Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts. 2026/06/14 20:18:19 parsed 1 programs [ 24.942338][ T28] audit: type=1400 audit(1781468299.726:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.963102][ T28] audit: type=1400 audit(1781468299.726:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.130179][ T28] audit: type=1400 audit(1781468300.916:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.133444][ T302] cgroup: Unknown subsys name 'net' [ 26.152995][ T28] audit: type=1400 audit(1781468300.916:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.180295][ T28] audit: type=1400 audit(1781468300.956:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.180719][ T302] cgroup: Unknown subsys name 'devices' [ 26.326375][ T302] cgroup: Unknown subsys name 'hugetlb' [ 26.332007][ T302] cgroup: Unknown subsys name 'rlimit' [ 26.446148][ T28] audit: type=1400 audit(1781468301.236:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.469369][ T28] audit: type=1400 audit(1781468301.236:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.489805][ T28] audit: type=1400 audit(1781468301.236:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.510171][ T28] audit: type=1400 audit(1781468301.236:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.530523][ T28] audit: type=1400 audit(1781468301.236:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.536824][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.626779][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.424672][ T312] request_module fs-gadgetfs succeeded, but still no fs? [ 27.742026][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.784370][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.792177][ T325] device bridge_slave_0 entered promiscuous mode [ 27.841745][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.852798][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.860578][ T325] device bridge_slave_1 entered promiscuous mode [ 28.118586][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.125728][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.133096][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.140220][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.188343][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.195989][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.214554][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.224560][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.254867][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.263426][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.270531][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.278847][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.287870][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.294963][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.302676][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.318867][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.333846][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.346204][ T325] device veth0_vlan entered promiscuous mode [ 28.352929][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.361733][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.369981][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.392111][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/06/14 20:18:23 executed programs: 0 [ 28.401122][ T325] device veth1_macvtap entered promiscuous mode [ 28.413301][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.427093][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.474477][ T325] syz-executor (325) used greatest stack depth: 22080 bytes left [ 28.619824][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.627191][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.634743][ T377] device bridge_slave_0 entered promiscuous mode [ 28.641734][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.649344][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.656883][ T377] device bridge_slave_1 entered promiscuous mode [ 28.707822][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.714991][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.722388][ T375] device bridge_slave_0 entered promiscuous mode [ 28.756346][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.763424][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.771009][ T375] device bridge_slave_1 entered promiscuous mode [ 28.827185][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.834547][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.842088][ T380] device bridge_slave_0 entered promiscuous mode [ 28.875111][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.882181][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.889686][ T380] device bridge_slave_1 entered promiscuous mode [ 28.916137][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.923218][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.930817][ T376] device bridge_slave_0 entered promiscuous mode [ 28.959828][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.967218][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.974734][ T376] device bridge_slave_1 entered promiscuous mode [ 28.990093][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.997308][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.005005][ T379] device bridge_slave_0 entered promiscuous mode [ 29.034704][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.041853][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.049349][ T379] device bridge_slave_1 entered promiscuous mode [ 29.159168][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.166261][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.173543][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.180608][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.197375][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.204480][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.211776][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.218844][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.286079][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.293458][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.301555][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.310098][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.319065][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.326579][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.333987][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.342475][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.350780][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.357841][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.365619][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.392988][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.400985][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.409547][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.418292][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.425388][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.433135][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.441140][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.449479][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.456530][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.463999][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.472211][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.479294][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.490913][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.513834][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.521695][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.535686][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.559012][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.567996][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.576190][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.583611][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.592883][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.601426][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.608519][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.616020][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.624168][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.631294][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.638913][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.664307][ T377] device veth0_vlan entered promiscuous mode [ 29.671495][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.680066][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.688377][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.706413][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.727477][ T377] device veth1_macvtap entered promiscuous mode [ 29.741005][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.750273][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.757362][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.764901][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.773096][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.780182][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.788279][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.796287][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.804385][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.812566][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.820813][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.828680][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.836498][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.843917][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.879368][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.887455][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.895224][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.903302][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.911641][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.920150][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.928579][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.937135][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.945606][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.953085][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.960621][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.969051][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.977306][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.984359][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.991794][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.000431][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.008992][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.017593][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.026103][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.034416][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.042829][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.050911][ T375] device veth0_vlan entered promiscuous mode [ 30.060422][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.068662][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.090349][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.098076][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.106088][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.114146][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.122697][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.130931][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.152425][ T375] device veth1_macvtap entered promiscuous mode [ 30.161235][ T380] device veth0_vlan entered promiscuous mode [ 30.178848][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.187734][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.196171][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.204075][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.212324][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 30.212340][ T28] audit: type=1400 audit(1781468304.996:106): avc: denied { create } for pid=397 comm="syz.6.