Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. 2026/08/13 19:29:13 parsed 1 programs 2026/08/13 19:29:13 serving rpc on tcp://33051 [ 26.336846][ T24] audit: type=1400 audit(1786649353.600:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.357907][ T24] audit: type=1400 audit(1786649353.600:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.377588][ T24] audit: type=1400 audit(1786649353.600:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.312133][ T24] audit: type=1400 audit(1786649354.570:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.315973][ T293] cgroup: Unknown subsys name 'net' [ 27.335385][ T24] audit: type=1400 audit(1786649354.570:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.363368][ T24] audit: type=1400 audit(1786649354.600:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.363852][ T293] cgroup: Unknown subsys name 'devices' [ 27.506521][ T293] cgroup: Unknown subsys name 'hugetlb' [ 27.512153][ T293] cgroup: Unknown subsys name 'rlimit' [ 27.663573][ T24] audit: type=1400 audit(1786649354.920:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.687269][ T24] audit: type=1400 audit(1786649354.920:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.708533][ T24] audit: type=1400 audit(1786649354.920:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.729668][ T24] audit: type=1400 audit(1786649354.920:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.729699][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.772416][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.238443][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 28.254943][ T305] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 28.466711][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.473903][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.490463][ T307] device bridge_slave_0 entered promiscuous mode [ 28.507287][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.514375][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.522624][ T307] device bridge_slave_1 entered promiscuous mode [ 28.716934][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.724208][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.731758][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.739205][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.883572][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.920891][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.946761][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.965051][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.981121][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.990110][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.997192][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.004864][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.013199][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.020413][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.041099][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.061191][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.096429][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.115866][ T307] device veth0_vlan entered promiscuous mode [ 29.125009][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.144786][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.152696][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.171395][ T307] device veth1_macvtap entered promiscuous mode [ 29.178637][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.196075][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.204748][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/08/13 19:29:16 executed programs: 0 [ 29.431907][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.439247][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.447099][ T376] device bridge_slave_0 entered promiscuous mode [ 29.456075][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.463275][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.471037][ T376] device bridge_slave_1 entered promiscuous mode [ 29.536108][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.543453][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.551171][ T370] device bridge_slave_0 entered promiscuous mode [ 29.559792][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.567079][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.574756][ T370] device bridge_slave_1 entered promiscuous mode [ 29.582935][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.590789][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.599085][ T369] device bridge_slave_0 entered promiscuous mode [ 29.631557][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.638793][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.646353][ T369] device bridge_slave_1 entered promiscuous mode [ 29.668924][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.676109][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.683607][ T375] device bridge_slave_0 entered promiscuous mode [ 29.706852][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.713924][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.721627][ T374] device bridge_slave_0 entered promiscuous mode [ 29.728984][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.736408][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.744021][ T374] device bridge_slave_1 entered promiscuous mode [ 29.750798][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.757998][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.765614][ T375] device bridge_slave_1 entered promiscuous mode [ 29.927285][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.934490][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.941905][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.948973][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.975078][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.982242][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.989598][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.996936][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.011701][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.018899][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.026337][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.033817][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.044034][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.051118][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.058608][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.065873][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.079209][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.086295][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.093571][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.100830][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.151325][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.159283][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.166506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.174040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.182613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.190622][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.198063][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.205573][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.212925][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.220322][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.227597][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.234864][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.249769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.268899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.277574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.286671][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.293877][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.302039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.310750][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.317938][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.326459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.335640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.343878][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.350963][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.378941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.387635][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.394769][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.402829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.411687][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.418855][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.426360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.434500][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.441772][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.449645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.457482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.465950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.474211][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.481387][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.502805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.511284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.519965][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527253][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.536072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.544807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.553062][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560145][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.567849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.576186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.584140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.592751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.600936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.609593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.619268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.627426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.645336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.653452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.661578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.670278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.678451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.686762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.695059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.703262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.721780][ T370] device veth0_vlan entered promiscuous mode [ 30.732420][ T375] device veth0_vlan entered promiscuous mode [ 30.740067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.748484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.757337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.765888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.774077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.782913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.791287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.799614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.808507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.816266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.824173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.832335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.850994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.859516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.868601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.883534][ T375] device veth1_macvtap entered promiscuous mode [ 30.897947][ T369] device veth0_vlan entered promiscuous mode [ 30.905912][ T370] device veth1_macvtap entered promiscuous mode [ 30.914621][ T376] device veth0_vlan entered promiscuous mode [ 30.921155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.929628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.938509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.947186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.955873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.964551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.973173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.981679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.989727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.998184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.006865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.015152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.023053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.031154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.038645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.046376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.053838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.062546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.070136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.089423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.097996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.112737][ T369] device veth1_macvtap entered promiscuous mode [ 31.120901][ T374] device veth0_vlan entered promiscuous mode [ 31.135243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.143901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.152858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.161502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.171453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.180354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.198000][ T376] device veth1_macvtap entered promiscuous mode [ 31.216923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.226389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.237310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.246387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.255360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.263337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.272059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.289365][ T374] device veth1_macvtap entered promiscuous mode [ 31.296734][ T395] ================================================================== [ 31.304932][ T395] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 31.311942][ T395] Write of size 8 at addr ffff888113540150 by task syz.4.21/395 [ 31.319599][ T395] [ 31.322133][ T395] CPU: 0 PID: 395 Comm: syz.4.21 Not tainted syzkaller #0 [ 31.329681][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.340451][ T395] Call Trace: [ 31.343860][ T395] __dump_stack+0x21/0x24 [ 31.348313][ T395] dump_stack_lvl+0x1a7/0x208 [ 31.353021][ T395] ? show_regs_print_info+0x18/0x18 [ 31.358247][ T395] ? thaw_kernel_threads+0x220/0x220 [ 31.363566][ T395] print_address_description+0x7f/0x2c0 [ 31.369529][ T395] ? mutex_lock+0x85/0xf0 [ 31.373879][ T395] kasan_report+0x100/0x140 [ 31.378534][ T395] ? mutex_lock+0x85/0xf0 [ 31.383143][ T395] kasan_check_range+0x249/0x2a0 [ 31.388155][ T395] __kasan_check_write+0x14/0x20 [ 31.393207][ T395] mutex_lock+0x85/0xf0 [ 31.397418][ T395] ? mutex_trylock+0xb0/0xb0 [ 31.402030][ T395] ? l2tp_session_put+0xb2/0x1a0 [ 31.406986][ T395] ? l2tp_session_delete+0x3a9/0x4a0 [ 31.412310][ T395] pppol2tp_release+0x178/0x2b0 [ 31.417182][ T395] sock_close+0xb8/0x200 [ 31.421789][ T395] ? sock_mmap+0xa0/0xa0 [ 31.426133][ T395] __fput+0x2dc/0x730 [ 31.430226][ T395] ____fput+0x15/0x20 [ 31.434330][ T395] task_work_run+0x127/0x190 [ 31.439076][ T395] do_exit+0xa7c/0x24e0 [ 31.443298][ T395] ? __kasan_check_write+0x14/0x20 [ 31.448533][ T395] ? switch_fpu_return+0x19c/0x330 [ 31.453846][ T395] ? put_task_struct+0x90/0x90 [ 31.458633][ T395] ? fpu__clear_all+0x20/0x20 [ 31.463516][ T395] ? __kasan_check_read+0x11/0x20 [ 31.468686][ T395] __x64_sys_exit+0x40/0x40 [ 31.473331][ T395] do_syscall_64+0x31/0x40 [ 31.477785][ T395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.483725][ T395] RIP: 0033:0x7f27ccf300d9 [ 31.488243][ T395] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 31.495626][ T395] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.504108][ T395] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 31.512183][ T395] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.520267][ T395] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 31.528445][ T395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.536964][ T395] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 31.545218][ T395] [ 31.547575][ T395] Allocated by task 394: [ 31.551840][ T395] __kasan_kmalloc+0xd4/0x100 [ 31.556544][ T395] __kmalloc+0x19f/0x330 [ 31.560889][ T395] l2tp_session_create+0x39/0xb60 [ 31.565928][ T395] pppol2tp_connect+0xbf5/0x1640 [ 31.571045][ T395] __sys_connect+0x3ce/0x450 [ 31.575676][ T395] __x64_sys_connect+0x7a/0x90 [ 31.580737][ T395] do_syscall_64+0x31/0x40 [ 31.585181][ T395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.591357][ T395] [ 31.593703][ T395] Freed by task 395: [ 31.598065][ T395] kasan_set_track+0x4a/0x70 [ 31.602764][ T395] kasan_set_free_info+0x23/0x40 [ 31.608023][ T395] ____kasan_slab_free+0x125/0x160 [ 31.613209][ T395] __kasan_slab_free+0x11/0x20 [ 31.618013][ T395] slab_free_freelist_hook+0xc5/0x190 [ 31.623398][ T395] kfree+0xc0/0x270 [ 31.627235][ T395] l2tp_session_put+0xb2/0x1a0 [ 31.632019][ T395] l2tp_session_delete+0x3a9/0x4a0 [ 31.637139][ T395] pppol2tp_release+0x169/0x2b0 [ 31.642006][ T395] sock_close+0xb8/0x200 [ 31.646261][ T395] __fput+0x2dc/0x730 [ 31.650256][ T395] ____fput+0x15/0x20 [ 31.654476][ T395] task_work_run+0x127/0x190 [ 31.659152][ T395] do_exit+0xa7c/0x24e0 [ 31.663411][ T395] __ia32_sys_exit+0x0/0x40 [ 31.667924][ T395] do_syscall_64+0x31/0x40 [ 31.672372][ T395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.678620][ T395] [ 31.680999][ T395] The buggy address belongs to the object at ffff888113540000 [ 31.680999][ T395] which belongs to the cache kmalloc-512 of size 512 [ 31.696005][ T395] The buggy address is located 336 bytes inside of [ 31.696005][ T395] 512-byte region [ffff888113540000, ffff888113540200) [ 31.709699][ T395] The buggy address belongs to the page: [ 31.715774][ T395] page:ffffea00044d5000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113540 [ 31.726671][ T395] head:ffffea00044d5000 order:2 compound_mapcount:0 compound_pincount:0 [ 31.735307][ T395] flags: 0x4000000000010200(slab|head) [ 31.740894][ T395] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 31.749502][ T395] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.758454][ T395] page dumped because: kasan: bad access detected [ 31.765113][ T395] page_owner tracks the page as allocated [ 31.770889][ T395] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 374, ts 31120617950, free_ts 31114295471 [ 31.792090][ T395] prep_new_page+0x176/0x190 [ 31.796702][ T395] get_page_from_freelist+0x225f/0x23f0 [ 31.802268][ T395] __alloc_pages_nodemask+0x29a/0x640 [ 31.807660][ T395] new_slab+0x84/0x3f0 [ 31.811751][ T395] ___slab_alloc+0x2f8/0x4c0 [ 31.816538][ T395] __slab_alloc+0x63/0xa0 [ 31.821089][ T395] __kmalloc+0x1f9/0x330 [ 31.825455][ T395] fib6_info_alloc+0x34/0xe0 [ 31.830154][ T395] ip6_route_info_create+0x4c7/0x1450 [ 31.835667][ T395] ip6_route_add+0x27/0x130 [ 31.840391][ T395] addrconf_prefix_route+0x233/0x310 [ 31.845859][ T395] inet6_addr_add+0x51d/0x970 [ 31.850807][ T395] inet6_rtm_newaddr+0x6e1/0x9c0 [ 31.855805][ T395] rtnetlink_rcv_msg+0x9e9/0xca0 [ 31.861022][ T395] netlink_rcv_skb+0x1e9/0x430 [ 31.865807][ T395] rtnetlink_rcv+0x1c/0x20 [ 31.870358][ T395] page last free stack trace: [ 31.875137][ T395] __free_pages_ok+0x80b/0x830 [ 31.879916][ T395] __free_pages+0xd8/0x390 [ 31.884676][ T395] __free_slab+0xcf/0x190 [ 31.889024][ T395] unfreeze_partials+0x150/0x180 [ 31.894248][ T395] put_cpu_partial+0xc1/0x180 [ 31.898959][ T395] __slab_free+0x2c9/0x3a0 [ 31.903418][ T395] ___cache_free+0x10e/0x130 [ 31.908124][ T395] qlink_free+0x50/0x90 [ 31.912324][ T395] qlist_free_all+0x5f/0xb0 [ 31.916867][ T395] kasan_quarantine_reduce+0x14a/0x160 [ 31.922514][ T395] __kasan_slab_alloc+0x2f/0xe0 [ 31.927638][ T395] slab_post_alloc_hook+0x5d/0x2f0 [ 31.932944][ T395] kmem_cache_alloc+0x15a/0x2d0 [ 31.937796][ T395] __alloc_skb+0x9e/0x520 [ 31.942154][ T395] netlink_sendmsg+0x693/0xb70 [ 31.946937][ T395] ____sys_sendmsg+0x5be/0x8f0 [ 31.951716][ T395] [ 31.954113][ T395] Memory state around the buggy address: [ 31.959849][ T395] ffff888113540000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.968613][ T395] ffff888113540080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.977143][ T395] >ffff888113540100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.985654][ T395] ^ [ 31.992332][ T395] ffff888113540180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.000579][ T395] ffff888113540200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.009096][ T395] ================================================================== [ 32.017340][ T395] Disabling lock debugging due to kernel taint [ 32.032883][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 