 0033:0x7f456e79f559 [ 31.885337][ T708] Code: Unable to access opcode bytes at 0x7f456e79f52f. [ 31.892394][ T708] RSP: 002b:00007f456f5b1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.900880][ T708] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f456e79f559 [ 31.908899][ T708] RDX: 00007f456f5b29c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.917034][ T708] RBP: 00007f456e836b20 R08: 0000000000000000 R09: 0000000000000058 [ 31.925063][ T708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.933053][ T708] R13: 00007f456ea26038 R14: 00007f456ea25fa0 R15: 00007ffec2800b88 [ 31.941108][ T708] [ 31.944168][ T708] ---[ end trace 0000000000000000 ]--- [ 31.998698][ T831] ------------[ cut here ]------------ [ 32.004594][ T831] WARNING: CPU: 1 PID: 831 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.014774][ T831] Modules linked in: [ 32.018687][ T831] CPU: 1 PID: 831 Comm: syz.1.158 Tainted: G B W syzkaller #0 [ 32.027492][ T831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.037664][ T831] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.044196][ T831] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 32.063977][ T831] RSP: 0018:ffffc90001c57b90 EFLAGS: 00010293 [ 32.070075][ T831] RAX: ffffffff849cb317 RBX: ffff88811b1de000 RCX: ffff88811b153cc0 [ 32.078218][ T831] RDX: 0000000000000000 RSI: 00000000157bb000 RDI: 000000000c04eb7d [ 32.086325][ T831] RBP: ffffc90001c57bb0 R08: ffff88811b1de083 R09: 1ffff1102363bc10 [ 32.094426][ T831] R10: dffffc0000000000 R11: ffffed102363bc11 R12: dffffc0000000000 [ 32.102369][ T833] ------------[ cut here ]------------ [ 32.102776][ T831] R13: dffffc0000000000 R14: 00000000157bb000 R15: ffff8881157ba800 [ 32.107996][ T833] WARNING: CPU: 0 PID: 833 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.108046][ T833] Modules linked in: [ 32.108059][ T833] CPU: 0 PID: 833 Comm: syz.6.161 Tainted: G B W syzkaller #0 [ 32.108080][ T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.116161][ T831] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.116182][ T831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.126178][ T833] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.126214][ T833] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 32.126231][ T833] RSP: 0018:ffffc90001aa7b90 EFLAGS: 00010293 [ 32.126249][ T833] RAX: ffffffff849cb317 RBX: ffff88811b1d9000 RCX: ffff88811b155100 [ 32.126264][ T833] RDX: 0000000000000000 RSI: 0000000015a1ec00 RDI: 000000000c04eb7d [ 32.130154][ T831] CR2: 00007fedccd5a670 CR3: 000000000700f000 CR4: 00000000003506a0 [ 32.138879][ T833] RBP: ffffc90001aa7bb0 R08: ffff88811b1d9083 R09: 1ffff1102363b210 [ 32.138897][ T833] R10: dffffc0000000000 R11: ffffed102363b211 R12: dffffc0000000000 [ 32.138911][ T833] R13: dffffc0000000000 R14: 0000000015a1ec00 R15: ffff8881157bb000 [ 32.138926][ T833] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.149216][ T831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.158402][ T833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.165025][ T831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.171082][ T833] CR2: 000055555d765908 CR3: 000000000700f000 CR4: 00000000003506b0 [ 32.190816][ T831] Call Trace: [ 32.196828][ T833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.196841][ T833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.196853][ T833] Call Trace: [ 32.196858][ T833] [ 32.196865][ T833] pppol2tp_release+0x150/0x2b0 [ 32.205244][ T831] [ 32.212855][ T833] sock_close+0xc9/0x220 [ 32.221122][ T831] pppol2tp_release+0x150/0x2b0 [ 32.228862][ T833] ? __cfi_sock_close+0x10/0x10 [ 32.228887][ T833] __fput+0x1fd/0x8f0 [ 32.228914][ T833] ____fput+0x15/0x20 [ 32.228945][ T833] task_work_run+0x1e1/0x250 [ 32.228970][ T833] ? __cfi_task_work_run+0x10/0x10 [ 32.228994][ T833] ? free_nsproxy+0x21f/0x270 [ 32.237095][ T831] sock_close+0xc9/0x220 [ 32.245134][ T833] do_exit+0xb0d/0x29f0 [ 32.245169][ T833] ? __cfi_do_exit+0x10/0x10 [ 32.245197][ T833] ? xfd_validate_state+0x70/0x150 [ 32.245227][ T833] ? __kasan_check_write+0x14/0x20 [ 32.254466][ T831] ? __cfi_sock_close+0x10/0x10 [ 32.262141][ T833] __x64_sys_exit+0x40/0x40 [ 32.269056][ T831] __fput+0x1fd/0x8f0 [ 32.276745][ T833] x64_sys_call+0x67/0x9a0 [ 32.276783][ T833] do_syscall_64+0x4c/0xa0 [ 32.276800][ T833] ? clear_bhb_loop+0x30/0x80 [ 32.276823][ T833] ? clear_bhb_loop+0x30/0x80 [ 32.285094][ T831] ____fput+0x15/0x20 [ 32.288110][ T833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.296395][ T831] task_work_run+0x1e1/0x250 [ 32.304107][ T833] RIP: 0033:0x7fedccd9f559 [ 32.304125][ T833] Code: Unable to access opcode bytes at 0x7fedccd9f52f. [ 32.304135][ T833] RSP: 002b:00007fedcdbbeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.304156][ T833] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fedccd9f559 [ 32.304171][ T833] RDX: 00007fedcdbbf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.307449][ T831] ? __cfi_task_work_run+0x10/0x10 [ 32.310382][ T833] RBP: 00007fedcce36b20 R08: 0000000000000000 R09: 0000000000000058 [ 32.315481][ T831] ? free_nsproxy+0x21f/0x270 [ 32.318233][ T833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.322487][ T831] do_exit+0xb0d/0x29f0 [ 32.327360][ T833] R13: 00007fedcd026038 R14: 00007fedcd025fa0 R15: 00007ffda6cbb928 [ 32.327380][ T833] [ 32.327387][ T833] ---[ end trace 0000000000000000 ]--- [ 32.356377][ T835] ------------[ cut here ]------------ [ 32.358954][ T831] ? __cfi_do_exit+0x10/0x10 [ 32.363145][ T835] WARNING: CPU: 0 PID: 835 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.367715][ T831] ? xfd_validate_state+0x70/0x150 [ 32.367747][ T831] ? __kasan_check_write+0x14/0x20 [ 32.372844][ T835] Modules linked in: [ 32.378003][ T831] __x64_sys_exit+0x40/0x40 [ 32.382817][ T835] CPU: 0 PID: 835 Comm: syz.5.159 Tainted: G B W syzkaller #0 [ 32.387354][ T831] x64_sys_call+0x67/0x9a0 [ 32.391328][ T835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.395864][ T831] do_syscall_64+0x4c/0xa0 [ 32.395885][ T831] ? clear_bhb_loop+0x30/0x80 [ 32.400303][ T835] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.404993][ T831] ? clear_bhb_loop+0x30/0x80 [ 32.409662][ T835] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 32.413661][ T831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.419568][ T835] RSP: 0018:ffffc900019bfb90 EFLAGS: 00010293 [ 32.424182][ T831] RIP: 0033:0x7f02ca79f559 [ 32.424199][ T831] Code: Unable to access opcode bytes at 0x7f02ca79f52f. [ 32.428608][ T835] [ 32.428615][ T835] RAX: ffffffff849cb317 RBX: ffff88811b1d8000 RCX: ffff88811b1d0000 [ 32.435644][ T831] RSP: 002b:00007f02ca5feef8 EFLAGS: 00000246 [ 32.444065][ T835] RDX: 0000000000000000 RSI: 00000000157b9800 RDI: 000000000c04eb7d [ 32.444081][ T835] RBP: ffffc900019bfbb0 R08: ffff88811b1d8083 R09: 1ffff1102363b010 [ 32.452050][ T831] ORIG_RAX: 000000000000003c [ 32.460105][ T835] R10: dffffc0000000000 R11: ffffed102363b011 R12: dffffc0000000000 [ 32.465217][ T831] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02ca79f559 [ 32.473191][ T835] R13: dffffc0000000000 R14: 00000000157b9800 R15: ffff8881157b8400 [ 32.478001][ T831] RDX: 00007f02ca5ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.478017][ T831] RBP: 00007f02ca836b20 R08: 0000000000000000 R09: 0000000000000058 [ 32.478030][ T831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.478048][ T831] R13: 00007f02caa26038 R14: 00007f02caa25fa0 R15: 00007ffcefa54508 [ 32.478066][ T831] [ 32.478073][ T831] ---[ end trace 0000000000000000 ]--- [ 32.525884][ T832] ------------[ cut here ]------------ [ 32.527104][ T835] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.532181][ T832] WARNING: CPU: 1 PID: 832 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.537310][ T835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.541212][ T832] Modules linked in: [ 32.545737][ T835] CR2: 00007f4aad3556c8 CR3: 000000010f818000 CR4: 00000000003506b0 [ 32.555190][ T832] CPU: 1 PID: 832 Comm: syz.4.160 Tainted: G B W syzkaller #0 [ 32.558993][ T835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.569069][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.573482][ T835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.578165][ T832] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.584509][ T835] Call Trace: [ 32.584516][ T835] [ 32.589182][ T832] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 32.608831][ T835] pppol2tp_release+0x150/0x2b0 [ 32.614967][ T832] RSP: 0018:ffffc90001b6fb90 EFLAGS: 00010293 [ 32.620773][ T835] sock_close+0xc9/0x220 [ 32.625207][ T832] [ 32.625213][ T832] RAX: ffffffff849cb317 RBX: ffff88811b1dc000 RCX: ffff88811b1d5100 [ 32.632225][ T835] ? __cfi_sock_close+0x10/0x10 [ 32.635289][ T832] RDX: 0000000000000000 RSI: 000000002e07ed40 RDI: 000000000c04eb7d [ 32.642762][ T835] __fput+0x1fd/0x8f0 [ 32.648857][ T832] RBP: ffffc90001b6fbb0 R08: ffff88811b1dc083 R09: 1ffff1102363b810 [ 32.656855][ T835] ____fput+0x15/0x20 [ 32.664875][ T832] R10: dffffc0000000000 R11: ffffed102363b811 R12: dffffc0000000000 [ 32.669538][ T835] task_work_run+0x1e1/0x250 [ 32.677535][ T832] R13: dffffc0000000000 R14: 000000002e07ed40 R15: ffff8881157b9800 [ 32.677551][ T832] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.677569][ T832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.677584][ T832] CR2: 00007fedccd5a670 CR3: 000000012df8c000 CR4: 00000000003506a0 [ 32.685569][ T835] ? __cfi_task_work_run+0x10/0x10 [ 32.693559][ T832] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.701532][ T835] ? free_nsproxy+0x21f/0x270 [ 32.709531][ T832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.718083][ T835] do_exit+0xb0d/0x29f0 [ 32.725637][ T832] Call Trace: [ 32.725644][ T832] [ 32.728675][ T835] ? __cfi_do_exit+0x10/0x10 [ 32.734141][ T832] pppol2tp_release+0x150/0x2b0 [ 32.739610][ T835] ? xfd_validate_state+0x70/0x150 [ 32.748545][ T832] sock_close+0xc9/0x220 [ 32.758526][ T835] ? __kasan_check_write+0x14/0x20 [ 32.765202][ T832] ? __cfi_sock_close+0x10/0x10 [ 32.769044][ T835] __x64_sys_exit+0x40/0x40 [ 32.777047][ T832] __fput+0x1fd/0x8f0 [ 32.785730][ T835] x64_sys_call+0x67/0x9a0 [ 32.794343][ T832] ____fput+0x15/0x20 [ 32.803811][ T835] do_syscall_64+0x4c/0xa0 [ 32.811799][ T832] task_work_run+0x1e1/0x250 [ 32.818137][ T835] ? clear_bhb_loop+0x30/0x80 [ 32.821421][ T832] ? __cfi_task_work_run+0x10/0x10 [ 32.824397][ T835] ? clear_bhb_loop+0x30/0x80 [ 32.844045][ T832] ? free_nsproxy+0x21f/0x270 2026/10/25 00:42:08 executed programs: 180 [ 32.848913][ T835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.855011][ T832] do_exit+0xb0d/0x29f0 [ 32.859248][ T835] RIP: 0033:0x7f4aac59f559 [ 32.861597][ T832] ? __cfi_do_exit+0x10/0x10 [ 32.869582][ T835] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 32.874441][ T832] ? xfd_validate_state+0x70/0x150 [ 32.882443][ T835] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 [ 32.886477][ T832] ? __kasan_check_write+0x14/0x20 [ 32.894464][ T835] ORIG_RAX: 000000000000003c [ 32.898443][ T832] __x64_sys_exit+0x40/0x40 [ 32.906430][ T835] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 32.911022][ T832] x64_sys_call+0x67/0x9a0 [ 32.919111][ T835] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.928068][ T832] do_syscall_64+0x4c/0xa0 [ 32.934688][ T835] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 32.942703][ T832] ? clear_bhb_loop+0x30/0x80 [ 32.947849][ T835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.947871][ T835] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 32.947894][ T835] [ 32.955900][ T832] ? clear_bhb_loop+0x30/0x80 [ 32.955930][ T832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.955953][ T832] RIP: 0033:0x7f456e79f559 [ 32.955968][ T832] Code: Unable to access opcode bytes at 0x7f456e79f52f. [ 32.955976][ T832] RSP: 002b:00007f456f5b1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.955995][ T832] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f456e79f559 [ 32.956008][ T832] RDX: 00007f456f5b29c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.956021][ T832] RBP: 00007f456e836b20 R08: 0000000000000000 R09: 0000000000000058 [ 32.956033][ T832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.956045][ T832] R13: 00007f456ea26038 R14: 00007f456ea25fa0 R15: 00007ffec2800b88 [ 32.956062][ T832] [ 32.956068][ T832] ---[ end trace 0000000000000000 ]--- [ 33.240894][ T835] ---[ end trace 0000000000000000 ]--- [ 33.266451][ T912] ------------[ cut here ]------------ [ 33.271968][ T912] WARNING: CPU: 1 PID: 912 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.282349][ T912] Modules linked in: [ 33.286458][ T912] CPU: 1 PID: 912 Comm: syz.4.182 Tainted: G B W syzkaller #0 [ 33.295259][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.305458][ T912] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.311935][ T912] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 33.331601][ T912] RSP: 0018:ffffc90001f9fb90 EFLAGS: 00010293 [ 33.337761][ T912] RAX: ffffffff849cb317 RBX: ffff88811b6f0000 RCX: ffff88811b80bcc0 [ 33.345783][ T912] RDX: 0000000000000000 RSI: 0000000032b16800 RDI: 000000000c04eb7d [ 33.353933][ T912] RBP: ffffc90001f9fbb0 R08: ffff88811b6f0083 R09: 1ffff110236de010 [ 33.361938][ T912] R10: dffffc0000000000 R11: ffffed10236de011 R12: dffffc0000000000 [ 33.369961][ T912] R13: dffffc0000000000 R14: 0000000032b16800 R15: ffff888114e08800 [ 33.377995][ T912] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.386985][ T912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.393662][ T912] CR2: 000055555d765908 CR3: 00000001227df000 CR4: 00000000003506a0 [ 33.401684][ T912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.409704][ T912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.417766][ T912] Call Trace: [ 33.421064][ T912] [ 33.424048][ T912] pppol2tp_release+0x150/0x2b0 [ 33.428942][ T912] sock_close+0xc9/0x220 [ 33.433228][ T912] ? __cfi_sock_close+0x10/0x10 [ 33.438189][ T912] __fput+0x1fd/0x8f0 [ 33.442223][ T912] ____fput+0x15/0x20 [ 33.446279][ T912] task_work_run+0x1e1/0x250 [ 33.450921][ T912] ? __cfi_task_work_run+0x10/0x10 [ 33.456114][ T912] ? free_nsproxy+0x21f/0x270 [ 33.460840][ T912] do_exit+0xb0d/0x29f0 [ 33.465067][ T912] ? __cfi_do_exit+0x10/0x10 [ 33.469693][ T912] ? xfd_validate_state+0x70/0x150 [ 33.474903][ T912] ? __kasan_check_write+0x14/0x20 [ 33.480057][ T912] __x64_sys_exit+0x40/0x40 [ 33.484640][ T912] x64_sys_call+0x67/0x9a0 [ 33.489125][ T912] do_syscall_64+0x4c/0xa0 [ 33.493599][ T912] ? clear_bhb_loop+0x30/0x80 [ 33.498310][ T912] ? clear_bhb_loop+0x30/0x80 [ 33.503014][ T912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.508972][ T912] RIP: 0033:0x7f456e79f559 [ 33.513415][ T912] Code: Unable to access opcode bytes at 0x7f456e79f52f. [ 33.520614][ T912] RSP: 002b:00007f456f5b1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.529088][ T912] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f456e79f559 [ 33.537118][ T912] RDX: 