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.239307][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.247823][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.255621][ T28] audit: type=1400 audit(1781468304.996:107): avc: denied { connect } for pid=397 comm="syz.6.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.275457][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.283985][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.291686][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.314636][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.323143][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.331840][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.341407][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.350703][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.358548][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.366635][ T379] device veth0_vlan entered promiscuous mode [ 30.376182][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.385193][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.395551][ T376] device veth0_vlan entered promiscuous mode [ 30.405988][ T28] audit: type=1400 audit(1781468305.196:108): avc: denied { ioctl } for pid=397 comm="syz.6.20" path="socket:[16148]" dev="sockfs" ino=16148 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.431079][ T398] ================================================================== [ 30.439189][ T398] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 30.447301][ T398] Read of size 4 at addr ffff88812fcf8800 by task syz.6.20/398 [ 30.454882][ T398] [ 30.457228][ T398] CPU: 1 PID: 398 Comm: syz.6.20 Not tainted syzkaller #0 [ 30.464372][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.474469][ T398] Call Trace: [ 30.477775][ T398] [ 30.480727][ T398] __dump_stack+0x21/0x24 [ 30.485099][ T398] dump_stack_lvl+0x110/0x170 [ 30.489808][ T398] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.494862][ T398] ? _raw_spin_lock_bh+0x94/0xf0 [ 30.499838][ T398] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 30.505599][ T398] print_address_description+0x71/0x200 [ 30.511179][ T398] print_report+0x4a/0x60 [ 30.515542][ T398] kasan_report+0x122/0x150 [ 30.519394][ T379] device veth1_macvtap entered promiscuous mode [ 30.520171][ T398] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 30.531436][ T380] device veth1_macvtap entered promiscuous mode [ 30.532144][ T398] __asan_report_load4_noabort+0x14/0x20 [ 30.544025][ T398] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 30.549619][ T398] pppol2tp_release+0x150/0x2b0 [ 30.554524][ T398] sock_close+0xc9/0x220 [ 30.558808][ T398] ? __cfi_sock_close+0x10/0x10 [ 30.563706][ T398] __fput+0x1fd/0x8f0 [ 30.564204][ T376] device veth1_macvtap entered promiscuous mode [ 30.567722][ T398] ____fput+0x15/0x20 [ 30.577967][ T398] task_work_run+0x1e1/0x250 [ 30.582596][ T398] ? __cfi_task_work_run+0x10/0x10 [ 30.587749][ T398] ? free_nsproxy+0x21f/0x270 [ 30.592475][ T398] do_exit+0xa7c/0x27c0 [ 30.596670][ T398] ? _raw_spin_lock+0x94/0xf0 [ 30.601383][ T398] ? __cfi_do_exit+0x10/0x10 [ 30.605982][ T398] ? plist_del+0x3ec/0x400 [ 30.610407][ T398] ? _raw_spin_unlock+0x4c/0x70 [ 30.615260][ T398] ? __kasan_check_write+0x14/0x20 [ 30.620370][ T398] ? _raw_spin_lock_irq+0x95/0xf0 [ 30.625415][ T398] do_group_exit+0x21b/0x2e0 [ 30.630084][ T398] ? __kasan_check_write+0x14/0x20 [ 30.635200][ T398] ? recalc_sigpending+0x168/0x1c0 [ 30.640325][ T398] get_signal+0x1382/0x14f0 [ 30.644836][ T398] arch_do_signal_or_restart+0xd1/0x11c0 [ 30.650474][ T398] ? do_futex+0x2e2/0x430 [ 30.654814][ T398] ? __cfi_do_futex+0x10/0x10 [ 30.659495][ T398] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 30.665650][ T398] ? __se_sys_futex+0x136/0x310 [ 30.670507][ T398] exit_to_user_mode_loop+0x7a/0xb0 [ 30.675710][ T398] exit_to_user_mode_prepare+0x87/0xd0 [ 30.681174][ T398] syscall_exit_to_user_mode+0x1a/0x30 [ 30.686633][ T398] do_syscall_64+0x58/0xa0 [ 30.691072][ T398] ? clear_bhb_loop+0x30/0x80 [ 30.695770][ T398] ? clear_bhb_loop+0x30/0x80 [ 30.700446][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.706345][ T398] RIP: 0033:0x7fb074f9ce59 [ 30.710760][ T398] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 30.717770][ T398] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.726224][ T398] RAX: fffffffffffffe00 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 30.734231][ T398] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb075215fa8 [ 30.742228][ T398] RBP: 00007fb075215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 30.750196][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.758164][ T398] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 30.766142][ T398] [ 30.769160][ T398] [ 30.771480][ T398] Allocated by task 398: [ 30.775710][ T398] kasan_set_track+0x4b/0x70 [ 30.780304][ T398] kasan_save_alloc_info+0x1f/0x30 [ 30.785412][ T398] __kasan_kmalloc+0x95/0xb0 [ 30.790006][ T398] __kmalloc+0xb4/0x1e0 [ 30.794157][ T398] l2tp_session_create+0x38/0xbd0 [ 30.799179][ T398] pppol2tp_connect+0xbf5/0x1640 [ 30.804145][ T398] __sys_connect+0x3da/0x460 [ 30.808735][ T398] __x64_sys_connect+0x7a/0x90 [ 30.813499][ T398] x64_sys_call+0x88d/0x9a0 [ 30.818003][ T398] do_syscall_64+0x4c/0xa0 [ 30.822442][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.828363][ T398] [ 30.830694][ T398] Freed by task 336: [ 30.834593][ T398] kasan_set_track+0x4b/0x70 [ 30.839204][ T398] kasan_save_free_info+0x2b/0x40 [ 30.844407][ T398] ____kasan_slab_free+0x132/0x180 [ 30.849531][ T398] __kasan_slab_free+0x11/0x20 [ 30.854301][ T398] slab_free_freelist_hook+0xc2/0x190 [ 30.859686][ T398] __kmem_cache_free+0xb7/0x1b0 [ 30.864576][ T398] kfree+0x6f/0xf0 [ 30.868408][ T398] l2tp_session_put+0xaf/0x1a0 [ 30.873190][ T398] l2tp_session_delete+0x3df/0x4d0 [ 30.878314][ T398] l2tp_tunnel_del_work+0x199/0x410 [ 30.883518][ T398] process_one_work+0x717/0xc30 [ 30.888373][ T398] worker_thread+0xa4d/0x11d0 [ 30.893049][ T398] kthread+0x281/0x320 [ 30.897129][ T398] ret_from_fork+0x1f/0x30 [ 30.901555][ T398] [ 30.903877][ T398] The buggy address belongs to the object at ffff88812fcf8800 [ 30.903877][ T398] which belongs to the cache kmalloc-512 of size 512 [ 30.917925][ T398] The buggy address is located 0 bytes inside of [ 30.917925][ T398] 512-byte region [ffff88812fcf8800, ffff88812fcf8a00) [ 30.931025][ T398] [ 30.933343][ T398] The buggy address belongs to the physical page: [ 30.939760][ T398] page:ffffea0004bf3e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fcf8 [ 30.950004][ T398] head:ffffea0004bf3e00 order:2 compound_mapcount:0 compound_pincount:0 [ 30.958333][ T398] flags: 0x4000000000010200(slab|head|zone=1) [ 30.964435][ T398] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 30.973031][ T398] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 30.981607][ T398] page dumped because: kasan: bad access detected [ 30.988018][ T398] page_owner tracks the page as allocated [ 30.993746][ T398] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 336, tgid 336 (kworker/u4:4), ts 30195910186, free_ts 28026947993 [ 31.016329][ T398] post_alloc_hook+0x1f5/0x210 [ 31.021117][ T398] prep_new_page+0x1c/0x110 [ 31.025675][ T398] get_page_from_freelist+0x2ca9/0x2d20 [ 31.031242][ T398] __alloc_pages+0x1fa/0x610 [ 31.035854][ T398] alloc_slab_page+0x6e/0xf0 [ 31.040441][ T398] new_slab+0x98/0x3e0 [ 31.044510][ T398] ___slab_alloc+0x70f/0xb70 [ 31.049104][ T398] __slab_alloc+0x5e/0xa0 [ 31.053439][ T398] __kmem_cache_alloc_node+0x204/0x2d0 [ 31.058901][ T398] __kmalloc+0xa4/0x1e0 [ 31.063059][ T398] fib6_info_alloc+0x34/0xe0 [ 31.067657][ T398] ip6_route_info_create+0x51b/0x14d0 [ 31.073038][ T398] addrconf_f6i_alloc+0x19c/0x3f0 [ 31.078071][ T398] ipv6_add_addr+0x447/0xe80 [ 31.082672][ T398] addrconf_add_linklocal+0x20e/0x660 [ 31.088050][ T398] addrconf_addr_gen+0x542/0x690 [ 31.092990][ T398] page last free stack trace: [ 31.097655][ T398] free_unref_page_prepare+0x80c/0x820 [ 31.103118][ T398] free_unref_page+0x93/0x530 [ 31.107836][ T398] __free_pages+0x67/0x100 [ 31.112261][ T398] __vunmap+0xa3c/0xc00 [ 31.116417][ T398] vfree+0x61/0x90 [ 31.120139][ T398] kcov_close+0x2b/0x50 [ 31.124308][ T398] __fput+0x1fd/0x8f0 [ 31.128298][ T398] ____fput+0x15/0x20 [ 31.132286][ T398] task_work_run+0x1e1/0x250 [ 31.136877][ T398] do_exit+0xa7c/0x27c0 [ 31.141039][ T398] do_group_exit+0x21b/0x2e0 [ 31.145638][ T398] get_signal+0x1382/0x14f0 [ 31.150153][ T398] arch_do_signal_or_restart+0xd1/0x11c0 [ 31.155821][ T398] exit_to_user_mode_loop+0x7a/0xb0 [ 31.161024][ T398] exit_to_user_mode_prepare+0x87/0xd0 [ 31.166485][ T398] syscall_exit_to_user_mode+0x1a/0x30 [ 31.171944][ T398] [ 31.174273][ T398] Memory state around the buggy address: [ 31.179909][ T398] ffff88812fcf8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.187968][ T398] ffff88812fcf8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.196027][ T398] >ffff88812fcf8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.204170][ T398] ^ [ 31.208233][ T398] ffff88812fcf8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.216292][ T398] ffff88812fcf8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.224387][ T398] ================================================================== [ 31.233323][ T398] Disabling lock debugging due to kernel taint [ 31.243956][ T28] audit: type=1400 audit(1781468306.036:109): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.268231][ T398] ------------[ cut here ]------------ [ 31.273737][ T398] WARNING: CPU: 0 PID: 398 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.276211][ T28] audit: type=1400 audit(1781468306.036:110): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.284176][ T398] Modules linked in: [ 31.305441][ T28] audit: type=1400 audit(1781468306.036:111): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.309071][ T398] CPU: 0 PID: 398 Comm: syz.6.20 Tainted: G B syzkaller #0 [ 31.330316][ T28] audit: type=1400 audit(1781468306.036:112): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.330343][ T28] audit: type=1400 audit(1781468306.036:113): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.330367][ T28] audit: type=1400 audit(1781468306.036:114): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.330392][ T28] audit: type=1400 audit(1781468306.036:115): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.339255][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.435882][ T398] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.442231][ T398] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 31.461968][ T398] RSP: 0018:ffffc90000ac77f0 EFLAGS: 00010293 [ 31.468132][ T398] RAX: ffffffff849b9307 RBX: ffff8881189d6000 RCX: ffff88810d379440 [ 31.476336][ T398] RDX: 0000000000000000 RSI: 0000000021db3a40 RDI: 000000000c04eb7d [ 31.484433][ T398] RBP: ffffc90000ac7810 R08: ffffffff87b747e7 R09: 1ffffffff0f6e8fc [ 31.492442][ T398] R10: dffffc0000000000 R11: fffffbfff0f6e8fd R12: dffffc0000000000 [ 31.500650][ T398] R13: dffffc0000000000 R14: 0000000021db3a40 R15: ffff88812fcf8800 [ 31.508782][ T398] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.517857][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.524588][ T398] CR2: 00007fb075db7ff8 CR3: 0000000110028000 CR4: 00000000003506b0 [ 31.532587][ T398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.540695][ T398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.548774][ T398] Call Trace: [ 31.552051][ T398] [ 31.555081][ T398] pppol2tp_release+0x150/0x2b0 [ 31.559965][ T398] sock_close+0xc9/0x220 [ 31.564420][ T398] ? __cfi_sock_close+0x10/0x10 [ 31.569321][ T398] __fput+0x1fd/0x8f0 [ 31.573318][ T398] ____fput+0x15/0x20 [ 31.577419][ T398] task_work_run+0x1e1/0x250 [ 31.582047][ T398] ? __cfi_task_work_run+0x10/0x10 [ 31.587286][ T398] ? free_nsproxy+0x21f/0x270 [ 31.591991][ T398] do_exit+0xa7c/0x27c0 [ 31.596267][ T398] ? _raw_spin_lock+0x94/0xf0 [ 31.600975][ T398] ? __cfi_do_exit+0x10/0x10 [ 31.605751][ T398] ? plist_del+0x3ec/0x400 [ 31.610199][ T398] ? _raw_spin_unlock+0x4c/0x70 [ 31.615191][ T398] ? __kasan_check_write+0x14/0x20 [ 31.620330][ T398] ? _raw_spin_lock_irq+0x95/0xf0 [ 31.625495][ T398] do_group_exit+0x21b/0x2e0 [ 31.630116][ T398] ? __kasan_check_write+0x14/0x20 [ 31.635778][ T398] ? recalc_sigpending+0x168/0x1c0 [ 31.640918][ T398] get_signal+0x1382/0x14f0 [ 31.645579][ T398] arch_do_signal_or_restart+0xd1/0x11c0 [ 31.651234][ T398] ? do_futex+0x2e2/0x430 [ 31.655680][ T398] ? __cfi_do_futex+0x10/0x10 [ 31.660376][ T398] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 31.666660][ T398] ? __se_sys_futex+0x136/0x310 [ 31.671533][ T398] exit_to_user_mode_loop+0x7a/0xb0 [ 31.676860][ T398] exit_to_user_mode_prepare+0x87/0xd0 [ 31.682358][ T398] syscall_exit_to_user_mode+0x1a/0x30 [ 31.687960][ T398] do_syscall_64+0x58/0xa0 [ 31.692402][ T398] ? clear_bhb_loop+0x30/0x80 [ 31.697212][ T398] ? clear_bhb_loop+0x30/0x80 [ 31.701916][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.707955][ T398] RIP: 0033:0x7fb074f9ce59 [ 31.712388][ T398] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 31.719513][ T398] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 31.728019][ T398] RAX: fffffffffffffe00 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 31.736150][ T398] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb075215fa8 [ 31.744146][ T398] RBP: 00007fb075215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 31.752335][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.760519][ T398] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 31.768789][ T398] [ 31.771821][ T398] ---[ end trace 0000000000000000 ]--- [ 31.778636][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.786657][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.795091][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.803321][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.813347][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.821891][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.830544][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.838518][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.846987][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.855692][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.864035][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.872628][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.881098][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.889626][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.898167][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.938636][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.950934][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.960115][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.969789][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.038682][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.050874][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.063155][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.081750][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.092441][ T43] device bridge_slave_1 left promiscuous mode [ 32.114353][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.122435][ T403] ------------[ cut here ]------------ [ 32.128095][ T403] WARNING: CPU: 0 PID: 403 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.138278][ T403] Modules linked in: [ 32.142194][ T403] CPU: 0 PID: 403 Comm: syz.1.18 Tainted: G B W syzkaller #0 [ 32.151158][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.161401][ T403] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.167860][ T403] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 32.187556][ T403] RSP: 0018:ffffc90000af77f0 EFLAGS: 00010293 [ 32.193658][ T403] RAX: ffffffff849b9307 RBX: ffff888119718000 RCX: ffff8881195a5100 [ 32.201741][ T403] RDX: 0000000000000000 RSI: 0000000008f89340 RDI: 000000000c04eb7d [ 32.209793][ T403] RBP: ffffc90000af7810 R08: ffff888119718083 R09: 1ffff110232e3010 [ 32.217862][ T403] R10: dffffc0000000000 R11: ffffed10232e3011 R12: dffffc0000000000 [ 32.225891][ T403] R13: dffffc0000000000 R14: 0000000008f89340 R15: ffff8881320a7000 [ 32.233905][ T403] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.242897][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.249564][ T403] CR2: 0000200000000000 CR3: 000000000700f000 CR4: 00000000003506b0 [ 32.257615][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.265662][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.273667][ T403] Call Trace: [ 32.277017][ T403] [ 32.279984][ T403] pppol2tp_release+0x150/0x2b0 [ 32.284913][ T403] sock_close+0xc9/0x220 [ 32.289190][ T403] ? __cfi_sock_close+0x10/0x10 [ 32.294075][ T403] __fput+0x1fd/0x8f0 [ 32.298157][ T403] ____fput+0x15/0x20 [ 32.302167][ T403] task_work_run+0x1e1/0x250 [ 32.306850][ T403] ? __cfi_task_work_run+0x10/0x10 [ 32.311999][ T403] ? free_nsproxy+0x21f/0x270 [ 32.316745][ T403] do_exit+0xa7c/0x27c0 [ 32.320941][ T403] ? _raw_spin_lock+0x94/0xf0 [ 32.325700][ T403] ? __cfi_do_exit+0x10/0x10 [ 32.330328][ T403] ? plist_del+0x3ec/0x400 [ 32.334801][ T403] ? _raw_spin_unlock+0x4c/0x70 [ 32.339681][ T403] ? __kasan_check_write+0x14/0x20 [ 32.344843][ T403] ? _raw_spin_lock_irq+0x95/0xf0 [ 32.349906][ T403] do_group_exit+0x21b/0x2e0 [ 32.354557][ T403] ? __kasan_check_write+0x14/0x20 [ 32.359702][ T403] ? recalc_sigpending+0x168/0x1c0 [ 32.364936][ T403] get_signal+0x1382/0x14f0 [ 32.369487][ T403] arch_do_signal_or_restart+0xd1/0x11c0 [ 32.375194][ T403] ? do_futex+0x2e2/0x430 [ 32.379551][ T403] ? __cfi_do_futex+0x10/0x10 [ 32.384419][ T403] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 32.390617][ T403] ? __se_sys_futex+0x136/0x310 [ 32.395556][ T403] exit_to_user_mode_loop+0x7a/0xb0 [ 32.400784][ T403] exit_to_user_mode_prepare+0x87/0xd0 [ 32.406328][ T403] syscall_exit_to_user_mode+0x1a/0x30 [ 32.411811][ T403] do_syscall_64+0x58/0xa0 [ 32.416318][ T403] ? clear_bhb_loop+0x30/0x80 [ 32.421017][ T403] ? clear_bhb_loop+0x30/0x80 [ 32.425762][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.431688][ T403] RIP: 0033:0x7f4ebdb9ce59 [ 32.436183][ T403] Code: Unable to access opcode bytes at 0x7f4ebdb9ce2f. [ 32.443216][ T403] RSP: 002b:00007f4ebeb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.451720][ T403] RAX: fffffffffffffe00 RBX: 00007f4ebde15fa8 RCX: 00007f4ebdb9ce59 [ 32.459956][ T403] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ebde15fa8 [ 32.467994][ T403] RBP: 00007f4ebde15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 32.476032][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.484051][ T403] R13: 00007f4ebde16038 R14: 00007ffd0c6ccf60 R15: 00007ffd0c6cd048 [ 32.492115][ T403] [ 32.495183][ T403] ---[ end trace 0000000000000000 ]--- [ 32.500974][ T43] device bridge_slave_0 left promiscuous mode [ 32.510901][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.535727][ T411] ------------[ cut here ]------------ [ 32.541263][ T411] WARNING: CPU: 1 PID: 411 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.551330][ T411] Modules linked in: [ 32.555407][ T411] CPU: 1 PID: 411 Comm: syz.5.21 Tainted: G B W syzkaller #0 [ 32.564026][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.574330][ T411] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.580706][ T411] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 32.585022][ T43] device veth1_macvtap left promiscuous mode [ 32.600699][ T411] RSP: 0018:ffffc90000b877f0 EFLAGS: 00010293 [ 32.612577][ T411] RAX: ffffffff849b9307 RBX: ffff88811968e000 RCX: ffff888119a51440 [ 32.620701][ T411] RDX: 0000000000000000 RSI: 0000000016b45b00 RDI: 000000000c04eb7d [ 32.628835][ T411] RBP: ffffc90000b87810 R08: ffff88811968e083 R09: 1ffff110232d1c10 [ 32.634439][ T43] device veth0_vlan left promiscuous mode [ 32.637127][ T411] R10: dffffc0000000000 R11: ffffed10232d1c11 R12: dffffc0000000000 [ 32.650617][ T411] R13: dffffc0000000000 R14: 0000000016b45b00 R15: ffff8881302e2800 [ 32.658633][ T411] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.667616][ T411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.674257][ T411] CR2: 00007f70289caff8 CR3: 0000000123c17000 CR4: 00000000003506a0 [ 32.682256][ T411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.690280][ T411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.698308][ T411] Call Trace: [ 32.701608][ T411] [ 32.704610][ T411] pppol2tp_release+0x150/0x2b0 [ 32.709494][ T411] sock_close+0xc9/0x220 [ 32.713773][ T411] ? __cfi_sock_close+0x10/0x10 [ 32.718692][ T411] __fput+0x1fd/0x8f0 [ 32.722716][ T411] ____fput+0x15/0x20 [ 32.726773][ T411] task_work_run+0x1e1/0x250 [ 32.731405][ T411] ? __cfi_task_work_run+0x10/0x10 [ 32.736575][ T411] ? free_nsproxy+0x21f/0x270 [ 32.741293][ T411] do_exit+0xa7c/0x27c0 [ 32.745518][ T411] ? ttwu_do_wakeup+0x102/0x490 [ 32.750410][ T411] ? __cfi_do_exit+0x10/0x10 [ 32.755077][ T411] ? try_to_wake_up+0x6c6/0x1250 [ 32.760061][ T411] ? __kasan_check_write+0x14/0x20 [ 32.765237][ T411] ? _raw_spin_lock_irq+0x95/0xf0 [ 32.770297][ T411] do_group_exit+0x21b/0x2e0 [ 32.774964][ T411] ? __kasan_check_write+0x14/0x20 [ 32.780107][ T411] ? recalc_sigpending+0x168/0x1c0 [ 32.785387][ T411] get_signal+0x1382/0x14f0 [ 32.789941][ T411] arch_do_signal_or_restart+0xd1/0x11c0 [ 32.795665][ T411] ? do_futex+0x2bf/0x430 [ 32.800168][ T411] ? __cfi_do_futex+0x10/0x10 [ 32.804925][ T411] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 32.811204][ T411] ? __se_sys_futex+0x136/0x310 [ 32.816202][ T411] exit_to_user_mode_loop+0x7a/0xb0 [ 32.821437][ T411] exit_to_user_mode_prepare+0x87/0xd0 [ 32.826973][ T411] syscall_exit_to_user_mode+0x1a/0x30 [ 32.832478][ T411] do_syscall_64+0x58/0xa0 [ 32.836970][ T411] ? clear_bhb_loop+0x30/0x80 [ 32.841673][ T411] ? clear_bhb_loop+0x30/0x80 [ 32.846416][ T411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.852350][ T411] RIP: 0033:0x7f7027b9ce59 [ 32.856837][ T411] Code: Unable to access opcode bytes at 0x7f7027b9ce2f. [ 32.863879][ T411] RSP: 002b:00007f70289ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.872536][ T411] RAX: 0000000000000001 RBX: 00007f7027e15fa8 RCX: 00007f7027b9ce59 [ 32.880586][ T411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7027e15fac [ 32.888632][ T411] RBP: 00007f7027e15fa0 R08: 001d3e6ed87e5e58 R09: 0000000000000000 [ 32.896710][ T411] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 32.904726][ T411] R13: 00007f7027e16038 R14: 00007ffcc6e5d750 R15: 00007ffcc6e5d838 [ 32.912733][ T411] [ 32.915810][ T411] ---[ end trace 0000000000000000 ]--- [ 32.951823][ T406] ------------[ cut here ]------------ [ 32.957493][ T406] WARNING: CPU: 0 PID: 406 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.967708][ T406] Modules linked in: [ 32.971636][ T406] CPU: 0 PID: 406 Comm: syz.6.23 Tainted: G B W syzkaller #0 [ 32.980524][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.990940][ T406] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.997472][ T406] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 33.017670][ T406] RSP: 0018:ffffc90000ad77f0 EFLAGS: 00010293 [ 33.023773][ T406] RAX: ffffffff849b9307 RBX: ffff8881197a0000 RCX: ffff88811048a880 [ 33.032262][ T406] RDX: 0000000000000000 RSI: 0000000021db3280 RDI: 000000000c04eb7d [ 33.040403][ T406] RBP: ffffc90000ad7810 R08: ffff8881197a0083 R09: 1ffff110232f4010 [ 33.048527][ T406] R10: dffffc0000000000 R11: ffffed10232f4011 R12: dffffc0000000000 [ 33.056623][ T406] R13: dffffc0000000000 R14: 0000000021db3280 R15: ffff8881325bf000 [ 33.064725][ T406] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.073692][ T406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.080408][ T406] CR2: 0000200000000000 CR3: 000000012ea1e000 CR4: 00000000003506b0 [ 33.088561][ T406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.096665][ T406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.105025][ T406] Call Trace: [ 33.108332][ T406] [ 33.111283][ T406] pppol2tp_release+0x150/0x2b0 [ 33.116319][ T406] sock_close+0xc9/0x220 [ 33.120609][ T406] ? __cfi_sock_close+0x10/0x10 [ 33.125682][ T406] __fput+0x1fd/0x8f0 [ 33.129787][ T406] ____fput+0x15/0x20 [ 33.133815][ T406] task_work_run+0x1e1/0x250 [ 33.138598][ T406] ? __cfi_task_work_run+0x10/0x10 [ 33.143746][ T406] ? free_nsproxy+0x21f/0x270 [ 33.148593][ T406] do_exit+0xa7c/0x27c0 [ 33.152796][ T406] ? ttwu_do_wakeup+0x102/0x490 [ 33.157800][ T406] ? __cfi_do_exit+0x10/0x10 [ 33.162440][ T406] ? try_to_wake_up+0x6c6/0x1250 [ 33.167585][ T406] ? __kasan_check_write+0x14/0x20 [ 33.172832][ T406] ? _raw_spin_lock_irq+0x95/0xf0 [ 33.178049][ T406] do_group_exit+0x21b/0x2e0 [ 33.182689][ T406] ? __kasan_check_write+0x14/0x20 [ 33.188010][ T406] ? recalc_sigpending+0x168/0x1c0 [ 33.193163][ T406] get_signal+0x1382/0x14f0 [ 33.197779][ T406] arch_do_signal_or_restart+0xd1/0x11c0 [ 33.203459][ T406] ? do_futex+0x2bf/0x430 [ 33.207880][ T406] ? __cfi_do_futex+0x10/0x10 [ 33.212597][ T406] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.218829][ T406] ? __se_sys_futex+0x136/0x310 [ 33.223719][ T406] exit_to_user_mode_loop+0x7a/0xb0 [ 33.228995][ T406] exit_to_user_mode_prepare+0x87/0xd0 [ 33.234526][ T406] syscall_exit_to_user_mode+0x1a/0x30 [ 33.240019][ T406] do_syscall_64+0x58/0xa0 [ 33.244506][ T406] ? clear_bhb_loop+0x30/0x80 [ 33.249206][ T406] ? clear_bhb_loop+0x30/0x80 [ 33.253909][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.259907][ T406] RIP: 0033:0x7fb074f9ce59 [ 33.264487][ T406] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 33.271529][ T406] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.280015][ T406] RAX: 0000000000000001 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 33.288037][ T406] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb075215fac [ 33.296083][ T406] RBP: 00007fb075215fa0 R08: 002af3f45cc05522 R09: 0000000000000000 [ 33.304166][ T406] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 33.312211][ T406] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 33.320242][ T406] [ 33.323286][ T406] ---[ end trace 0000000000000000 ]--- [ 33.465961][ T425] ------------[ cut here ]------------ [ 33.471503][ T425] WARNING: CPU: 0 PID: 425 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.481609][ T425] Modules linked in: [ 33.485574][ T425] CPU: 0 PID: 425 Comm: syz.6.27 Tainted: G B W syzkaller #0 [ 33.494185][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.504532][ T425] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.510914][ T425] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 33.530594][ T425] RSP: 0018:ffffc90000ad77f0 EFLAGS: 00010293 [ 33.536716][ T425] RAX: ffffffff849b9307 RBX: ffff888119f5d000 RCX: ffff888119ddbcc0 [ 33.544757][ T425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 33.552757][ T425] RBP: ffffc90000ad7810 R08: ffff888119f5d083 R09: 1ffff110233eba10 [ 33.560800][ T425] R10: dffffc0000000000 R11: ffffed10233eba11 R12: dffffc0000000000 [ 33.568828][ T425] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888108989c00 [ 33.576857][ T425] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.585841][ T425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.592457][ T425] CR2: 00007fb075db7ff8 CR3: 000000000700f000 CR4: 00000000003506b0 [ 33.600497][ T425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.608608][ T425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 2026/06/14 20:18:28 executed programs: 21 [ 33.616639][ T425] Call Trace: [ 33.619949][ T425] [ 33.622919][ T425] pppol2tp_release+0x150/0x2b0 [ 33.627837][ T425] sock_close+0xc9/0x220 [ 33.632125][ T425] ? __cfi_sock_close+0x10/0x10 [ 33.637054][ T425] __fput+0x1fd/0x8f0 [ 33.641171][ T425] ____fput+0x15/0x20 [ 33.645239][ T425] task_work_run+0x1e1/0x250 [ 33.649868][ T425] ? __cfi_task_work_run+0x10/0x10 [ 33.655130][ T425] ? free_nsproxy+0x21f/0x270 [ 33.659858][ T425] do_exit+0xa7c/0x27c0 [ 33.664047][ T425] ? _raw_spin_lock+0x94/0xf0 [ 33.668786][ T425] ? __cfi_do_exit+0x10/0x10 [ 33.673421][ T425] ? plist_del+0x3ec/0x400 [ 33.677900][ T425] ? _raw_spin_unlock+0x4c/0x70 [ 33.682787][ T425] ? __kasan_check_write+0x14/0x20 [ 33.687959][ T425] ? _raw_spin_lock_irq+0x95/0xf0 [ 33.693027][ T425] do_group_exit+0x21b/0x2e0 [ 33.697721][ T425] ? __kasan_check_write+0x14/0x20 [ 33.702868][ T425] ? recalc_sigpending+0x168/0x1c0 [ 33.708054][ T425] get_signal+0x1382/0x14f0 [ 33.712596][ T425] arch_do_signal_or_restart+0xd1/0x11c0 [ 33.718296][ T425] ? do_futex+0x2e2/0x430 [ 33.722657][ T425] ? __cfi_do_futex+0x10/0x10 [ 33.727412][ T425] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.733600][ T425] ? __se_sys_futex+0x136/0x310 [ 33.738516][ T425] exit_to_user_mode_loop+0x7a/0xb0 [ 33.743750][ T425] exit_to_user_mode_prepare+0x87/0xd0 [ 33.749577][ T425] syscall_exit_to_user_mode+0x1a/0x30 [ 33.755120][ T425] do_syscall_64+0x58/0xa0 [ 33.759581][ T425] ? clear_bhb_loop+0x30/0x80 [ 33.764319][ T425] ? clear_bhb_loop+0x30/0x80 [ 33.769032][ T425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.774995][ T425] RIP: 0033:0x7fb074f9ce59 [ 33.779438][ T425] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 33.786536][ T425] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.795002][ T425] RAX: fffffffffffffe00 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 33.803012][ T425] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb075215fa8 [ 33.811047][ T425] RBP: 00007fb075215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 33.819070][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.827108][ T425] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 33.835141][ T425] [ 33.838192][ T425] ---[ end trace 0000000000000000 ]--- [ 34.097274][ T438] ------------[ cut here ]------------ [ 34.102807][ T438] WARNING: CPU: 0 PID: 438 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.102913][ T441] ------------[ cut here ]------------ [ 34.113225][ T438] Modules linked in: [ 34.118408][ T441] WARNING: CPU: 1 PID: 441 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.118450][ T441] Modules linked in: [ 34.118463][ T441] CPU: 1 PID: 441 Comm: syz.2.19 Tainted: G B W syzkaller #0 [ 34.118484][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.118495][ T441] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.118522][ T441] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 34.122424][ T438] [ 34.122430][ T438] CPU: 0 PID: 438 Comm: syz.6.31 Tainted: G B W syzkaller #0 [ 34.132451][ T441] RSP: 0018:ffffc90000c1f7f0 EFLAGS: 00010293 [ 34.132472][ T441] RAX: ffffffff849b9307 RBX: ffff88811aba7000 RCX: ffff88811a60bcc0 [ 34.132487][ T441] RDX: 0000000000000000 RSI: 0000000022424b00 RDI: 000000000c04eb7d [ 34.132501][ T441] RBP: ffffc90000c1f810 R08: ffff88811aba7083 R09: 1ffff11023574e10 [ 34.136553][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.145194][ T441] R10: dffffc0000000000 R11: ffffed1023574e11 R12: dffffc0000000000 [ 34.155125][ T438] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.155157][ T438] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 34.155173][ T438] RSP: 0018:ffffc90000ba77f0 EFLAGS: 00010293 [ 34.155191][ T438] RAX: ffffffff849b9307 RBX: ffff88811a4ce000 RCX: ffff88811a608000 [ 34.155205][ T438] RDX: 0000000000000000 RSI: 0000000032aa9540 RDI: 000000000c04eb7d [ 34.155218][ T438] RBP: ffffc90000ba7810 R08: ffff88811a4ce083 R09: 1ffff11023499c10 [ 34.161554][ T441] R13: dffffc0000000000 R14: 0000000022424b00 R15: ffff888122fe6800 [ 34.181217][ T438] R10: dffffc0000000000 R11: ffffed1023499c11 R12: dffffc0000000000 [ 34.183526][ T441] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.192141][ T438] R13: dffffc0000000000 R14: 0000000032aa9540 R15: ffff888122fe7000 [ 34.198216][ T441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.206233][ T438] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.206252][ T438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.214498][ T441] CR2: 00007fff58362e20 CR3: 0000000130951000 CR4: 00000000003506a0 [ 34.222238][ T438] CR2: 00007fb075db8d58 CR3: 000000000700f000 CR4: 00000000003506b0 [ 34.232345][ T441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.240375][ T438] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.246710][ T441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.246726][ T441] Call Trace: [ 34.246732][ T441] [ 34.246740][ T441] pppol2tp_release+0x150/0x2b0 [ 34.266493][ T438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.272438][ T441] sock_close+0xc9/0x220 [ 34.280450][ T438] Call Trace: [ 34.288571][ T441] ? __cfi_sock_close+0x10/0x10 [ 34.296581][ T438] [ 34.296591][ T438] pppol2tp_release+0x150/0x2b0 [ 34.304960][ T441] __fput+0x1fd/0x8f0 [ 34.312574][ T438] sock_close+0xc9/0x220 [ 34.321535][ T441] ____fput+0x15/0x20 [ 34.329564][ T438] ? __cfi_sock_close+0x10/0x10 [ 34.336175][ T441] task_work_run+0x1e1/0x250 [ 34.345173][ T438] __fput+0x1fd/0x8f0 [ 34.351721][ T441] ? __cfi_task_work_run+0x10/0x10 [ 34.359742][ T438] ____fput+0x15/0x20 [ 34.367741][ T441] ? free_nsproxy+0x21f/0x270 [ 34.375740][ T438] task_work_run+0x1e1/0x250 [ 34.383982][ T441] do_exit+0xa7c/0x27c0 [ 34.392084][ T438] ? __cfi_task_work_run+0x10/0x10 [ 34.392115][ T438] ? free_nsproxy+0x21f/0x270 [ 34.395566][ T441] ? __cfi_do_exit+0x10/0x10 [ 34.398384][ T438] do_exit+0xa7c/0x27c0 [ 34.403250][ T441] ? try_to_wake_up+0x6c6/0x1250 [ 34.411449][ T438] ? _raw_spin_lock+0x94/0xf0 [ 34.415622][ T441] ? __kasan_check_write+0x14/0x20 [ 34.418915][ T438] ? __cfi_do_exit+0x10/0x10 [ 34.423771][ T441] ? _raw_spin_lock_irq+0x95/0xf0 [ 34.426759][ T438] ? plist_del+0x3ec/0x400 [ 34.431619][ T441] do_group_exit+0x21b/0x2e0 [ 34.435630][ T438] ? _raw_spin_unlock+0x4c/0x70 [ 34.439895][ T441] ? __kasan_check_write+0x14/0x20 [ 34.443889][ T438] ? __kasan_check_write+0x14/0x20 [ 34.448792][ T441] ? recalc_sigpending+0x168/0x1c0 [ 34.448825][ T441] get_signal+0x1382/0x14f0 [ 34.448857][ T441] arch_do_signal_or_restart+0xd1/0x11c0 [ 34.453447][ T438] ? _raw_spin_lock_irq+0x95/0xf0 [ 34.457455][ T441] ? do_futex+0x2bf/0x430 [ 34.457479][ T441] ? __cfi_do_futex+0x10/0x10 [ 34.462591][ T438] do_group_exit+0x21b/0x2e0 [ 34.466600][ T441] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.471294][ T438] ? __kasan_check_write+0x14/0x20 [ 34.475910][ T441] ? __se_sys_futex+0x136/0x310 [ 34.475936][ T441] exit_to_user_mode_loop+0x7a/0xb0 [ 34.480090][ T438] ? recalc_sigpending+0x168/0x1c0 [ 34.485320][ T441] exit_to_user_mode_prepare+0x87/0xd0 [ 34.489893][ T438] get_signal+0x1382/0x14f0 [ 34.494498][ T441] syscall_exit_to_user_mode+0x1a/0x30 [ 34.498664][ T438] arch_do_signal_or_restart+0xd1/0x11c0 [ 34.503595][ T441] do_syscall_64+0x58/0xa0 [ 34.508296][ T438] ? do_futex+0x2e2/0x430 [ 34.513407][ T441] ? clear_bhb_loop+0x30/0x80 [ 34.518034][ T438] ? __cfi_do_futex+0x10/0x10 [ 34.523045][ T441] ? clear_bhb_loop+0x30/0x80 [ 34.527480][ T438] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.532076][ T441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.537079][ T438] ? __se_sys_futex+0x136/0x310 [ 34.542051][ T441] RIP: 0033:0x7fe8aa79ce59 [ 34.547241][ T438] exit_to_user_mode_loop+0x7a/0xb0 [ 34.552292][ T441] Code: Unable to access opcode bytes at 0x7fe8aa79ce2f. [ 34.556819][ T438] exit_to_user_mode_prepare+0x87/0xd0 [ 34.562450][ T441] RSP: 002b:00007fe8ab6440e8 EFLAGS: 00000246 [ 34.567505][ T438] syscall_exit_to_user_mode+0x1a/0x30 [ 34.571837][ T441] ORIG_RAX: 00000000000000ca [ 34.576531][ T438] do_syscall_64+0x58/0xa0 [ 34.581127][ T441] RAX: 0000000000000001 RBX: 00007fe8aaa15fa8 RCX: 00007fe8aa79ce59 [ 34.587294][ T438] ? clear_bhb_loop+0x30/0x80 [ 34.592581][ T441] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe8aaa15fac [ 34.597483][ T438] ? clear_bhb_loop+0x30/0x80 [ 34.602681][ T441] RBP: 00007fe8aaa15fa0 R08: 00026bfa752fc73a R09: 0000000000000000 [ 34.607822][ T438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.613286][ T441] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 34.617803][ T438] RIP: 0033:0x7fb074f9ce59 [ 34.623265][ T441] R13: 00007fe8aaa16038 R14: 00007ffea90d78d0 R15: 00007ffea90d79b8 [ 34.628981][ T438] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 34.628992][ T438] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.629012][ T438] RAX: fffffffffffffe00 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 34.629025][ T438] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb075215fa8 [ 34.629038][ T438] RBP: 00007fb075215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 34.629050][ T438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.629062][ T438] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 34.629080][ T438] [ 34.633492][ T441] [ 34.637872][ T438] ---[ end trace 0000000000000000 ]--- [ 34.838883][ T441] ---[ end trace 0000000000000000 ]--- [ 35.060254][ T453] ------------[ cut here ]------------ [ 35.065821][ T453] WARNING: CPU: 0 PID: 453 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.075993][ T453] Modules linked in: [ 35.079915][ T453] CPU: 0 PID: 453 Comm: syz.6.35 Tainted: G B W syzkaller #0 [ 35.088606][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.098719][ T453] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.105154][ T453] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 35.124828][ T453] RSP: 0018:ffffc90000ba77f0 EFLAGS: 00010293 [ 35.130929][ T453] RAX: ffffffff849b9307 RBX: ffff88811b5ab000 RCX: ffff88811aee9440 [ 35.138969][ T453] RDX: 0000000000000000 RSI: 0000000032aa9a80 RDI: 000000000c04eb7d [ 35.146995][ T453] RBP: ffffc90000ba7810 R08: ffff88811b5ab083 R09: 1ffff110236b5610 [ 35.155057][ T453] R10: dffffc0000000000 R11: ffffed10236b5611 R12: dffffc0000000000 [ 35.163065][ T453] R13: dffffc0000000000 R14: 0000000032aa9a80 R15: ffff88810f76c800 [ 35.171118][ T453] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.180115][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.186748][ T453] CR2: 00007fb075db7ff8 CR3: 0000000132e6d000 CR4: 00000000003506b0 [ 35.194783][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.202801][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.210840][ T453] Call Trace: [ 35.214141][ T453] [ 35.217174][ T453] pppol2tp_release+0x150/0x2b0 [ 35.222066][ T453] sock_close+0xc9/0x220 [ 35.226401][ T453] ? __cfi_sock_close+0x10/0x10 [ 35.231292][ T453] __fput+0x1fd/0x8f0 [ 35.235332][ T453] ____fput+0x15/0x20 [ 35.239358][ T453] task_work_run+0x1e1/0x250 [ 35.243981][ T453] ? __cfi_task_work_run+0x10/0x10 [ 35.249149][ T453] ? free_nsproxy+0x21f/0x270 [ 35.253859][ T453] do_exit+0xa7c/0x27c0 [ 35.258089][ T453] ? ttwu_do_wakeup+0x102/0x490 [ 35.262985][ T453] ? __cfi_do_exit+0x10/0x10 [ 35.267638][ T453] ? try_to_wake_up+0x6c6/0x1250 [ 35.272611][ T453] ? __kasan_check_write+0x14/0x20 [ 35.277805][ T453] ? _raw_spin_lock_irq+0x95/0xf0 [ 35.282875][ T453] do_group_exit+0x21b/0x2e0 [ 35.287545][ T453] ? __kasan_check_write+0x14/0x20 [ 35.292694][ T453] ? recalc_sigpending+0x168/0x1c0 [ 35.297879][ T453] get_signal+0x1382/0x14f0 [ 35.302420][ T453] arch_do_signal_or_restart+0xd1/0x11c0 [ 35.308126][ T453] ? do_futex+0x2bf/0x430 [ 35.312487][ T453] ? __cfi_do_futex+0x10/0x10 [ 35.317255][ T453] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 35.323445][ T453] ? __se_sys_futex+0x136/0x310 [ 35.328372][ T453] exit_to_user_mode_loop+0x7a/0xb0 [ 35.333596][ T453] exit_to_user_mode_prepare+0x87/0xd0 [ 35.339134][ T453] syscall_exit_to_user_mode+0x1a/0x30 [ 35.344642][ T453] do_syscall_64+0x58/0xa0 [ 35.349089][ T453] ? clear_bhb_loop+0x30/0x80 [ 35.353789][ T453] ? clear_bhb_loop+0x30/0x80 [ 35.358535][ T453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.364479][ T453] RIP: 0033:0x7fb074f9ce59 [ 35.368954][ T453] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 35.376051][ T453] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.384525][ T453] RAX: 0000000000000001 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 35.392537][ T453] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb075215fac [ 35.400560][ T453] RBP: 00007fb075215fa0 R08: 0000a23707249540 R09: 0000000000000000 [ 35.408579][ T453] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 35.416596][ T453] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 35.424607][ T453] [ 35.427629][ T453] ---[ end trace 0000000000000000 ]--- [ 35.640385][ T466] ------------[ cut here ]------------ [ 35.645996][ T466] WARNING: CPU: 0 PID: 466 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.656069][ T466] Modules linked in: [ 35.659989][ T466] CPU: 0 PID: 466 Comm: syz.0.39 Tainted: G B W syzkaller #0 [ 35.669173][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.679537][ T466] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.686003][ T466] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 35.705686][ T466] RSP: 0018:ffffc90000bd77f0 EFLAGS: 00010293 [ 35.711796][ T466] RAX: ffffffff849b9307 RBX: ffff88811b7c4000 RCX: ffff88811aeebcc0 [ 35.719826][ T466] RDX: 0000000000000000 RSI: 000000001ac70740 RDI: 000000000c04eb7d [ 35.727852][ T466] RBP: ffffc90000bd7810 R08: ffff88811b7c4083 R09: 1ffff110236f8810 [ 35.735925][ T466] R10: dffffc0000000000 R11: ffffed10236f8811 R12: dffffc0000000000 [ 35.743930][ T466] R13: dffffc0000000000 R14: 000000001ac70740 R15: ffff888118c04800 [ 35.751977][ T466] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.760964][ T466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.767630][ T466] CR2: 00007fe8ab623d58 CR3: 000000010fda8000 CR4: 00000000003506b0 [ 35.775655][ T466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.783654][ T466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.791688][ T466] Call Trace: [ 35.795027][ T466] [ 35.797986][ T466] pppol2tp_release+0x150/0x2b0 [ 35.802873][ T466] sock_close+0xc9/0x220 [ 35.807178][ T466] ? __cfi_sock_close+0x10/0x10 [ 35.812072][ T466] __fput+0x1fd/0x8f0 [ 35.816131][ T466] ____fput+0x15/0x20 [ 35.820152][ T466] task_work_run+0x1e1/0x250 [ 35.825093][ T466] ? __cfi_task_work_run+0x10/0x10 [ 35.830261][ T466] ? free_nsproxy+0x21f/0x270 [ 35.835133][ T466] do_exit+0xa7c/0x27c0 [ 35.839333][ T466] ? ttwu_do_wakeup+0x102/0x490 [ 35.844241][ T466] ? __cfi_do_exit+0x10/0x10 [ 35.848868][ T466] ? try_to_wake_up+0x6c6/0x1250 [ 35.853842][ T466] ? __kasan_check_write+0x14/0x20 [ 35.859047][ T466] ? _raw_spin_lock_irq+0x95/0xf0 [ 35.864116][ T466] do_group_exit+0x21b/0x2e0 [ 35.868798][ T466] ? __kasan_check_write+0x14/0x20 [ 35.873945][ T466] ? recalc_sigpending+0x168/0x1c0 [ 35.879122][ T466] get_signal+0x1382/0x14f0 [ 35.883676][ T466] arch_do_signal_or_restart+0xd1/0x11c0 [ 35.889380][ T466] ? do_futex+0x2bf/0x430 [ 35.893741][ T466] ? __cfi_do_futex+0x10/0x10 [ 35.898473][ T466] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 35.905028][ T466] ? __se_sys_futex+0x136/0x310 [ 35.909921][ T466] exit_to_user_mode_loop+0x7a/0xb0 [ 35.915464][ T466] exit_to_user_mode_prepare+0x87/0xd0 [ 35.921071][ T466] syscall_exit_to_user_mode+0x1a/0x30 [ 35.926621][ T466] do_syscall_64+0x58/0xa0 [ 35.931114][ T466] ? clear_bhb_loop+0x30/0x80 [ 35.935855][ T466] ? clear_bhb_loop+0x30/0x80 [ 35.940576][ T466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.946564][ T466] RIP: 0033:0x7f88a8b9ce59 [ 35.951019][ T466] Code: Unable to access opcode bytes at 0x7f88a8b9ce2f. [ 35.958091][ T466] RSP: 002b:00007f88a99fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.966594][ T466] RAX: 0000000000000001 RBX: 00007f88a8e15fa8 RCX: 00007f88a8b9ce59 [ 35.974639][ T466] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88a8e15fac [ 35.982748][ T466] RBP: 00007f88a8e15fa0 R08: 0023345011e1301c R09: 0000000000000000 [ 35.991244][ T466] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 35.999679][ T466] R13: 00007f88a8e16038 R14: 00007fff58364120 R15: 