00007f456f5b29c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.545140][ T912] RBP: 00007f456e836b20 R08: 0000000000000000 R09: 0000000000000058 [ 33.553152][ T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.561180][ T912] R13: 00007f456ea26038 R14: 00007f456ea25fa0 R15: 00007ffec2800b88 [ 33.569220][ T912] [ 33.572278][ T912] ---[ end trace 0000000000000000 ]--- [ 33.660082][ T972] ------------[ cut here ]------------ [ 33.665724][ T972] WARNING: CPU: 0 PID: 972 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.675941][ T972] Modules linked in: [ 33.679864][ T972] CPU: 0 PID: 972 Comm: syz.6.208 Tainted: G B W syzkaller #0 [ 33.688576][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.698671][ T972] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.705109][ T972] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 33.724780][ T972] RSP: 0018:ffffc90002217b90 EFLAGS: 00010293 [ 33.730911][ T972] RAX: ffffffff849cb317 RBX: ffff88811bcc0000 RCX: ffff88811bcc9440 [ 33.738956][ T972] RDX: 0000000000000000 RSI: 000000001bd56000 RDI: 000000000c04eb7d [ 33.746977][ T972] RBP: ffffc90002217bb0 R08: ffff88811bcc0083 R09: 1ffff11023798010 [ 33.750332][ T969] ------------[ cut here ]------------ [ 33.754996][ T972] R10: dffffc0000000000 R11: ffffed1023798011 R12: dffffc0000000000 [ 33.755014][ T972] R13: dffffc0000000000 R14: 000000001bd56000 R15: ffff88812f08a400 [ 33.755029][ T972] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.755051][ T972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.760573][ T969] WARNING: CPU: 1 PID: 969 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.768511][ T972] CR2: 00007f02cb555780 CR3: 000000000700f000 CR4: 00000000003506b0 [ 33.768532][ T972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.776521][ T969] Modules linked in: [ 33.776533][ T969] CPU: 1 PID: 969 Comm: syz.2.207 Tainted: G B W syzkaller #0 [ 33.785482][ T972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.785500][ T972] Call Trace: [ 33.785506][ T972] [ 33.792141][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.802165][ T972] pppol2tp_release+0x150/0x2b0 [ 33.810171][ T969] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.818154][ T972] sock_close+0xc9/0x220 [ 33.822050][ T969] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 33.830749][ T972] ? __cfi_sock_close+0x10/0x10 [ 33.838771][ T969] RSP: 0018:ffffc90001d0fb90 EFLAGS: 00010293 [ 33.842092][ T972] __fput+0x1fd/0x8f0 [ 33.845061][ T969] [ 33.855132][ T972] ____fput+0x15/0x20 [ 33.860013][ T969] RAX: ffffffff849cb317 RBX: ffff88811bcc4000 RCX: ffff88811bcc8000 [ 33.866354][ T972] task_work_run+0x1e1/0x250 [ 33.870590][ T969] RDX: 0000000000000000 RSI: 000000002f08a400 RDI: 000000000c04eb7d [ 33.890215][ T972] ? __cfi_task_work_run+0x10/0x10 [ 33.895096][ T969] RBP: ffffc90001d0fbb0 R08: ffff88811bcc4083 R09: 1ffff11023798810 [ 33.901181][ T972] ? free_nsproxy+0x21f/0x270 [ 33.905189][ T969] R10: dffffc0000000000 R11: ffffed1023798811 R12: dffffc0000000000 [ 33.907513][ T972] do_exit+0xb0d/0x29f0 [ 33.911490][ T969] R13: dffffc0000000000 R14: 000000002f08a400 R15: ffff88812f089800 [ 33.919506][ T972] ? __cfi_do_exit+0x10/0x10 [ 33.924135][ T969] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.932132][ T972] ? xfd_validate_state+0x70/0x150 [ 33.937271][ T969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.945258][ T972] ? __kasan_check_write+0x14/0x20 [ 33.949935][ T969] CR2: 00007f456f558060 CR3: 000000012aec0000 CR4: 00000000003506a0 [ 33.958151][ T972] __x64_sys_exit+0x40/0x40 [ 33.962095][ T969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.970080][ T972] x64_sys_call+0x67/0x9a0 [ 33.974703][ T969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.983699][ T972] do_syscall_64+0x4c/0xa0 [ 33.983721][ T972] ? clear_bhb_loop+0x30/0x80 [ 33.983746][ T972] ? clear_bhb_loop+0x30/0x80 [ 33.988853][ T969] Call Trace: [ 33.995492][ T972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.995519][ T972] RIP: 0033:0x7fedccd9f559 [ 33.995536][ T972] Code: Unable to access opcode bytes at 0x7fedccd9f52f. [ 33.995545][ T972] RSP: 002b:00007fedcdbbeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.995566][ T972] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fedccd9f559 [ 33.995580][ T972] RDX: 00007fedcdbbf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.995592][ T972] RBP: 00007fedcce36b20 R08: 0000000000000000 R09: 0000000000000058 [ 33.995605][ T972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.995617][ T972] R13: 00007fedcd026038 R14: 00007fedcd025fa0 R15: 00007ffda6cbb928 [ 33.995633][ T972] [ 33.995639][ T972] ---[ end trace 0000000000000000 ]--- [ 34.125394][ T969] [ 34.128350][ T969] pppol2tp_release+0x150/0x2b0 [ 34.133237][ T969] sock_close+0xc9/0x220 [ 34.137557][ T969] ? __cfi_sock_close+0x10/0x10 [ 34.142436][ T969] __fput+0x1fd/0x8f0 [ 34.146497][ T969] ____fput+0x15/0x20 [ 34.150513][ T969] task_work_run+0x1e1/0x250 [ 34.155170][ T969] ? __cfi_task_work_run+0x10/0x10 [ 34.160606][ T969] ? free_nsproxy+0x21f/0x270 [ 34.165351][ T969] do_exit+0xb0d/0x29f0 [ 34.169548][ T969] ? __cfi_do_exit+0x10/0x10 [ 34.174209][ T969] ? xfd_validate_state+0x70/0x150 [ 34.179351][ T969] ? __kasan_check_write+0x14/0x20 [ 34.184559][ T969] __x64_sys_exit+0x40/0x40 [ 34.189149][ T969] x64_sys_call+0x67/0x9a0 [ 34.193638][ T969] do_syscall_64+0x4c/0xa0 [ 34.198077][ T969] ? clear_bhb_loop+0x30/0x80 [ 34.202787][ T969] ? clear_bhb_loop+0x30/0x80 [ 34.207542][ T969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.213468][ T969] RIP: 0033:0x7f78e779f559 [ 34.217953][ T969] Code: Unable to access opcode bytes at 0x7f78e779f52f. [ 34.225051][ T969] RSP: 002b:00007f78e8688ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.233498][ T969] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78e779f559 [ 34.241725][ T969] RDX: 00007f78e86899c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.249776][ T969] RBP: 00007f78e7836b20 R08: 0000000000000000 R09: 0000000000000058 [ 34.257788][ T969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.265818][ T969] R13: 00007f78e7a26038 R14: 00007f78e7a25fa0 R15: 00007ffcce933128 [ 34.273851][ T969] [ 34.276892][ T969] ---[ end trace 0000000000000000 ]--- [ 34.466230][ T1097] ------------[ cut here ]------------ [ 34.471754][ T1097] WARNING: CPU: 0 PID: 1097 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.482075][ T1097] Modules linked in: [ 34.486103][ T1097] CPU: 0 PID: 1097 Comm: syz.5.242 Tainted: G B W syzkaller #0 [ 34.494989][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.505209][ T1097] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.511615][ T1097] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 34.531371][ T1097] RSP: 0018:ffffc90002687b90 EFLAGS: 00010293 [ 34.537571][ T1097] RAX: ffffffff849cb317 RBX: ffff88811cab1000 RCX: ffff88811c8ad100 [ 34.545710][ T1097] RDX: 0000000000000000 RSI: 00000000208b4f40 RDI: 000000000c04eb7d [ 34.553794][ T1097] RBP: ffffc90002687bb0 R08: ffff88811cab1083 R09: 1ffff11023956210 [ 34.561802][ T1097] R10: dffffc0000000000 R11: ffffed1023956211 R12: dffffc0000000000 [ 34.570224][ T1097] R13: dffffc0000000000 R14: 00000000208b4f40 R15: ffff888119c2e400 [ 34.578320][ T1097] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.587475][ T1097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.594138][ T1097] CR2: 00007f456ea27dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 34.602153][ T1097] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.610178][ T1097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.618193][ T1097] Call Trace: [ 34.621518][ T1097] [ 34.624511][ T1097] pppol2tp_release+0x150/0x2b0 [ 34.629408][ T1097] sock_close+0xc9/0x220 [ 34.634073][ T1097] ? __cfi_sock_close+0x10/0x10 [ 34.638997][ T1097] __fput+0x1fd/0x8f0 [ 34.643017][ T1097] ____fput+0x15/0x20 [ 34.647055][ T1097] task_work_run+0x1e1/0x250 [ 34.651719][ T1097] ? __cfi_task_work_run+0x10/0x10 [ 34.656891][ T1097] ? free_nsproxy+0x21f/0x270 [ 34.661642][ T1097] do_exit+0xb0d/0x29f0 [ 34.665883][ T1097] ? __cfi_do_exit+0x10/0x10 [ 34.670510][ T1097] ? xfd_validate_state+0x70/0x150 [ 34.675670][ T1097] ? __kasan_check_write+0x14/0x20 [ 34.680811][ T1097] __x64_sys_exit+0x40/0x40 [ 34.685384][ T1097] x64_sys_call+0x67/0x9a0 [ 34.689835][ T1097] do_syscall_64+0x4c/0xa0 [ 34.694297][ T1097] ? clear_bhb_loop+0x30/0x80 [ 34.699003][ T1097] ? clear_bhb_loop+0x30/0x80 [ 34.703736][ T1097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.709660][ T1097] RIP: 0033:0x7f4aac59f559 [ 34.714508][ T1097] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 34.721558][ T1097] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.730020][ T1097] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 34.738030][ T1097] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.746060][ T1097] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 34.754080][ T1097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.762080][ T1097] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 34.770113][ T1097] [ 34.773185][ T1097] ---[ end trace 0000000000000000 ]--- [ 34.793509][ T1231] ------------[ cut here ]------------ [ 34.799355][ T1231] WARNING: CPU: 1 PID: 1231 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.809592][ T1231] Modules linked in: [ 34.813506][ T1231] CPU: 1 PID: 1231 Comm: syz.6.290 Tainted: G B W syzkaller #0 [ 34.822403][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.832600][ T1231] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.839100][ T1231] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 34.858877][ T1231] RSP: 0018:ffffc900028a7b90 EFLAGS: 00010293 [ 34.865108][ T1231] RAX: ffffffff849cb317 RBX: ffff88811d53d000 RCX: ffff888110041440 [ 34.873189][ T1231] RDX: 0000000000000000 RSI: 000000001a64d680 RDI: 000000000c04eb7d [ 34.881509][ T1231] RBP: ffffc900028a7bb0 R08: ffff88811d53d083 R09: 1ffff11023aa7a10 [ 34.889550][ T1231] R10: dffffc0000000000 R11: ffffed1023aa7a11 R12: dffffc0000000000 [ 34.897566][ T1231] R13: dffffc0000000000 R14: 000000001a64d680 R15: ffff88811b0e7400 [ 34.905607][ T1231] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.914599][ T1231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.921217][ T1231] CR2: 00007f02caa25fac CR3: 000000011001b000 CR4: 00000000003506a0 [ 34.929405][ T1231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.937438][ T1231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.945468][ T1231] Call Trace: [ 34.948767][ T1231] [ 34.951725][ T1231] pppol2tp_release+0x150/0x2b0 [ 34.956757][ T1231] sock_close+0xc9/0x220 [ 34.961042][ T1231] ? __cfi_sock_close+0x10/0x10 [ 34.965964][ T1231] __fput+0x1fd/0x8f0 [ 34.969980][ T1231] ____fput+0x15/0x20 [ 34.974007][ T1231] task_work_run+0x1e1/0x250 [ 34.978625][ T1231] ? __cfi_task_work_run+0x10/0x10 [ 34.983787][ T1231] ? free_nsproxy+0x21f/0x270 [ 34.988520][ T1231] do_exit+0xb0d/0x29f0 [ 34.992707][ T1231] ? __cfi_do_exit+0x10/0x10 [ 34.997342][ T1231] ? xfd_validate_state+0x70/0x150 [ 35.002496][ T1231] ? __kasan_check_write+0x14/0x20 [ 35.007651][ T1231] __x64_sys_exit+0x40/0x40 [ 35.012190][ T1231] x64_sys_call+0x67/0x9a0 [ 35.016689][ T1231] do_syscall_64+0x4c/0xa0 [ 35.021137][ T1231] ? clear_bhb_loop+0x30/0x80 [ 35.025886][ T1231] ? clear_bhb_loop+0x30/0x80 [ 35.030624][ T1231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.036591][ T1231] RIP: 0033:0x7fedccd9f559 [ 35.041029][ T1231] Code: Unable to access opcode bytes at 0x7fedccd9f52f. [ 35.048102][ T1231] RSP: 002b:00007fedcdbbeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.056564][ T1231] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fedccd9f559 [ 35.064588][ T1231] RDX: 00007fedcdbbf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.072575][ T1231] RBP: 00007fedcce36b20 R08: 0000000000000000 R09: 0000000000000058 [ 35.080599][ T1231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.088602][ T1231] R13: 00007fedcd026038 R14: 00007fedcd025fa0 R15: 00007ffda6cbb928 [ 35.096640][ T1231] [ 35.099669][ T1231] ---[ end trace 0000000000000000 ]--- [ 35.275456][ T1294] ------------[ cut here ]------------ [ 35.277565][ T1292] ------------[ cut here ]------------ [ 35.280978][ T1294] WARNING: CPU: 1 PID: 1294 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.286475][ T1292] WARNING: CPU: 0 PID: 1292 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.286516][ T1292] Modules linked in: [ 35.286527][ T1292] CPU: 0 PID: 1292 Comm: syz.1.309 Tainted: G B W syzkaller #0 [ 35.286546][ T1292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.286557][ T1292] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.286590][ T1292] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 35.296960][ T1294] Modules linked in: [ 35.306821][ T1292] RSP: 0018:ffffc90002e9fb90 EFLAGS: 00010293 [ 35.306842][ T1292] RAX: ffffffff849cb317 RBX: ffff88811325c000 RCX: ffff88812fe03cc0 [ 35.306857][ T1292] RDX: 0000000000000000 RSI: 000000001db37e00 RDI: 000000000c04eb7d [ 35.306870][ T1292] RBP: ffffc90002e9fbb0 R08: ffff88811325c083 R09: 1ffff1102264b810 [ 35.306885][ T1292] R10: dffffc0000000000 R11: ffffed102264b811 R12: dffffc0000000000 [ 35.310772][ T1294] [ 35.310780][ T1294] CPU: 1 PID: 1294 Comm: syz.6.308 Tainted: G B W syzkaller #0 [ 35.319542][ T1292] R13: dffffc0000000000 R14: 000000001db37e00 R15: ffff8881319d1400 [ 35.319560][ T1292] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.319577][ T1292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.319592][ T1292] CR2: 000055555fb1d4e8 CR3: 000000012aec0000 CR4: 00000000003506b0 [ 35.319609][ T1292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.319621][ T1292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.319633][ T1292] Call Trace: [ 35.319639][ T1292] [ 35.319646][ T1292] pppol2tp_release+0x150/0x2b0 [ 35.330018][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.336120][ T1292] sock_close+0xc9/0x220 [ 35.336147][ T1292] ? __cfi_sock_close+0x10/0x10 [ 35.336171][ T1292] __fput+0x1fd/0x8f0 [ 35.336204][ T1292] ____fput+0x15/0x20 [ 35.357165][ T1294] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.359796][ T1292] task_work_run+0x1e1/0x250 [ 35.359825][ T1292] ? __cfi_task_work_run+0x10/0x10 [ 35.359860][ T1292] ? free_nsproxy+0x21f/0x270 [ 35.359887][ T1292] do_exit+0xb0d/0x29f0 [ 35.366061][ T1294] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 35.374079][ T1292] ? __cfi_do_exit+0x10/0x10 [ 35.374110][ T1292] ? xfd_validate_state+0x70/0x150 [ 35.374139][ T1292] ? __kasan_check_write+0x14/0x20 [ 35.374163][ T1292] __x64_sys_exit+0x40/0x40 [ 35.382374][ T1294] RSP: 0018:ffffc90002e3fb90 EFLAGS: 00010293 [ 35.390191][ T1292] x64_sys_call+0x67/0x9a0 [ 35.390219][ T1292] do_syscall_64+0x4c/0xa0 [ 35.390238][ T1292] ? clear_bhb_loop+0x30/0x80 [ 35.390263][ T1292] ? clear_bhb_loop+0x30/0x80 [ 35.398532][ T1294] [ 35.400612][ T1292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.409633][ T1294] RAX: ffffffff849cb317 RBX: ffff88811d8fa000 RCX: ffff88811d405100 [ 35.417445][ T1292] RIP: 0033:0x7f02ca79f559 [ 35.426416][ T1294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 35.433000][ T1292] Code: Unable to access opcode bytes at 0x7f02ca79f52f. [ 35.441200][ T1294] RBP: ffffc90002e3fbb0 R08: ffff88811d8fa083 R09: 1ffff11023b1f410 [ 35.441218][ T1294] R10: dffffc0000000000 R11: ffffed1023b1f411 R12: dffffc0000000000 [ 35.449223][ T1292] RSP: 002b:00007f02ca5feef8 EFLAGS: 00000246 [ 35.457263][ T1294] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881156ef400 [ 35.460544][ T1292] ORIG_RAX: 000000000000003c [ 35.463487][ T1294] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.468356][ T1292] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02ca79f559 [ 35.478581][ T1294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.482681][ T1292] RDX: 00007f02ca5ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.487551][ T1294] CR2: 000055555fb308c8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 35.491535][ T1292] RBP: 00007f02ca836b20 R08: 0000000000000000 R09: 0000000000000058 [ 35.495545][ T1294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.501864][ T1292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.506470][ T1294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.506502][ T1294] Call Trace: [ 35.511598][ T1292] R13: 00007f02caa26038 R14: 00007f02caa25fa0 R15: 00007ffcefa54508 [ 35.516728][ T1294] [ 35.520543][ T1292] [ 35.540187][ T1294] pppol2tp_release+0x150/0x2b0 [ 35.544769][ T1292] ---[ end trace 0000000000000000 ]--- [ 35.549878][ T1294] sock_close+0xc9/0x220 [ 35.758659][ T1294] ? __cfi_sock_close+0x10/0x10 [ 35.763521][ T1294] __fput+0x1fd/0x8f0 [ 35.767577][ T1294] ____fput+0x15/0x20 [ 35.771624][ T1294] task_work_run+0x1e1/0x250 [ 35.776275][ T1294] ? __cfi_task_work_run+0x10/0x10 [ 35.781541][ T1294] ? free_nsproxy+0x21f/0x270 [ 35.786303][ T1294] do_exit+0xb0d/0x29f0 [ 35.790486][ T1294] ? __cfi_do_exit+0x10/0x10 [ 35.795187][ T1294] ? xfd_validate_state+0x70/0x150 [ 35.800326][ T1294] ? __kasan_check_write+0x14/0x20 [ 35.805509][ T1294] __x64_sys_exit+0x40/0x40 [ 35.810055][ T1294] x64_sys_call+0x67/0x9a0 [ 35.814513][ T1294] do_syscall_64+0x4c/0xa0 [ 35.818947][ T1294] ? clear_bhb_loop+0x30/0x80 [ 35.823696][ T1294] ? clear_bhb_loop+0x30/0x80 [ 35.828409][ T1294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.834471][ T1294] RIP: 0033:0x7fedccd9f559 [ 35.838913][ T1294] Code: Unable to access opcode bytes at 0x7fedccd9f52f. [ 35.845961][ T1294] RSP: 002b:00007fedcdbbeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.854409][ T1294] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fedccd9f559 [ 35.862387][ T1294] RDX: 00007fedcdbbf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.870429][ T1294] RBP: 00007fedcce36b20 R08: 0000000000000000 R09: 0000000000000058 [ 35.878453][ T1294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.886466][ T1294] R13: 00007fedcd026038 R14: 00007fedcd025fa0 R15: 00007ffda6cbb928 [ 35.894489][ T1294] [ 35.897524][ T1294] ---[ end trace 0000000000000000 ]--- [ 36.067725][ T1424] ------------[ cut here ]------------ [ 36.073360][ T1424] WARNING: CPU: 1 PID: 1424 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.083643][ T1424] Modules linked in: [ 36.087655][ T1424] CPU: 1 PID: 1424 Comm: syz.5.356 Tainted: G B W syzkaller #0 [ 36.096570][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.106753][ T1424] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.113208][ T1424] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 36.132992][ T1424] RSP: 0018:ffffc900033f7b90 EFLAGS: 00010293 [ 36.139216][ T1424] RAX: ffffffff849cb317 RBX: ffff88811df7d000 RCX: ffff88811df65100 [ 36.147306][ T1424] RDX: 0000000000000000 RSI: 000000001cc27700 RDI: 000000000c04eb7d [ 36.155433][ T1424] RBP: ffffc900033f7bb0 R08: ffff88811df7d083 R09: 1ffff11023befa10 [ 36.163477][ T1424] R10: dffffc0000000000 R11: ffffed1023befa11 R12: dffffc0000000000 [ 36.171540][ T1424] R13: dffffc0000000000 R14: 000000001cc27700 R15: ffff88811ddbf000 [ 36.179575][ T1424] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.188583][ T1424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.195230][ T1424] CR2: 00007f02cb5556c8 CR3: 0000000121eda000 CR4: 00000000003506a0 [ 36.203242][ T1424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.211275][ T1424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.219341][ T1424] Call Trace: [ 36.222659][ T1424] [ 36.225646][ T1424] pppol2tp_release+0x150/0x2b0 [ 36.230539][ T1424] sock_close+0xc9/0x220 [ 36.234852][ T1424] ? __cfi_sock_close+0x10/0x10 [ 36.239732][ T1424] __fput+0x1fd/0x8f0 [ 36.243814][ T1424] ____fput+0x15/0x20 [ 36.247828][ T1424] task_work_run+0x1e1/0x250 [ 36.252444][ T1424] ? __cfi_task_work_run+0x10/0x10 [ 36.257621][ T1424] ? free_nsproxy+0x21f/0x270 [ 36.262330][ T1424] do_exit+0xb0d/0x29f0 [ 36.266549][ T1424] ? __cfi_do_exit+0x10/0x10 [ 36.271186][ T1424] ? xfd_validate_state+0x70/0x150 [ 36.276372][ T1424] ? __kasan_check_write+0x14/0x20 [ 36.281515][ T1424] __x64_sys_exit+0x40/0x40 [ 36.286074][ T1424] x64_sys_call+0x67/0x9a0 [ 36.290529][ T1424] do_syscall_64+0x4c/0xa0 [ 36.295025][ T1424] ? clear_bhb_loop+0x30/0x80 [ 36.299742][ T1424] ? clear_bhb_loop+0x30/0x80 [ 36.304488][ T1424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.310416][ T1424] RIP: 0033:0x7f4aac59f559 [ 36.314877][ T1424] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 36.321911][ T1424] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.330377][ T1424] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 36.338444][ T1424] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.346473][ T1424] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 36.354486][ T1424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.362483][ T1424] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 36.370516][ T1424] [ 36.373571][ T1424] ---[ end trace 0000000000000000 ]--- [ 36.381271][ T1426] ------------[ cut here ]------------ [ 36.386851][ T1426] WARNING: CPU: 1 PID: 1426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.397047][ T1426] Modules linked in: [ 36.400962][ T1426] CPU: 1 PID: 1426 Comm: syz.2.355 Tainted: G B W syzkaller #0 [ 36.409868][ T1426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.420044][ T1426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.426536][ T1426] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 36.446286][ T1426] RSP: 0018:ffffc900033e7b90 EFLAGS: 00010293 [ 36.452379][ T1426] RAX: ffffffff849cb317 RBX: ffff88811e86f000 RCX: ffff88811e7be540 [ 36.460484][ T1426] RDX: 0000000000000000 RSI: 00000000167a7800 RDI: 000000000c04eb7d [ 36.468627][ T1426] RBP: ffffc900033e7bb0 R08: ffff88811e86f083 R09: 1ffff11023d0de10 [ 36.476881][ T1426] R10: dffffc0000000000 R11: ffffed1023d0de11 R12: dffffc0000000000 [ 36.484976][ T1426] R13: dffffc0000000000 R14: 00000000167a7800 R15: ffff88811b025400 [ 36.493140][ T1426] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.502231][ T1426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.508925][ T1426] CR2: 00007f456f558060 CR3: 000000000700f000 CR4: 00000000003506a0 [ 36.516979][ T1426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.525003][ T1426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.533016][ T1426] Call Trace: [ 36.536352][ T1426] [ 36.539400][ T1426] pppol2tp_release+0x150/0x2b0 [ 36.544320][ T1426] sock_close+0xc9/0x220 [ 