00007fff58364208 [ 36.007756][ T466] [ 36.010804][ T466] ---[ end trace 0000000000000000 ]--- [ 36.034406][ T470] ------------[ cut here ]------------ [ 36.039921][ T470] WARNING: CPU: 1 PID: 470 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.049996][ T470] Modules linked in: [ 36.053921][ T470] CPU: 1 PID: 470 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 36.062613][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.073546][ T470] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.080323][ T470] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 36.100014][ T470] RSP: 0018:ffffc90000ba77f0 EFLAGS: 00010293 [ 36.106161][ T470] RAX: ffffffff849b9307 RBX: ffff88811bb7c000 RCX: ffff88811aeea880 [ 36.114169][ T470] RDX: 0000000000000000 RSI: 000000001ab87f00 RDI: 000000000c04eb7d [ 36.122229][ T470] RBP: ffffc90000ba7810 R08: ffff88811bb7c083 R09: 1ffff1102376f810 [ 36.130260][ T470] R10: dffffc0000000000 R11: ffffed102376f811 R12: dffffc0000000000 [ 36.138300][ T470] R13: dffffc0000000000 R14: 000000001ab87f00 R15: ffff888119a0ac00 [ 36.146562][ T470] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.155705][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.162342][ T470] CR2: 0000555563126908 CR3: 0000000110581000 CR4: 00000000003506a0 [ 36.170561][ T470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.178611][ T470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.186646][ T470] Call Trace: [ 36.189953][ T470] [ 36.192950][ T470] pppol2tp_release+0x150/0x2b0 [ 36.198001][ T470] sock_close+0xc9/0x220 [ 36.202313][ T470] ? __cfi_sock_close+0x10/0x10 [ 36.207253][ T470] __fput+0x1fd/0x8f0 [ 36.211287][ T470] ____fput+0x15/0x20 [ 36.215355][ T470] task_work_run+0x1e1/0x250 [ 36.219984][ T470] ? __cfi_task_work_run+0x10/0x10 [ 36.225312][ T470] ? free_nsproxy+0x21f/0x270 [ 36.230050][ T470] do_exit+0xa7c/0x27c0 [ 36.234321][ T470] ? _raw_spin_lock+0x94/0xf0 [ 36.239031][ T470] ? __cfi_do_exit+0x10/0x10 [ 36.243663][ T470] ? plist_del+0x3ec/0x400 [ 36.248142][ T470] ? _raw_spin_unlock+0x4c/0x70 [ 36.253030][ T470] ? __kasan_check_write+0x14/0x20 [ 36.258208][ T470] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.263306][ T470] do_group_exit+0x21b/0x2e0 [ 36.267970][ T470] ? __kasan_check_write+0x14/0x20 [ 36.273122][ T470] ? recalc_sigpending+0x168/0x1c0 [ 36.278307][ T470] get_signal+0x1382/0x14f0 [ 36.282861][ T470] arch_do_signal_or_restart+0xd1/0x11c0 [ 36.288573][ T470] ? do_futex+0x2e2/0x430 [ 36.292933][ T470] ? __cfi_do_futex+0x10/0x10 [ 36.297697][ T470] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.303890][ T470] ? __se_sys_futex+0x136/0x310 [ 36.308908][ T470] exit_to_user_mode_loop+0x7a/0xb0 [ 36.314148][ T470] exit_to_user_mode_prepare+0x87/0xd0 [ 36.319772][ T470] syscall_exit_to_user_mode+0x1a/0x30 [ 36.325309][ T470] do_syscall_64+0x58/0xa0 [ 36.329763][ T470] ? clear_bhb_loop+0x30/0x80 [ 36.334536][ T470] ? clear_bhb_loop+0x30/0x80 [ 36.339239][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.345196][ T470] RIP: 0033:0x7fe8aa79ce59 [ 36.349637][ T470] Code: Unable to access opcode bytes at 0x7fe8aa79ce2f. [ 36.356719][ T470] RSP: 002b:00007fe8ab6440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.365186][ T470] RAX: fffffffffffffe00 RBX: 00007fe8aaa15fa8 RCX: 00007fe8aa79ce59 [ 36.373196][ T470] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8aaa15fa8 [ 36.381250][ T470] RBP: 00007fe8aaa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.389638][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.397909][ T470] R13: 00007fe8aaa16038 R14: 00007ffea90d78d0 R15: 00007ffea90d79b8 [ 36.405942][ T470] [ 36.408991][ T470] ---[ end trace 0000000000000000 ]--- [ 36.433977][ T479] ------------[ cut here ]------------ [ 36.439660][ T479] WARNING: CPU: 0 PID: 479 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.449805][ T479] Modules linked in: [ 36.453721][ T479] CPU: 0 PID: 479 Comm: syz.6.43 Tainted: G B W syzkaller #0 [ 36.462447][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.472750][ T479] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.479473][ T479] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 36.499196][ T479] RSP: 0018:ffffc90000dff7f0 EFLAGS: 00010293 [ 36.505319][ T479] RAX: ffffffff849b9307 RBX: ffff88811bd1a000 RCX: ffff88811bd81440 [ 36.513326][ T479] RDX: 0000000000000000 RSI: 0000000032a9e780 RDI: 000000000c04eb7d [ 36.521385][ T479] RBP: ffffc90000dff810 R08: ffff88811bd1a083 R09: 1ffff110237a3410 [ 36.529426][ T479] R10: dffffc0000000000 R11: ffffed10237a3411 R12: dffffc0000000000 [ 36.537476][ T479] R13: dffffc0000000000 R14: 0000000032a9e780 R15: ffff888108d25800 [ 36.545507][ T479] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.554503][ T479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.561119][ T479] CR2: 00007fe8aa84f156 CR3: 000000012c6df000 CR4: 00000000003506b0 [ 36.569252][ T479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.577306][ T479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.585349][ T479] Call Trace: [ 36.588660][ T479] [ 36.591615][ T479] pppol2tp_release+0x150/0x2b0 [ 36.596538][ T479] sock_close+0xc9/0x220 [ 36.600817][ T479] ? __cfi_sock_close+0x10/0x10 [ 36.605754][ T479] __fput+0x1fd/0x8f0 [ 36.609810][ T479] ____fput+0x15/0x20 [ 36.613826][ T479] task_work_run+0x1e1/0x250 [ 36.618494][ T479] ? __cfi_task_work_run+0x10/0x10 [ 36.623637][ T479] ? free_nsproxy+0x21f/0x270 [ 36.628399][ T479] do_exit+0xa7c/0x27c0 [ 36.632591][ T479] ? ttwu_do_wakeup+0x102/0x490 [ 36.637509][ T479] ? __cfi_do_exit+0x10/0x10 [ 36.642140][ T479] ? try_to_wake_up+0x6c6/0x1250 [ 36.647154][ T479] ? __kasan_check_write+0x14/0x20 [ 36.652304][ T479] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.657397][ T479] do_group_exit+0x21b/0x2e0 [ 36.662023][ T479] ? __kasan_check_write+0x14/0x20 [ 36.667223][ T479] ? recalc_sigpending+0x168/0x1c0 [ 36.672377][ T479] get_signal+0x1382/0x14f0 [ 36.677014][ T479] arch_do_signal_or_restart+0xd1/0x11c0 [ 36.682686][ T479] ? do_futex+0x2bf/0x430 [ 36.687085][ T479] ? __cfi_do_futex+0x10/0x10 [ 36.691791][ T479] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.698021][ T479] ? __se_sys_futex+0x136/0x310 [ 36.702911][ T479] exit_to_user_mode_loop+0x7a/0xb0 [ 36.708182][ T479] exit_to_user_mode_prepare+0x87/0xd0 [ 36.713671][ T479] syscall_exit_to_user_mode+0x1a/0x30 [ 36.719202][ T479] do_syscall_64+0x58/0xa0 [ 36.723648][ T479] ? clear_bhb_loop+0x30/0x80 [ 36.728423][ T479] ? clear_bhb_loop+0x30/0x80 [ 36.733182][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.739156][ T479] RIP: 0033:0x7fb074f9ce59 [ 36.743633][ T479] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 36.750718][ T479] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.759208][ T479] RAX: 0000000000000001 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 36.767245][ T479] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb075215fac [ 36.775272][ T479] RBP: 00007fb075215fa0 R08: 00144d9d9fc36b1e R09: 0000000000000000 [ 36.783276][ T479] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 36.791325][ T479] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 36.799358][ T479] [ 36.802413][ T479] ---[ end trace 0000000000000000 ]--- [ 36.829673][ T483] ------------[ cut here ]------------ [ 36.835314][ T483] WARNING: CPU: 1 PID: 483 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.845472][ T483] Modules linked in: [ 36.849477][ T483] CPU: 1 PID: 483 Comm: syz.1.45 Tainted: G B W syzkaller #0 [ 36.858181][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.868447][ T483] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.874939][ T483] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 36.894721][ T483] RSP: 0018:ffffc90000f177f0 EFLAGS: 00010293 [ 36.900828][ T483] RAX: ffffffff849b9307 RBX: ffff88811ba75000 RCX: ffff88811bc43cc0 [ 36.908954][ T483] RDX: 0000000000000000 RSI: 00000000329cc840 RDI: 000000000c04eb7d [ 36.917083][ T483] RBP: ffffc90000f17810 R08: ffff88811ba75083 R09: 1ffff1102374ea10 [ 36.925182][ T483] R10: dffffc0000000000 R11: ffffed102374ea11 R12: dffffc0000000000 [ 36.933289][ T483] R13: dffffc0000000000 R14: 00000000329cc840 R15: ffff88810fd9e400 [ 36.941432][ T483] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.950539][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.957274][ T483] CR2: 00007f4ebeae5ff8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 36.965375][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.973371][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.981475][ T483] Call Trace: [ 36.984907][ T483] [ 36.987865][ T483] pppol2tp_release+0x150/0x2b0 [ 36.992750][ T483] sock_close+0xc9/0x220 [ 36.997206][ T483] ? __cfi_sock_close+0x10/0x10 [ 37.002101][ T483] __fput+0x1fd/0x8f0 [ 37.006301][ T483] ____fput+0x15/0x20 [ 37.010348][ T483] task_work_run+0x1e1/0x250 [ 37.015186][ T483] ? __cfi_task_work_run+0x10/0x10 [ 37.020339][ T483] ? free_nsproxy+0x21f/0x270 [ 37.025198][ T483] do_exit+0xa7c/0x27c0 [ 37.029398][ T483] ? ttwu_do_wakeup+0x102/0x490 [ 37.034318][ T483] ? __cfi_do_exit+0x10/0x10 [ 37.038943][ T483] ? try_to_wake_up+0x6c6/0x1250 [ 37.043923][ T483] ? __kasan_check_write+0x14/0x20 [ 37.049100][ T483] ? _raw_spin_lock_irq+0x95/0xf0 [ 37.054158][ T483] do_group_exit+0x21b/0x2e0 [ 37.058834][ T483] ? __kasan_check_write+0x14/0x20 [ 37.063978][ T483] ? recalc_sigpending+0x168/0x1c0 [ 37.069172][ T483] get_signal+0x1382/0x14f0 [ 37.073812][ T483] arch_do_signal_or_restart+0xd1/0x11c0 [ 37.079537][ T483] ? do_futex+0x2bf/0x430 [ 37.083904][ T483] ? __cfi_do_futex+0x10/0x10 [ 37.088652][ T483] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.094857][ T483] ? __se_sys_futex+0x136/0x310 [ 37.099838][ T483] exit_to_user_mode_loop+0x7a/0xb0 [ 37.105109][ T483] exit_to_user_mode_prepare+0x87/0xd0 [ 37.110603][ T483] syscall_exit_to_user_mode+0x1a/0x30 [ 37.116147][ T483] do_syscall_64+0x58/0xa0 [ 37.120597][ T483] ? clear_bhb_loop+0x30/0x80 [ 37.125349][ T483] ? clear_bhb_loop+0x30/0x80 [ 37.130073][ T483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.136035][ T483] RIP: 0033:0x7f4ebdb9ce59 [ 37.140471][ T483] Code: Unable to access opcode bytes at 0x7f4ebdb9ce2f. [ 37.147539][ T483] RSP: 002b:00007f4ebeb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.156015][ T483] RAX: 0000000000000001 RBX: 00007f4ebde15fa8 RCX: 00007f4ebdb9ce59 [ 37.164026][ T483] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ebde15fac [ 37.172072][ T483] RBP: 00007f4ebde15fa0 R08: 002f20122817f4ec R09: 0000000000000000 [ 37.180117][ T483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 37.188148][ T483] R13: 00007f4ebde16038 R14: 00007ffd0c6ccf60 R15: 00007ffd0c6cd048 [ 37.196175][ T483] [ 37.199219][ T483] ---[ end trace 0000000000000000 ]--- [ 37.213985][ T492] ------------[ cut here ]------------ [ 37.219541][ T492] WARNING: CPU: 0 PID: 492 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.229619][ T492] Modules linked in: [ 37.233545][ T492] CPU: 0 PID: 492 Comm: syz.0.47 Tainted: G B W syzkaller #0 [ 37.242207][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.252324][ T492] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.258738][ T492] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 37.278421][ T492] RSP: 0018:ffffc90000b977f0 EFLAGS: 00010293 [ 37.284556][ T492] RAX: ffffffff849b9307 RBX: ffff88811bf62000 RCX: ffff88811bc45100 [ 37.292562][ T492] RDX: 0000000000000000 RSI: 0000000009066740 RDI: 000000000c04eb7d [ 37.300595][ T492] RBP: ffffc90000b97810 R08: ffff88811bf62083 R09: 1ffff110237ec410 [ 37.308633][ T492] R10: dffffc0000000000 R11: ffffed10237ec411 R12: dffffc0000000000 [ 37.316655][ T492] R13: dffffc0000000000 R14: 0000000009066740 R15: ffff8881162ba000 [ 37.324678][ T492] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.333642][ T492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.340319][ T492] CR2: 00007f7027dec4b8 CR3: 000000012ea1e000 CR4: 00000000003506b0 [ 37.348359][ T492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.356385][ T492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.364423][ T492] Call Trace: [ 37.367734][ T492] [ 37.370690][ T492] pppol2tp_release+0x150/0x2b0 [ 37.375656][ T492] sock_close+0xc9/0x220 [ 37.379949][ T492] ? __cfi_sock_close+0x10/0x10 [ 37.384893][ T492] __fput+0x1fd/0x8f0 [ 37.388910][ T492] ____fput+0x15/0x20 [ 37.392943][ T492] task_work_run+0x1e1/0x250 [ 37.397604][ T492] ? __cfi_task_work_run+0x10/0x10 [ 37.402757][ T492] ? free_nsproxy+0x21f/0x270 [ 37.407523][ T492] do_exit+0xa7c/0x27c0 [ 37.411727][ T492] ? ttwu_do_wakeup+0x102/0x490 [ 37.416655][ T492] ? __cfi_do_exit+0x10/0x10 [ 37.421294][ T492] ? try_to_wake_up+0x6c6/0x1250 [ 37.426321][ T492] ? __kasan_check_write+0x14/0x20 [ 37.431471][ T492] ? _raw_spin_lock_irq+0x95/0xf0 [ 37.436570][ T492] do_group_exit+0x21b/0x2e0 [ 37.441205][ T492] ? __kasan_check_write+0x14/0x20 [ 37.446378][ T492] ? recalc_sigpending+0x168/0x1c0 [ 37.451538][ T492] get_signal+0x1382/0x14f0 [ 37.456117][ T492] arch_do_signal_or_restart+0xd1/0x11c0 [ 37.461787][ T492] ? do_futex+0x2bf/0x430 [ 37.466188][ T492] ? __cfi_do_futex+0x10/0x10 [ 37.470896][ T492] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.477119][ T492] ? __se_sys_futex+0x136/0x310 [ 37.482001][ T492] exit_to_user_mode_loop+0x7a/0xb0 [ 37.487284][ T492] exit_to_user_mode_prepare+0x87/0xd0 [ 37.492775][ T492] syscall_exit_to_user_mode+0x1a/0x30 [ 37.498306][ T492] do_syscall_64+0x58/0xa0 [ 37.502755][ T492] ? clear_bhb_loop+0x30/0x80 [ 37.507719][ T492] ? clear_bhb_loop+0x30/0x80 [ 37.512443][ T492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.518493][ T492] RIP: 0033:0x7f88a8b9ce59 [ 37.522939][ T492] Code: Unable to access opcode bytes at 0x7f88a8b9ce2f. [ 37.530016][ T492] RSP: 002b:00007f88a99fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.538482][ T492] RAX: 0000000000000001 RBX: 00007f88a8e15fa8 RCX: 00007f88a8b9ce59 [ 37.546534][ T492] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88a8e15fac [ 37.554551][ T492] RBP: 00007f88a8e15fa0 R08: 000698182e046dac R09: 0000000000000000 [ 37.562554][ T492] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 37.570594][ T492] R13: 00007f88a8e16038 R14: 00007fff58364120 R15: 00007fff58364208 [ 37.578634][ T492] [ 37.581679][ T492] ---[ end trace 0000000000000000 ]--- [ 37.984021][ T515] ------------[ cut here ]------------ [ 37.989739][ T515] WARNING: CPU: 1 PID: 515 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.999979][ T515] Modules linked in: [ 38.003925][ T515] CPU: 1 PID: 515 Comm: syz.6.55 Tainted: G B W syzkaller #0 [ 38.012626][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.022820][ T515] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.029252][ T515] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 38.048918][ T515] RSP: 0018:ffffc900010377f0 EFLAGS: 00010293 [ 38.055063][ T515] RAX: ffffffff849b9307 RBX: ffff88811cc41000 RCX: ffff88811cc39440 [ 38.063060][ T515] RDX: 0000000000000000 RSI: 0000000032a7e780 RDI: 000000000c04eb7d [ 38.071198][ T515] RBP: ffffc90001037810 R08: ffff88811cc41083 R09: 1ffff11023988210 [ 38.079313][ T515] R10: dffffc0000000000 R11: ffffed1023988211 R12: dffffc0000000000 [ 38.087365][ T515] R13: dffffc0000000000 R14: 0000000032a7e780 R15: ffff888118de8400 [ 38.095381][ T515] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.104363][ T515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.110977][ T515] CR2: 00007fb075db7ff8 CR3: 0000000114a2e000 CR4: 00000000003506a0 [ 38.119043][ T515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.127075][ T515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.135096][ T515] Call Trace: [ 38.138406][ T515] [ 38.141367][ T515] pppol2tp_release+0x150/0x2b0 [ 38.146319][ T515] sock_close+0xc9/0x220 [ 38.150602][ T515] ? __cfi_sock_close+0x10/0x10 [ 38.155532][ T515] __fput+0x1fd/0x8f0 [ 38.159555][ T515] ____fput+0x15/0x20 [ 38.163571][ T515] task_work_run+0x1e1/0x250 [ 38.168236][ T515] ? __cfi_task_work_run+0x10/0x10 [ 38.173390][ T515] ? free_nsproxy+0x21f/0x270 [ 38.178154][ T515] do_exit+0xa7c/0x27c0 [ 38.182359][ T515] ? _raw_spin_lock+0x94/0xf0 [ 38.187113][ T515] ? __cfi_do_exit+0x10/0x10 [ 38.191743][ T515] ? plist_del+0x3ec/0x400 [ 38.196223][ T515] ? _raw_spin_unlock+0x4c/0x70 [ 38.201113][ T515] ? __kasan_check_write+0x14/0x20 [ 38.206317][ T515] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.211461][ T515] do_group_exit+0x21b/0x2e0 [ 38.216138][ T515] ? __kasan_check_write+0x14/0x20 [ 38.221325][ T515] ? recalc_sigpending+0x168/0x1c0 [ 38.226695][ T515] get_signal+0x1382/0x14f0 [ 38.231252][ T515] arch_do_signal_or_restart+0xd1/0x11c0 [ 38.237018][ T515] ? do_futex+0x2e2/0x430 [ 38.241386][ T515] ? __cfi_do_futex+0x10/0x10 [ 38.246133][ T515] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 38.252321][ T515] ? __se_sys_futex+0x136/0x310 [ 38.257238][ T515] exit_to_user_mode_loop+0x7a/0xb0 [ 38.262467][ T515] exit_to_user_mode_prepare+0x87/0xd0 [ 38.267997][ T515] syscall_exit_to_user_mode+0x1a/0x30 [ 38.273482][ T515] do_syscall_64+0x58/0xa0 [ 38.277961][ T515] ? clear_bhb_loop+0x30/0x80 [ 38.282665][ T515] ? clear_bhb_loop+0x30/0x80 [ 38.287394][ T515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.293326][ T515] RIP: 0033:0x7fb074f9ce59 [ 38.297796][ T515] Code: Unable to access opcode bytes at 0x7fb074f9ce2f. [ 38.304862][ T515] RSP: 002b:00007fb075dd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 38.313316][ T515] RAX: fffffffffffffe00 RBX: 00007fb075215fa8 RCX: 00007fb074f9ce59 [ 38.321353][ T515] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb075215fa8 [ 38.329385][ T515] RBP: 00007fb075215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 38.337413][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.345431][ T515] R13: 00007fb075216038 R14: 00007ffddc7e0320 R15: 00007ffddc7e0408 [ 38.353435][ T515] [ 38.356512][ T515] ---[ end trace 0000000000000000 ]--- [ 38.363032][ T517] ------------[ cut here ]------------ [ 38.368616][ T517] WARNING: CPU: 0 PID: 517 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.378704][ T517] Modules linked in: [ 38.382630][ T517] CPU: 0 PID: 517 Comm: syz.1.56 Tainted: G B W syzkaller #0 [ 38.391265][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.401377][ T517] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.407776][ T517] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 38.427446][ T517] RSP: 0018:ffffc900017377f0 EFLAGS: 00010293 [ 38.433552][ T517] RAX: ffffffff849b9307 RBX: ffff88811cc42000 RCX: ffff88811cc38000 [ 38.441588][ T517] RDX: 0000000000000000 RSI: 0000000016b2a000 RDI: 000000000c04eb7d [ 38.449619][ T517] RBP: ffffc90001737810 R08: ffff88811cc42083 R09: 1ffff11023988410 [ 38.458079][ T517] R10: dffffc0000000000 R11: ffffed1023988411 R12: dffffc0000000000 [ 38.466169][ T517] R13: dffffc0000000000 R14: 0000000016b2a000 R15: ffff888118dea400 [ 38.474172][ T517] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.483157][ T517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.489795][ T517] CR2: 0000200000000000 CR3: 0000000130971000 CR4: 00000000003506b0 [ 38.497815][ T517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.505859][ T517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.513870][ T517] Call Trace: [ 38.517195][ T517] [ 38.520152][ T517] pppol2tp_release+0x150/0x2b0 [ 38.525085][ T517] sock_close+0xc9/0x220 [ 38.529368][ T517] ? __cfi_sock_close+0x10/0x10 [ 38.534266][ T517] __fput+0x1fd/0x8f0 [ 38.538289][ T517] ____fput+0x15/0x20 [ 38.542306][ T517] task_work_run+0x1e1/0x250 [ 38.546961][ T517] ? __cfi_task_work_run+0x10/0x10 [ 38.552105][ T517] ? free_nsproxy+0x21f/0x270 [ 38.556849][ T517] do_exit+0xa7c/0x27c0 [ 38.561040][ T517] ? ttwu_do_wakeup+0x102/0x490 [ 38.565945][ T517] ? __cfi_do_exit+0x10/0x10 [ 38.570574][ T517] ? try_to_wake_up+0x6c6/0x1250 [ 38.575575][ T517] ? __kasan_check_write+0x14/0x20 [ 38.580718][ T517] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.585811][ T517] do_group_exit+0x21b/0x2e0 [ 38.590440][ T517] ? __kasan_check_write+0x14/0x20 [ 38.595619][ T517] ? recalc_sigpending+0x168/0x1c0 [ 38.600765][ T517] get_signal+0x1382/0x14f0 [ 38.605340][ T517] arch_do_signal_or_restart+0xd1/0x11c0 [ 38.611015][ T517] ? do_futex+0x2bf/0x430 [ 38.615417][ T517] ? __cfi_do_futex+0x10/0x10 [ 38.620127][ T517] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 38.626352][ T517] ? __se_sys_futex+0x136/0x310 [ 38.631237][ T517] exit_to_user_mode_loop+0x7a/0xb0 [ 38.636495][ T517] exit_to_user_mode_prepare+0x87/0xd0 [ 38.641990][ T517] syscall_exit_to_user_mode+0x1a/0x30 [ 38.647503][ T517] do_syscall_64+0x58/0xa0 [ 38.651957][ T517] ? clear_bhb_loop+0x30/0x80 [ 38.656722][ T517] ? clear_bhb_loop+0x30/0x80 [ 38.661432][ T517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.667402][ T517] RIP: 0033:0x7f4ebdb9ce59 [ 38.671847][ T517] Code: Unable to access opcode bytes at 0x7f4ebdb9ce2f. [ 38.678953][ T517] RSP: 002b:00007f4ebeb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 38.687439][ T517] RAX: 0000000000000001 RBX: 00007f4ebde15fa8 RCX: 00007f4ebdb9ce59 [ 38.695496][ T517] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ebde15fac [ 38.703503][ T517] RBP: 00007f4ebde15fa0 R08: 00099308c17459e2 R09: 0000000000000000 [ 38.711554][ T517] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 38.719579][ T517] R13: 00007f4ebde16038 R14: 00007ffd0c6ccf60 R15: 00007ffd0c6cd048 [ 38.727671][ T517] [ 38.730717][ T517] ---[ end trace 0000000000000000 ]--- 2026/06/14 20:18:33 executed programs: 53 [ 38.881645][ T532] ------------[ cut here ]------------ [ 38.887283][ T532] WARNING: CPU: 0 PID: 532 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.897434][ T532] Modules linked in: [ 38.901360][ T532] CPU: 0 PID: 532 Comm: syz.0.60 Tainted: G B W syzkaller #0 [ 38.910103][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.920309][ T532] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.926775][ T532] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 38.946721][ T532] RSP: 0018:ffffc90000ff77f0 EFLAGS: 00010293 [ 38.952831][ T532] RAX: ffffffff849b9307 RBX: ffff88811d010000 RCX: ffff88811ceb0000 [ 38.961028][ T532] RDX: 0000000000000000 RSI: 0000000009071b80 RDI: 000000000c04eb7d [ 38.969112][ T532] RBP: ffffc90000ff7810 R08: ffff88811d010083 R09: 1ffff11023a02010 [ 38.977154][ T532] R10: dffffc0000000000 R11: ffffed1023a02011 R12: dffffc0000000000 [ 38.985187][ T532] R13: dffffc0000000000 R14: 0000000009071b80 R15: ffff888119611400 [ 38.993195][ T532] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.002200][ T532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.008845][ T532] CR2: 00007f4ebe948060 CR3: 0000000130971000 CR4: 00000000003506b0 [ 39.016884][ T532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.025181][ T532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.033270][ T532] Call Trace: [ 39.036670][ T532] [ 39.039663][ T532] pppol2tp_release+0x150/0x2b0 [ 39.044604][ T532] sock_close+0xc9/0x220 [ 39.048886][ T532] ? __cfi_sock_close+0x10/0x10 [ 39.053772][ T532] __fput+0x1fd/0x8f0 [ 39.057826][ T532] ____fput+0x15/0x20 [ 39.061845][ T532] task_work_run+0x1e1/0x250 [ 39.066548][ T532] ? __cfi_task_work_run+0x10/0x10 [ 39.071693][ T532] ? free_nsproxy+0x21f/0x270 [ 39.076470][ T532] do_exit+0xa7c/0x27c0 [ 39.080669][ T532] ? __cfi_do_exit+0x10/0x10 [ 39.085337][ T532] ? try_to_wake_up+0x6c6/0x1250 [ 39.090306][ T532] ? __kasan_check_write+0x14/0x20 [ 39.095533][ T532] ? _raw_spin_lock_irq+0x95/0xf0 [ 39.100618][ T532] do_group_exit+0x21b/0x2e0 [ 39.105340][ T532] ? __kasan_check_write+0x14/0x20 [ 39.110487][ T532] ? recalc_sigpending+0x168/0x1c0 [ 39.115664][ T532] get_signal+0x1382/0x14f0 [ 39.120210][ T532] arch_do_signal_or_restart+0xd1/0x11c0 [ 39.125919][ T532] ? do_futex+0x2bf/0x430 [ 39.130283][ T532] ? __cfi_do_futex+0x10/0x10 [ 39.135026][ T532] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 39.141215][ T532] ? __se_sys_futex+0x136/0x310 [ 39.146150][ T532] exit_to_user_mode_loop+0x7a/0xb0 [ 39.151378][ T532] exit_to_user_mode_prepare+0x87/0xd0 [ 39.156912][ T532] syscall_exit_to_user_mode+0x1a/0x30 [ 39.162407][ T532] do_syscall_64+0x58/0xa0 [ 39.166899][ T532] ? clear_bhb_loop+0x30/0x80 [ 39.171620][ T532] ? clear_bhb_loop+0x30/0x80 [ 39.176360][ T532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.182294][ T532] RIP: 0033:0x7f88a8b9ce59 [ 39.186770][ T532] Code: Unable to access opcode bytes at 0x7f88a8b9ce2f. [ 39.193808][ T532] RSP: 002b:00007f88a99fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.202302][ T532] RAX: 0000000000000001 RBX: 00007f88a8e15fa8 RCX: 00007f88a8b9ce59 [ 39.210428][ T532] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88a8e15fac [ 39.218476][ T532] RBP: 00007f88a8e15fa0 R08: 0030e9d5cdac12ee R09: 0000000000000000 [ 39.226503][ T532] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 39.234536][ T532] R13: 00007f88a8e16038 R14: 00007fff58364120 R15: 00007fff58364208 [ 39.242538][ T532] [ 39.245616][ T532] ---[ end trace 0000000000000000 ]--- [ 39.269864][ T536] ------------[ cut here ]------------ [ 39.275433][ T536] WARNING: CPU: 1 PID: 536 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.285531][ T536] Modules linked in: [ 39.289453][ T536] CPU: 1 PID: 536 Comm: syz.2.62 Tainted: G B W syzkaller #0 [ 39.298088][ T536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.308242][ T536] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.314852][ T536] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 39.334523][ T536] RSP: 0018:ffffc90000d4f7f0 EFLAGS: 00010293 [ 39.340624][ T536] RAX: ffffffff849b9307 RBX: ffff88811cd85000 RCX: ffff88811ceb6540 [ 39.348671][ T536] RDX: 0000000000000000 RSI: 000000001cd6b300 RDI: 000000000c04eb7d [ 39.356694][ T536] RBP: ffffc90000d4f810 R08: ffff88811cd85083 R09: 1ffff110239b0a10 [ 39.364714][ T536] R10: dffffc0000000000 R11: ffffed10239b0a11 R12: dffffc0000000000 [ 39.372728][ T536] R13: dffffc0000000000 R14: 000000001cd6b300 R15: ffff88811c37f400 [ 39.380772][ T536] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.389760][ T536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.396396][ T536] CR2: 0000555563126908 CR3: 0000000130951000 CR4: 00000000003506a0 [ 39.404434][ T536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.412432][ T536] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.420450][ T536] Call Trace: [ 39.423755][ T536] [ 39.426831][ T536] pppol2tp_release+0x150/0x2b0 [ 39.431716][ T536] sock_close+0xc9/0x220 [ 39.436023][ T536] ? __cfi_sock_close+0x10/0x10 [ 39.440922][ T536] __fput+0x1fd/0x8f0 [ 39.444966][ T536] ____fput+0x15/0x20 [ 39.448993][ T536] task_work_run+0x1e1/0x250 [ 39.453628][ T536] ? __cfi_task_work_run+0x10/0x10 [ 39.458802][ T536] ? free_nsproxy+0x21f/0x270 [ 39.463616][ T536] do_exit+0xa7c/0x27c0 [ 39.467849][ T536] ? ttwu_do_wakeup+0x102/0x490 [ 39.472748][ T536] ? __cfi_do_exit+0x10/0x10 [ 39.477398][ T536] ? try_to_wake_up+0x6c6/0x1250 [ 39.482378][ T536] ? __kasan_check_write+0x14/0x20 [ 39.487543][ T536] ? _raw_spin_lock_irq+0x95/0xf0 [ 39.492609][ T536] do_group_exit+0x21b/0x2e0 [ 39.497278][ T536] ? __kasan_check_write+0x14/0x20 [ 39.502426][ T536] ? recalc_sigpending+0x168/0x1c0 [ 39.507598][ T536] get_signal+0x1382/0x14f0 [ 39.512147][ T536] arch_do_signal_or_restart+0xd1/0x11c0 [ 39.517846][ T536] ? do_futex+0x2bf/0x430 [ 39.522209][ T536] ? __cfi_do_futex+0x10/0x10 [ 39.526950][ T536] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 39.533144][ T536] ? __se_sys_futex+0x136/0x310 [ 39.538073][ T536] exit_to_user_mode_loop+0x7a/0xb0 [ 39.543304][ T536] exit_to_user_mode_prepare+0x87/0xd0 [ 39.548831][ T536] syscall_exit_to_user_mode+0x1a/0x30 [ 39.554363][ T536] do_syscall_64+0x58/0xa0 [ 39.558814][ T536] ? clear_bhb_loop+0x30/0x80 [ 39.563522][ T536] ? clear_bhb_loop+0x30/0x80 [ 39.568246][ T536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.574180][ T536] RIP: 0033:0x7fe8aa79ce59 [ 39.578656][ T536] Code: Unable to access opcode bytes at 0x7fe8aa79ce2f. [ 39.585744][ T536] RSP: 002b:00007fe8ab6440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.594189][ T536] RAX: 0000000000000001 RBX: 00007fe8aaa15fa8 RCX: 00007fe8aa79ce59 [ 39.602225][ T536] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe8aaa15fac [ 39.610253][ T536] RBP: 00007fe8aaa15fa0 R08: 00099308d3f7533a R09: 0000000000000000 [ 39.618276][ T536] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 39.626316][ T536] R13: 00007fe8aaa16038 R14: 00007ffea90d78d0 R15: 00007ffea90d79b8 [ 39.634348][ T536] [ 39.637390][ T536] ---[ end trace 0000000000000000 ]--- [ 39.855536][ T555] ------------[ cut here ]------------ [ 39.861047][ T555] WARNING: CPU: 1 PID: 555 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.871364][ T555] Modules linked in: [ 39.875446][ T555] CPU: 1 PID: 555 Comm: syz.1.68 Tainted: G B W syzkaller #0 [ 39.884060][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.894284][ T555] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.900656][ T555] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 39.920505][ T555] RSP: 0018:ffffc9000116f7f0 EFLAGS: 00010293 [ 39.926855][ T555] RAX: ffffffff849b9307 RBX: ffff88811d4e4000 RCX: ffff88811d4bd100 [ 39.934889][ T555] RDX: 0000000000000000 RSI: 0000000016f43cc0 RDI: 000000000c04eb7d [ 39.942887][ T555] RBP: ffffc9000116f810 R08: ffff88811d4e4083 R09: 1ffff11023a9c810 [ 39.951039][ T555] R10: dffffc0000000000 R11: ffffed1023a9c811 R12: dffffc0000000000 [ 39.959073][ T555] R13: dffffc0000000000 R14: 0000000016f43cc0 R15: ffff88811badc400 [ 39.967111][ T555] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.976111][ T555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.982721][ T555] CR2: 00007f4ebeae5ff8 CR3: 0000000110581000 CR4: 00000000003506a0 [ 39.990763][ T555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.998774][ T555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.006822][ T555] Call Trace: [ 40.010128][ T555] [ 40.013083][ T555] pppol2tp_release+0x150/0x2b0 [ 40.018013][ T555] sock_close+0xc9/0x220 [ 40.022300][ T555] ? __cfi_sock_close+0x10/0x10 [ 40.027232][ T555] __fput+0x1fd/0x8f0 [ 40.031250][ T555] ____fput+0x15/0x20 [ 40.035322][ T555] task_work_run+0x1e1/0x250 [ 40.039986][ T555] ? __cfi_task_work_run+0x10/0x10 [ 40.045150][ T555] ? free_nsproxy+0x21f/0x270 [ 40.049867][ T555] do_exit+0xa7c/0x27c0 [ 40.054059][ T555] ? ttwu_do_wakeup+0x102/0x490 [ 40.058981][ T555] ? __cfi_do_exit+0x10/0x10 [ 40.063615][ T555] ? try_to_wake_up+0x6c6/0x1250 [ 40.068637][ T555] ? __kasan_check_write+0x14/0x20 [ 40.073796][ T555] ? _raw_spin_lock_irq+0x95/0xf0 [ 40.078892][ T555] do_group_exit+0x21b/0x2e0 [ 40.083530][ T555] ? __kasan_check_write+0x14/0x20 [ 40.088708][ T555] ? recalc_sigpending+0x168/0x1c0 [ 40.093883][ T555] get_signal+0x1382/0x14f0 [ 40.098448][ T555] arch_do_signal_or_restart+0xd1/0x11c0 [ 40.104122][ T555] ? do_futex+0x2bf/0x430 [ 40.108507][ T555] ? __cfi_do_futex+0x10/0x10 [ 40.113216][ T555] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.119441][ T555] ? __se_sys_futex+0x136/0x310 [ 40.124378][ T555] exit_to_user_mode_loop+0x7a/0xb0 [ 40.129620][ T555] exit_to_user_mode_prepare+0x87/0xd0 [ 40.135229][ T555] syscall_exit_to_user_mode+0x1a/0x30 [ 40.140722][ T555] do_syscall_64+0x58/0xa0 [ 40.145188][ T555] ? clear_bhb_loop+0x30/0x80 [ 40.149894][ T555] ? clear_bhb_loop+0x30/0x80 [ 40.154647][ T555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.160594][ T555] RIP: 0033:0x7f4ebdb9ce59 [ 40.165334][ T555] Code: Unable to access opcode bytes at 0x7f4ebdb9ce2f. [ 40.172378][ T555] RSP: 002b:00007f4ebeb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.180863][ T555] RAX: 0000000000000001 RBX: 00007f4ebde15fa8 RCX: 00007f4ebdb9ce59 [ 40.188902][ T555] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ebde15fac [ 40.196927][ T555] RBP: 00007f4ebde15fa0 R08: 0030513f5fffa880 R09: 0000000000000000 [ 40.204947][ T555] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 40.212945][ T555] R13: 00007f4ebde16038 R14: 00007ffd0c6ccf60 R15: 00007ffd0c6cd048 [ 40.220985][ T555] [ 40.224030][ T555] ---[ end trace 0000000000000000 ]--- [ 40.305029][ T567] ------------[ cut here ]------------ [ 40.310563][ T567] WARNING: CPU: 1 PID: 567 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.320621][ T567] Modules linked in: [ 40.324561][ T567] CPU: 1 PID: 567 Comm: syz.5.71 Tainted: G B W syzkaller #0 [ 40.333177][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.343290][ T567] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.349763][ T567] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 40.369430][ T567] RSP: 0018:ffffc90000f077f0 EFLAGS: 00010293 [ 40.375553][ T567] RAX: ffffffff849b9307 RBX: ffff88811d4e6000 RCX: ffff88811d4ba880 [ 40.383559][ T567] RDX: 0000000000000000 RSI: 0000000030d8dc40 RDI: 000000000c04eb7d [ 40.391938][ T567] RBP: ffffc90000f07810 R08: ffff88811d4e6083 R09: 1ffff11023a9cc10 [ 40.399991][ T567] R10: dffffc0000000000 R11: ffffed1023a9cc11 R12: dffffc0000000000 [ 40.408026][ T567] R13: dffffc0000000000 R14: 0000000030d8dc40 R15: ffff88811badf400 [ 40.416083][ T567] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.425059][ T567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.431690][ T567] CR2: 00007f70289caff8 CR3: 0000000130caa000 CR4: 00000000003506a0 [ 40.439722][ T567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.447737][ T567] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400