36.548591][ T1426] ? __cfi_sock_close+0x10/0x10 [ 36.553471][ T1426] __fput+0x1fd/0x8f0 [ 36.557515][ T1426] ____fput+0x15/0x20 [ 36.561527][ T1426] task_work_run+0x1e1/0x250 [ 36.566201][ T1426] ? __cfi_task_work_run+0x10/0x10 [ 36.571351][ T1426] ? free_nsproxy+0x21f/0x270 [ 36.576350][ T1426] do_exit+0xb0d/0x29f0 [ 36.580562][ T1426] ? __cfi_do_exit+0x10/0x10 [ 36.585219][ T1426] ? xfd_validate_state+0x70/0x150 [ 36.590361][ T1426] ? __kasan_check_write+0x14/0x20 [ 36.595553][ T1426] __x64_sys_exit+0x40/0x40 [ 36.600095][ T1426] x64_sys_call+0x67/0x9a0 [ 36.604565][ T1426] do_syscall_64+0x4c/0xa0 [ 36.609005][ T1426] ? clear_bhb_loop+0x30/0x80 [ 36.613750][ T1426] ? clear_bhb_loop+0x30/0x80 [ 36.618491][ T1426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.624459][ T1426] RIP: 0033:0x7f78e779f559 [ 36.628917][ T1426] Code: Unable to access opcode bytes at 0x7f78e779f52f. [ 36.635977][ T1426] RSP: 002b:00007f78e8688ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.644599][ T1426] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f78e779f559 [ 36.652606][ T1426] RDX: 00007f78e86899c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.660635][ T1426] RBP: 00007f78e7836b20 R08: 0000000000000000 R09: 0000000000000058 [ 36.668661][ T1426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.676689][ T1426] R13: 00007f78e7a26038 R14: 00007f78e7a25fa0 R15: 00007ffcce933128 [ 36.684705][ T1426] [ 36.687752][ T1426] ---[ end trace 0000000000000000 ]--- [ 36.817747][ T1564] ------------[ cut here ]------------ [ 36.823260][ T1564] WARNING: CPU: 0 PID: 1564 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.833478][ T1564] Modules linked in: [ 36.837485][ T1564] CPU: 0 PID: 1564 Comm: syz.1.398 Tainted: G B W syzkaller #0 [ 36.846318][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.856427][ T1564] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.862813][ T1564] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 36.882478][ T1564] RSP: 0018:ffffc90003887b90 EFLAGS: 00010293 [ 36.888605][ T1564] RAX: ffffffff849cb317 RBX: ffff88811fd33000 RCX: ffff88811f86bcc0 [ 36.896627][ T1564] RDX: 0000000000000000 RSI: 000000001d99b7c0 RDI: 000000000c04eb7d [ 36.904658][ T1564] RBP: ffffc90003887bb0 R08: ffff88811fd33083 R09: 1ffff11023fa6610 [ 36.912682][ T1564] R10: dffffc0000000000 R11: ffffed1023fa6611 R12: dffffc0000000000 [ 36.920744][ T1564] R13: dffffc0000000000 R14: 000000001d99b7c0 R15: ffff88811dbdb400 [ 36.928771][ T1564] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.937821][ T1564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.944475][ T1564] CR2: 0000200000000240 CR3: 000000000700f000 CR4: 00000000003506b0 [ 36.952490][ T1564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.960741][ T1564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.968777][ T1564] Call Trace: [ 36.972073][ T1564] [ 36.975057][ T1564] pppol2tp_release+0x150/0x2b0 [ 36.979948][ T1564] sock_close+0xc9/0x220 [ 36.984241][ T1564] ? __cfi_sock_close+0x10/0x10 [ 36.989124][ T1564] __fput+0x1fd/0x8f0 [ 36.993151][ T1564] ____fput+0x15/0x20 [ 36.997206][ T1564] task_work_run+0x1e1/0x250 [ 37.001829][ T1564] ? __cfi_task_work_run+0x10/0x10 [ 37.006996][ T1564] ? free_nsproxy+0x21f/0x270 [ 37.011714][ T1564] do_exit+0xb0d/0x29f0 [ 37.015932][ T1564] ? __cfi_do_exit+0x10/0x10 [ 37.020556][ T1564] ? xfd_validate_state+0x70/0x150 [ 37.025755][ T1564] ? __kasan_check_write+0x14/0x20 [ 37.030893][ T1564] __x64_sys_exit+0x40/0x40 [ 37.035553][ T1564] x64_sys_call+0x67/0x9a0 [ 37.040005][ T1564] do_syscall_64+0x4c/0xa0 [ 37.044474][ T1564] ? clear_bhb_loop+0x30/0x80 [ 37.049199][ T1564] ? clear_bhb_loop+0x30/0x80 [ 37.053937][ T1564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.059865][ T1564] RIP: 0033:0x7f02ca79f559 [ 37.064328][ T1564] Code: Unable to access opcode bytes at 0x7f02ca79f52f. [ 37.071367][ T1564] RSP: 002b:00007f02ca5feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.079824][ T1564] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02ca79f559 [ 37.087962][ T1564] RDX: 00007f02ca5ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.095987][ T1564] RBP: 00007f02ca836b20 R08: 0000000000000000 R09: 0000000000000058 [ 37.104019][ T1564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.112049][ T1564] R13: 00007f02caa26038 R14: 00007f02caa25fa0 R15: 00007ffcefa54508 [ 37.120220][ T1564] [ 37.123265][ T1564] ---[ end trace 0000000000000000 ]--- [ 37.284640][ T1710] ------------[ cut here ]------------ [ 37.290225][ T1710] WARNING: CPU: 0 PID: 1710 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.300381][ T1710] Modules linked in: [ 37.304315][ T1710] CPU: 0 PID: 1710 Comm: syz.1.448 Tainted: G B W syzkaller #0 [ 37.313130][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.323254][ T1710] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.329643][ T1710] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 37.349321][ T1710] RSP: 0018:ffffc90000de7b90 EFLAGS: 00010293 [ 37.355458][ T1710] RAX: ffffffff849cb317 RBX: ffff888108ea2000 RCX: ffff888108e93cc0 [ 37.363518][ T1710] RDX: 0000000000000000 RSI: 00000000165bd440 RDI: 000000000c04eb7d [ 37.371558][ T1710] RBP: ffffc90000de7bb0 R08: ffff888108ea2083 R09: 1ffff110211d4410 [ 37.379594][ T1710] R10: dffffc0000000000 R11: ffffed10211d4411 R12: dffffc0000000000 [ 37.387613][ T1710] R13: dffffc0000000000 R14: 00000000165bd440 R15: ffff88811ef40000 [ 37.395638][ T1710] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.404675][ T1710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.411299][ T1710] CR2: 00007f456ea27dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 37.419329][ T1710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.427342][ T1710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.435579][ T1710] Call Trace: [ 37.438900][ T1710] [ 37.441851][ T1710] pppol2tp_release+0x150/0x2b0 [ 37.446770][ T1710] sock_close+0xc9/0x220 [ 37.451045][ T1710] ? __cfi_sock_close+0x10/0x10 [ 37.455956][ T1710] __fput+0x1fd/0x8f0 [ 37.459971][ T1710] ____fput+0x15/0x20 [ 37.464029][ T1710] task_work_run+0x1e1/0x250 [ 37.468649][ T1710] ? __cfi_task_work_run+0x10/0x10 [ 37.473815][ T1710] ? free_nsproxy+0x21f/0x270 [ 37.478524][ T1710] do_exit+0xb0d/0x29f0 [ 37.482714][ T1710] ? __cfi_do_exit+0x10/0x10 [ 37.487384][ T1710] ? xfd_validate_state+0x70/0x150 [ 37.492523][ T1710] ? __kasan_check_write+0x14/0x20 [ 37.497696][ T1710] __x64_sys_exit+0x40/0x40 [ 37.502232][ T1710] x64_sys_call+0x67/0x9a0 [ 37.506702][ T1710] do_syscall_64+0x4c/0xa0 [ 37.511153][ T1710] ? clear_bhb_loop+0x30/0x80 [ 37.516079][ T1710] ? clear_bhb_loop+0x30/0x80 [ 37.520887][ T1710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.526881][ T1710] RIP: 0033:0x7f02ca79f559 [ 37.531319][ T1710] Code: Unable to access opcode bytes at 0x7f02ca79f52f. [ 37.538386][ T1710] RSP: 002b:00007f02ca5feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.546858][ T1710] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02ca79f559 [ 37.554893][ T1710] RDX: 00007f02ca5ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.562894][ T1710] RBP: 00007f02ca836b20 R08: 0000000000000000 R09: 0000000000000058 [ 37.570920][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.578937][ T1710] R13: 00007f02caa26038 R14: 00007f02caa25fa0 R15: 00007ffcefa54508 [ 37.586975][ T1710] [ 37.590015][ T1710] ---[ end trace 0000000000000000 ]--- [ 37.695529][ T1856] ------------[ cut here ]------------ [ 37.701057][ T1856] WARNING: CPU: 1 PID: 1856 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.711206][ T1856] Modules linked in: [ 37.715177][ T1856] CPU: 1 PID: 1856 Comm: syz.4.499 Tainted: G B W syzkaller #0 [ 37.723983][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.734140][ T1856] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.740512][ T1856] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 37.760335][ T1856] RSP: 0018:ffffc90000d17b90 EFLAGS: 00010293 [ 37.766502][ T1856] RAX: ffffffff849cb317 RBX: ffff888114e2c000 RCX: ffff88810d319440 [ 37.774519][ T1856] RDX: 0000000000000000 RSI: 0000000021e2d720 RDI: 000000000c04eb7d [ 37.782551][ T1856] RBP: ffffc90000d17bb0 R08: ffff888114e2c083 R09: 1ffff110229c5810 [ 37.790579][ T1856] R10: dffffc0000000000 R11: ffffed10229c5811 R12: dffffc0000000000 [ 37.798616][ T1856] R13: dffffc0000000000 R14: 0000000021e2d720 R15: ffff88812019b400 [ 37.806784][ T1856] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.815903][ T1856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.822513][ T1856] CR2: 00007f78e8688ff8 CR3: 000000012e563000 CR4: 00000000003506a0 [ 37.830560][ T1856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.838579][ T1856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.846609][ T1856] Call Trace: [ 37.849934][ T1856] [ 37.852911][ T1856] pppol2tp_release+0x150/0x2b0 [ 37.857874][ T1856] sock_close+0xc9/0x220 [ 37.862177][ T1856] ? __cfi_sock_close+0x10/0x10 [ 37.867091][ T1856] __fput+0x1fd/0x8f0 [ 37.871109][ T1856] ____fput+0x15/0x20 [ 37.875169][ T1856] task_work_run+0x1e1/0x250 [ 37.879823][ T1856] ? __cfi_task_work_run+0x10/0x10 [ 37.885022][ T1856] ? free_nsproxy+0x21f/0x270 [ 37.889740][ T1856] do_exit+0xb0d/0x29f0 [ 37.893960][ T1856] ? __cfi_do_exit+0x10/0x10 [ 37.898580][ T1856] ? xfd_validate_state+0x70/0x150 [ 37.903759][ T1856] ? __kasan_check_write+0x14/0x20 [ 37.908928][ T1856] __x64_sys_exit+0x40/0x40 [ 37.913465][ T1856] x64_sys_call+0x67/0x9a0 [ 37.917960][ T1856] do_syscall_64+0x4c/0xa0 [ 37.922432][ T1856] ? clear_bhb_loop+0x30/0x80 [ 37.927205][ T1856] ? clear_bhb_loop+0x30/0x80 [ 37.931927][ T1856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.937891][ T1856] RIP: 0033:0x7f456e79f559 [ 37.942350][ T1856] Code: Unable to access opcode bytes at 0x7f456e79f52f. [ 37.949433][ T1856] RSP: 002b:00007f456f5b1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.957939][ T1856] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f456e79f559 [ 37.965982][ T1856] RDX: 00007f456f5b29c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.974002][ T1856] RBP: 00007f456e836b20 R08: 0000000000000000 R09: 0000000000000058 [ 37.982170][ T1856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.990220][ T1856] R13: 00007f456ea26038 R14: 00007f456ea25fa0 R15: 00007ffec2800b88 [ 37.998406][ T1856] [ 38.001454][ T1856] ---[ end trace 0000000000000000 ]--- 2026/10/25 00:42:13 executed programs: 545 [ 38.107307][ T1967] ------------[ cut here ]------------ [ 38.112822][ T1967] WARNING: CPU: 0 PID: 1967 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.122998][ T1967] Modules linked in: [ 38.126941][ T1967] CPU: 0 PID: 1967 Comm: syz.5.536 Tainted: G B W syzkaller #0 [ 38.135767][ T1967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.145902][ T1967] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.152298][ T1967] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 38.172071][ T1967] RSP: 0018:ffffc9000145fb90 EFLAGS: 00010293 [ 38.178195][ T1967] RAX: ffffffff849cb317 RBX: ffff88811a178000 RCX: ffff88810d483cc0 [ 38.186221][ T1967] RDX: 0000000000000000 RSI: 000000002df1bb80 RDI: 000000000c04eb7d [ 38.194248][ T1967] RBP: ffffc9000145fbb0 R08: ffff88811a178083 R09: 1ffff1102342f010 [ 38.202263][ T1967] R10: dffffc0000000000 R11: ffffed102342f011 R12: dffffc0000000000 [ 38.210348][ T1967] R13: dffffc0000000000 R14: 000000002df1bb80 R15: ffff888108868c00 [ 38.218392][ T1967] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.227381][ T1967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.234051][ T1967] CR2: 00007fedcd027dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 38.242067][ T1967] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.250100][ T1967] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.258130][ T1967] Call Trace: [ 38.261427][ T1967] [ 38.264396][ T1967] pppol2tp_release+0x150/0x2b0 [ 38.269297][ T1967] sock_close+0xc9/0x220 [ 38.273611][ T1967] ? __cfi_sock_close+0x10/0x10 [ 38.278492][ T1967] __fput+0x1fd/0x8f0 [ 38.282514][ T1967] ____fput+0x15/0x20 [ 38.286570][ T1967] task_work_run+0x1e1/0x250 [ 38.291196][ T1967] ? __cfi_task_work_run+0x10/0x10 [ 38.296363][ T1967] ? free_nsproxy+0x21f/0x270 [ 38.301101][ T1967] do_exit+0xb0d/0x29f0 [ 38.305350][ T1967] ? __cfi_do_exit+0x10/0x10 [ 38.309976][ T1967] ? xfd_validate_state+0x70/0x150 [ 38.315196][ T1967] ? __kasan_check_write+0x14/0x20 [ 38.320337][ T1967] __x64_sys_exit+0x40/0x40 [ 38.324903][ T1967] x64_sys_call+0x67/0x9a0 [ 38.329349][ T1967] do_syscall_64+0x4c/0xa0 [ 38.333856][ T1967] ? clear_bhb_loop+0x30/0x80 [ 38.338579][ T1967] ? clear_bhb_loop+0x30/0x80 [ 38.343289][ T1967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.349245][ T1967] RIP: 0033:0x7f4aac59f559 [ 38.353702][ T1967] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 38.360738][ T1967] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.369200][ T1967] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 38.377216][ T1967] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.385272][ T1967] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 38.393266][ T1967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.401287][ T1967] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 38.409326][ T1967] [ 38.412367][ T1967] ---[ end trace 0000000000000000 ]--- [ 38.520949][ T2082] ------------[ cut here ]------------ [ 38.526560][ T2082] WARNING: CPU: 0 PID: 2082 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.536842][ T2082] Modules linked in: [ 38.540755][ T2082] CPU: 0 PID: 2082 Comm: syz.4.574 Tainted: G B W syzkaller #0 [ 38.543920][ T2083] ------------[ cut here ]------------ [ 38.549801][ T2082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.555096][ T2083] WARNING: CPU: 1 PID: 2083 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.565257][ T2082] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.565296][ T2082] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 38.565313][ T2082] RSP: 0018:ffffc90001cbfb90 EFLAGS: 00010293 [ 38.565331][ T2082] RAX: ffffffff849cb317 RBX: ffff88810fb83000 RCX: ffff88810d2aa880 [ 38.575413][ T2083] Modules linked in: [ 38.575425][ T2083] CPU: 1 PID: 2083 Comm: syz.5.570 Tainted: G B W syzkaller #0 [ 38.575447][ T2083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.575458][ T2083] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.582081][ T2082] RDX: 0000000000000000 RSI: 000000000dd70400 RDI: 000000000c04eb7d [ 38.601475][ T2083] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 38.601496][ T2083] RSP: 0018:ffffc90001ccfb90 EFLAGS: 00010293 [ 38.607679][ T2082] RBP: ffffc90001cbfbb0 R08: ffff88810fb83083 R09: 1ffff11021f70610 [ 38.615581][ T2083] [ 38.615587][ T2083] RAX: ffffffff849cb317 RBX: ffff88810fb87000 RCX: ffff88810d2ad100 [ 38.619498][ T2082] R10: dffffc0000000000 R11: ffffed1021f70611 R12: dffffc0000000000 [ 38.628331][ T2083] RDX: 0000000000000000 RSI: 00000000096cbc00 RDI: 000000000c04eb7d [ 38.638560][ T2082] R13: dffffc0000000000 R14: 000000000dd70400 R15: ffff8881096cbc00 [ 38.644708][ T2083] RBP: ffffc90001ccfbb0 R08: ffff88810fb87083 R09: 1ffff11021f70e10 [ 38.652698][ T2082] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.672377][ T2083] R10: dffffc0000000000 R11: ffffed1021f70e11 R12: dffffc0000000000 [ 38.678454][ T2082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.686635][ T2083] R13: dffffc0000000000 R14: 00000000096cbc00 R15: ffff8881096cb400 [ 38.688773][ T2082] CR2: 00007f456e75a670 CR3: 000000012c60c000 CR4: 00000000003506b0 [ 38.696804][ T2083] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.704803][ T2082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.712774][ T2083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.720763][ T2082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.720778][ T2082] Call Trace: [ 38.720785][ T2082] [ 38.728778][ T2083] CR2: 00007f4aad358060 CR3: 00000001227df000 CR4: 00000000003506a0 [ 38.728802][ T2083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.728815][ T2083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.728828][ T2083] Call Trace: [ 38.728834][ T2083] [ 38.728842][ T2083] pppol2tp_release+0x150/0x2b0 [ 38.728879][ T2083] sock_close+0xc9/0x220 [ 38.737844][ T2082] pppol2tp_release+0x150/0x2b0 [ 38.745829][ T2083] ? __cfi_sock_close+0x10/0x10 [ 38.752418][ T2082] sock_close+0xc9/0x220 [ 38.760411][ T2083] __fput+0x1fd/0x8f0 [ 38.768401][ T2082] ? __cfi_sock_close+0x10/0x10 [ 38.777588][ T2083] ____fput+0x15/0x20 [ 38.785386][ T2082] __fput+0x1fd/0x8f0 [ 38.791978][ T2083] task_work_run+0x1e1/0x250 [ 38.799985][ T2082] ____fput+0x15/0x20 [ 38.803267][ T2083] ? __cfi_task_work_run+0x10/0x10 [ 38.806219][ T2082] task_work_run+0x1e1/0x250 [ 38.806246][ T2082] ? __cfi_task_work_run+0x10/0x10 [ 38.806271][ T2082] ? free_nsproxy+0x21f/0x270 [ 38.814275][ T2083] ? free_nsproxy+0x21f/0x270 [ 38.822265][ T2082] do_exit+0xb0d/0x29f0 [ 38.830260][ T2083] do_exit+0xb0d/0x29f0 [ 38.833561][ T2082] ? __cfi_do_exit+0x10/0x10 [ 38.836504][ T2083] ? __cfi_do_exit+0x10/0x10 [ 38.841345][ T2082] ? xfd_validate_state+0x70/0x150 [ 38.845606][ T2083] ? xfd_validate_state+0x70/0x150 [ 38.850454][ T2082] ? __kasan_check_write+0x14/0x20 [ 38.855322][ T2083] ? __kasan_check_write+0x14/0x20 [ 38.859566][ T2082] __x64_sys_exit+0x40/0x40 [ 38.863573][ T2083] __x64_sys_exit+0x40/0x40 [ 38.868427][ T2082] x64_sys_call+0x67/0x9a0 [ 38.872425][ T2083] x64_sys_call+0x67/0x9a0 [ 38.876467][ T2082] do_syscall_64+0x4c/0xa0 [ 38.881038][ T2083] do_syscall_64+0x4c/0xa0 [ 38.885042][ T2082] ? clear_bhb_loop+0x30/0x80 [ 38.890154][ T2083] ? clear_bhb_loop+0x30/0x80 [ 38.894794][ T2082] ? clear_bhb_loop+0x30/0x80 [ 38.899912][ T2083] ? clear_bhb_loop+0x30/0x80 [ 38.904616][ T2082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.909290][ T2083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.913470][ T2082] RIP: 0033:0x7f456e79f559 [ 38.917657][ T2083] RIP: 0033:0x7f4aac59f559 [ 38.922265][ T2082] Code: Unable to access opcode bytes at 0x7f456e79f52f. [ 38.926899][ T2083] Code: Unable to access opcode bytes at 0x7f4aac59f52f. [ 38.932005][ T2082] RSP: 002b:00007f456f5b1ef8 EFLAGS: 00000246 [ 38.937137][ T2083] RSP: 002b:00007f4aad4cfef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.942263][ T2082] ORIG_RAX: 000000000000003c [ 38.947412][ T2083] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4aac59f559 [ 38.951912][ T2082] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f456e79f559 [ 38.956487][ T2083] RDX: 00007f4aad4d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.960862][ T2082] RDX: 00007f456f5b29c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.965487][ T2083] RBP: 00007f4aac636b20 R08: 0000000000000000 R09: 0000000000000058 [ 38.969921][ T2082] RBP: 00007f456e836b20 R08: 0000000000000000 R09: 0000000000000058 [ 38.974368][ T2083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.979056][ T2082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.983747][ T2083] R13: 00007f4aac826038 R14: 00007f4aac825fa0 R15: 00007fff688d3508 [ 38.988420][ T2082] R13: 00007f456ea26038 R14: 00007f456ea25fa0 R15: 00007ffec2800b88 [ 38.993097][ T2083] [ 38.999173][ T2082] [ 39.004901][ T2083] ---[ end trace 0000000000000000 ]--- [ 39.009314][ T2082] ---[ end trace 0000000000000000 ]--- [ 39.150094][ T2076] ------------[ cut here ]------------ [ 39.155629][ T2076] WARNING: CPU: 1 PID: 2076 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.165851][ T2076] Modules linked in: [ 39.169783][ T2076] CPU: 1 PID: 2076 Comm: syz.1.572 Tainted: G B W syzkaller #0 [ 39.178662][ T2076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.188859][ T2076] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.195358][ T2076] Code: 5d c3 e8 2c c0 d4 fc be 02 00 00 00 eb 0a e8 20 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 23 c5 cc fd e9 0f ff ff ff e8 09 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 f8 bf d4 fc 4c 89 f7 be 03 [ 39.215114][ T2076] RSP: 0018:ffffc90001c6fb90 EFLAGS: 00010293 [ 39.221205][ T2076] RAX: ffffffff849cb317 RBX: ffff88810942a000 RCX: ffff88810f8d0000 [ 39.229297][ T2076] RDX: 0000000000000000 RSI: 000000002ae23c80 RDI: 000000000c04eb7d [ 39.237406][ T2076] RBP: ffffc90001c6fbb0 R08: ffff88810942a083 R09: 1ffff11021285410 [ 39.245528][ T2076] R10: dffffc0000000000 R11: ffffed1021285411 R12: dffffc0000000000 [ 39.253531][ T2076] R13: dffffc0000000000 R14: 000000002ae23c80 R15: ffff88810dd70400 [ 39.261641][ T2076] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.270629][ T2076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.277267][ T2076] CR2: 00007f4aad358060 CR3: 000000000700f000 CR4: 00000000003506a0 [ 39.285326][ T2076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.293323][ T2076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.301346][ T2076] Call Trace: [ 39.304697][ T2076] [ 39.307665][ T2076] pppol2tp_release+0x150/0x2b0 [ 39.312568][ T2076] sock_close+0xc9/0x220 [ 39.316927][ T2076] ? __cfi_sock_close+0x10/0x10 [ 39.321807][ T2076] __fput+0x1fd/0x8f0 [ 39.325858][ T2076] ____fput+0x15/0x20 [ 39.329875][ T2076] task_work_run+0x1e1/0x250 [ 39.334520][ T2076] ? __cfi_task_work_run+0x10/0x10 [ 39.339662][ T2076] ? free_nsproxy+0x21f/0x270 [ 39.344410][ T2076] do_exit+0xb0d/0x29f0 [ 39.348635][ T2076] ? __cfi_do_exit+0x10/0x10 [ 39.353259][ T2076] ? xfd_validate_state+0x70/0x150 [ 39.358443][ T2076] ? __kasan_check_write+0x14/0x20 [ 39.363605][ T2076] __x64_sys_exit+0x40/0x40 [ 39.368148][ T2076] x64_sys_call+0x67/0x9a0 [ 39.372591][ T2076] do_syscall_64+0x4c/0xa0 [ 39.377077][ T2076] ? clear_bhb_loop+0x30/0x80 [ 39.381796][ T2076] ? clear_bhb_loop+0x30/0x80 [ 39.386523][ T2076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.392449][ T2076] RIP: 0033:0x7f02ca79f559 [ 39.397021][ T2076] Code: Unable to access opcode bytes at 0x7f02ca79f52f. [ 39.404075][ T2076] RSP: 002b:00007f02ca5feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 39.412516][ T2076] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02ca79f559 [ 39.420545][ T2076] RDX: 00007f02ca5ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.428565][ T2076] RBP: 00007f02ca836b20 R08: 0000000000000000 R09: 0000000000000058 [ 39.436710][ T2076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.444741][ T2076] R13: 00007f02caa26038 R14: 00007f02caa25fa0 R15: 00007ffcefa54508 [ 39.452743][ T2076] [ 39.455799][ T2076] ---[ end trace 0000000000000000 ]---