32.032896][ T24] audit: type=1400 audit(1786649359.290:108): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.033160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.045972][ T24] audit: type=1400 audit(1786649359.290:109): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.071168][ T411] ------------[ cut here ]------------ [ 32.094647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.100577][ T411] WARNING: CPU: 1 PID: 411 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.106049][ T24] audit: type=1400 audit(1786649359.290:110): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.117061][ T411] Modules linked in: [ 32.139902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.142235][ T411] [ 32.145626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.163253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.173763][ T24] audit: type=1400 audit(1786649359.290:111): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.184488][ T411] CPU: 1 PID: 411 Comm: syz.4.26 Tainted: G B syzkaller #0 [ 32.196800][ T24] audit: type=1400 audit(1786649359.290:112): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.233607][ T24] audit: type=1400 audit(1786649359.290:113): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.255171][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.284923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.293278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.302537][ T411] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.317180][ T24] audit: type=1400 audit(1786649359.290:114): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.327227][ T411] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 32.355663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.370975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.441434][ T411] RSP: 0000:ffffc90000ee7c40 EFLAGS: 00010293 [ 32.463162][ T418] ------------[ cut here ]------------ [ 32.485057][ T411] RAX: ffffffff842ef547 RBX: ffff8881131af800 RCX: ffff888112428000 [ 32.493874][ T418] WARNING: CPU: 0 PID: 418 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.513780][ T425] ------------[ cut here ]------------ [ 32.531666][ T411] RDX: 0000000000000000 RSI: 00000000134ca4c0 RDI: 000000000c04eb7d [ 32.547178][ T411] RBP: ffffc90000ee7c60 R08: ffff8881131af883 R09: 1ffff11022635f10 [ 32.557246][ T425] WARNING: CPU: 1 PID: 425 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.567871][ T418] Modules linked in: [ 32.571834][ T418] CPU: 1 PID: 418 Comm: syz.4.28 Tainted: G B syzkaller #0 [ 32.573514][ T411] R10: dffffc0000000000 R11: ffffed1022635f11 R12: dffffc0000000000 [ 32.590230][ T445] ------------[ cut here ]------------ [ 32.601193][ T445] WARNING: CPU: 0 PID: 445 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.611733][ T445] Modules linked in: [ 32.615805][ T445] CPU: 0 PID: 445 Comm: syz.6.17 Tainted: G B syzkaller #0 [ 32.629264][ T425] Modules linked in: [ 32.633399][ T425] CPU: 0 PID: 425 Comm: syz.5.18 Tainted: G B syzkaller #0 [ 32.644022][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.654347][ T425] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.658075][ T411] R13: dffffc0000000000 R14: 00000000134ca4c0 R15: ffff888113fbdc00 [ 32.664668][ T425] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 32.685125][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.701330][ T468] ------------[ cut here ]------------ [ 32.701373][ T425] RSP: 0018:ffffc90000ef7c40 EFLAGS: 00010293 [ 32.714919][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.721656][ T425] RAX: ffffffff842ef547 RBX: ffff888111f3c800 RCX: ffff888114da4f00 [ 32.732401][ T418] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.732415][ T418] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 32.732424][ T418] RSP: 0018:ffffc90000ed7c40 EFLAGS: 00010293 [ 32.732438][ T418] RAX: ffffffff842ef547 RBX: ffff888114591800 RCX: ffff8881144913c0 [ 32.732447][ T418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 32.732456][ T418] RBP: ffffc90000ed7c60 R08: ffff888114591883 R09: 1ffff110228b2310 [ 32.732493][ T418] R10: dffffc0000000000 R11: ffffed10228b2311 R12: dffffc0000000000 [ 32.823370][ T418] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888114624000 [ 32.833659][ T418] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.836365][ T468] WARNING: CPU: 1 PID: 468 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.854975][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.854984][ T418] CR2: 00007f564b5b0da0 CR3: 000000000640f000 CR4: 00000000003506b0 [ 32.854995][ T418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.855002][ T418] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.855006][ T418] Call Trace: [ 32.855023][ T418] pppol2tp_release+0x150/0x2b0 [ 32.855034][ T418] sock_close+0xb8/0x200 [ 32.855044][ T418] ? sock_mmap+0xa0/0xa0 [ 32.855054][ T418] __fput+0x2dc/0x730 [ 32.855065][ T418] ____fput+0x15/0x20 [ 32.855075][ T418] task_work_run+0x127/0x190 [ 32.855087][ T418] do_exit+0xa7c/0x24e0 [ 32.855100][ T418] ? __kasan_check_write+0x14/0x20 [ 32.855112][ T418] ? switch_fpu_return+0x19c/0x330 [ 32.855151][ T418] ? put_task_struct+0x90/0x90 [ 32.935988][ T445] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.939669][ T411] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.945942][ T418] ? fpu__clear_all+0x20/0x20 [ 32.954523][ T411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.954531][ T411] CR2: 00007f564b5b0da0 CR3: 000000000640f000 CR4: 00000000003506b0 [ 32.954561][ T411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.959922][ T425] RDX: 0000000000000000 RSI: 000000000dce8f00 RDI: 000000000c04eb7d [ 32.970345][ T411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.982702][ T445] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 32.999125][ T411] Call Trace: [ 33.022858][ T411] pppol2tp_release+0x150/0x2b0 [ 33.024019][ T503] ------------[ cut here ]------------ [ 33.028561][ T411] sock_close+0xb8/0x200 [ 33.038423][ T411] ? sock_mmap+0xa0/0xa0 [ 33.042694][ T411] __fput+0x2dc/0x730 [ 33.046948][ T411] ____fput+0x15/0x20 [ 33.048155][ T468] Modules linked in: [ 33.051034][ T411] task_work_run+0x127/0x190 [ 33.051037][ T468] [ 33.051078][ T468] CPU: 1 PID: 468 Comm: syz.2.19 Tainted: G B syzkaller #0 [ 33.055403][ T411] do_exit+0xa7c/0x24e0 [ 33.055418][ T411] ? __kasan_check_write+0x14/0x20 [ 33.055431][ T411] ? switch_fpu_return+0x19c/0x330 [ 33.055441][ T411] ? put_task_struct+0x90/0x90 [ 33.055475][ T411] ? fpu__clear_all+0x20/0x20 [ 33.061803][ T503] WARNING: CPU: 1 PID: 503 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.063519][ T411] ? __kasan_check_read+0x11/0x20 [ 33.114123][ T411] __x64_sys_exit+0x40/0x40 [ 33.118780][ T411] do_syscall_64+0x31/0x40 [ 33.123458][ T411] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.129595][ T411] RIP: 0033:0x7f27ccf300d9 [ 33.134031][ T411] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 33.142076][ T411] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.147871][ T425] RBP: ffffc90000ef7c60 R08: ffff888111f3c883 R09: 1ffff110223e7910 [ 33.158857][ T411] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 33.167484][ T411] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.178206][ T411] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 33.186595][ T411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.192695][ T503] Modules linked in: [ 33.194934][ T411] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 33.202965][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.212083][ T411] ---[ end trace c6752b0a6da84b5b ]--- [ 33.218018][ T503] [ 33.227423][ T418] ? __kasan_check_read+0x11/0x20 [ 33.232839][ T418] __x64_sys_exit+0x40/0x40 [ 33.239155][ T425] R10: dffffc0000000000 R11: ffffed10223e7911 R12: dffffc0000000000 [ 33.244654][ T503] CPU: 1 PID: 503 Comm: syz.3.51 Tainted: G B W syzkaller #0 [ 33.248759][ T445] RSP: 0018:ffffc90000f87c40 EFLAGS: 00010293 [ 33.271561][ T445] RAX: ffffffff842ef547 RBX: ffff888115126000 RCX: ffff8881152a4f00 [ 33.280418][ T418] do_syscall_64+0x31/0x40 [ 33.287980][ T445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 33.296619][ T418] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.302636][ T418] RIP: 0033:0x7f27ccf300d9 [ 33.307869][ T425] R13: dffffc0000000000 R14: 000000000dce8f00 R15: ffff888114dd7c00 [ 33.320055][ T468] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.335738][ T468] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 33.343384][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.368544][ T445] RBP: ffffc90000f87c60 R08: ffff888115126083 R09: 1ffff11022a24c10 [ 33.379417][ T445] R10: dffffc0000000000 R11: ffffed1022a24c11 R12: dffffc0000000000 [ 33.383989][ T425] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.397003][ T445] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888115072000 [ 33.405592][ T520] ------------[ cut here ]------------ [ 33.408579][ T445] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.411144][ T520] WARNING: CPU: 1 PID: 520 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.423311][ T503] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.440542][ T468] RSP: 0018:ffffc90000fefc40 EFLAGS: 00010293 [ 33.452933][ T445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.466508][ T468] RAX: ffffffff842ef547 RBX: ffff8881120d9000 RCX: ffff8881156bcf00 [ 33.485374][ T468] RDX: 0000000000000000 RSI: 00000000150aef00 RDI: 000000000c04eb7d [ 33.499740][ T503] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 33.502889][ T418] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 33.524003][ T445] CR2: 00007fd9b89831f0 CR3: 000000012bfc6000 CR4: 00000000003506b0 [ 33.536659][ T425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.543899][ T425] CR2: 00007f5d8cf08270 CR3: 000000010af08000 CR4: 00000000003506a0 [ 33.561014][ T468] RBP: ffffc90000fefc60 R08: ffff8881120d9083 R09: 1ffff1102241b210 [ 33.569580][ T425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.578370][ T520] Modules linked in: [ 33.584451][ T520] CPU: 1 PID: 520 Comm: syz.4.53 Tainted: G B W syzkaller #0 [ 33.587947][ T503] RSP: 0018:ffffc9000105fc40 EFLAGS: 00010293 [ 33.600374][ T425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.623798][ T418] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.626587][ T468] R10: dffffc0000000000 R11: ffffed102241b211 R12: dffffc0000000000 [ 33.654819][ T503] RAX: ffffffff842ef547 RBX: ffff888115ee1800 RCX: ffff888115f8cf00 [ 33.660727][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.664190][ T503] RDX: 0000000000000000 RSI: 00000000156a3ba0 RDI: 000000000c04eb7d [ 33.680030][ T425] Call Trace: [ 33.689069][ T445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.697951][ T468] R13: dffffc0000000000 R14: 00000000150aef00 R15: ffff8881154c4800 [ 33.708726][ T418] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 33.718981][ T425] pppol2tp_release+0x150/0x2b0 [ 33.724168][ T425] sock_close+0xb8/0x200 [ 33.724845][ T503] RBP: ffffc9000105fc60 R08: ffff888115ee1883 R09: 1ffff11022bdc310 [ 33.741028][ T445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.744752][ T520] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.756744][ T468] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.764274][ T561] ------------[ cut here ]------------ [ 33.781451][ T503] R10: dffffc0000000000 R11: ffffed1022bdc311 R12: dffffc0000000000 [ 33.782229][ T576] ------------[ cut here ]------------ [ 33.793315][ T445] Call Trace: [ 33.807218][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.810376][ T425] ? sock_mmap+0xa0/0xa0 [ 33.818874][ T503] R13: dffffc0000000000 R14: 00000000156a3ba0 R15: ffff888115e3f400 [ 33.818884][ T503] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.818893][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.818900][ T503] CR2: 00007f564c499060 CR3: 0000000129680000 CR4: 00000000003506b0 [ 33.818911][ T503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.818918][ T503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.818922][ T503] Call Trace: [ 33.818939][ T503] pppol2tp_release+0x150/0x2b0 [ 33.818951][ T503] sock_close+0xb8/0x200 [ 33.818962][ T503] ? sock_mmap+0xa0/0xa0 [ 33.818972][ T503] __fput+0x2dc/0x730 [ 33.819009][ T503] ____fput+0x15/0x20 [ 33.838164][ T418] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.838172][ T418] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 33.838179][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.838187][ T418] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 33.838196][ T418] ---[ end trace c6752b0a6da84b5c ]--- [ 33.848629][ T520] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 33.936732][ T425] __fput+0x2dc/0x730 [ 33.942023][ T445] pppol2tp_release+0x150/0x2b0 [ 33.973848][ T576] WARNING: CPU: 0 PID: 576 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.986118][ T561] WARNING: CPU: 0 PID: 561 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.996788][ T468] CR2: 00007f5d8cd49ff8 CR3: 000000010af08000 CR4: 00000000003506b0 [ 34.008487][ T468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.018994][ T503] task_work_run+0x127/0x190 [ 34.023824][ T503] do_exit+0xa7c/0x24e0 [ 34.028384][ T468] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.036722][ T445] sock_close+0xb8/0x200 [ 34.041554][ T445] ? sock_mmap+0xa0/0xa0 [ 34.046845][ T561] Modules linked in: [ 34.046919][ T468] Call Trace: [ 34.054420][ T468] pppol2tp_release+0x150/0x2b0 [ 34.059945][ T503] ? __kasan_check_write+0x14/0x20 [ 34.067003][ T606] ------------[ cut here ]------------ [ 34.073621][ T561] CPU: 0 PID: 561 Comm: syz.2.63 Tainted: G B W syzkaller #0 [ 34.075562][ T445] __fput+0x2dc/0x730 [ 34.086661][ T425] ____fput+0x15/0x20 [ 34.092638][ T606] WARNING: CPU: 0 PID: 606 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.100327][ T503] ? switch_fpu_return+0x19c/0x330 [ 34.103933][ T576] Modules linked in: [ 34.109431][ T468] sock_close+0xb8/0x200 [ 34.118011][ T520] RSP: 0018:ffffc9000108fc40 EFLAGS: 00010293 [ 34.125656][ T445] ____fput+0x15/0x20 [ 34.129859][ T445] task_work_run+0x127/0x190 [ 34.133305][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.146255][ T425] task_work_run+0x127/0x190 [ 34.150885][ T425] do_exit+0xa7c/0x24e0 [ 34.155964][ T576] [ 34.161549][ T520] RAX: ffffffff842ef547 RBX: ffff888115ff6000 RCX: ffff888116a2e2c0 [ 34.181587][ T561] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.187822][ T503] ? put_task_struct+0x90/0x90 [ 34.193080][ T503] ? fpu__clear_all+0x20/0x20 [ 34.198321][ T468] ? sock_mmap+0xa0/0xa0 [ 34.202823][ T468] __fput+0x2dc/0x730 [ 34.207782][ T445] do_exit+0xa7c/0x24e0 [ 34.219200][ T615] ------------[ cut here ]------------ [ 34.225069][ T520] RDX: 0000000000000000 RSI: 0000000016f9e000 RDI: 000000000c04eb7d [ 34.235808][ T503] ? __kasan_check_read+0x11/0x20 [ 34.240144][ T576] CPU: 0 PID: 576 Comm: syz.4.69 Tainted: G B W syzkaller #0 [ 34.240935][ T503] __x64_sys_exit+0x40/0x40 [ 34.250702][ T561] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 34.258600][ T445] ? __kasan_check_write+0x14/0x20 [ 34.279981][ T606] Modules linked in: [ 34.284043][ T468] ____fput+0x15/0x20 [ 34.284054][ T606] CPU: 0 PID: 606 Comm: syz.6.79 Tainted: G B W syzkaller #0 [ 34.284067][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.290255][ T425] ? __kasan_check_write+0x14/0x20 [ 34.312627][ T615] WARNING: CPU: 0 PID: 615 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.312631][ T615] Modules linked in: [ 34.312648][ T615] CPU: 0 PID: 615 Comm: syz.5.77 Tainted: G B W syzkaller #0 2026/08/13 19:29:21 executed programs: 85 [ 34.312670][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.332201][ T503] do_syscall_64+0x31/0x40 [ 34.348360][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.354699][ T520] RBP: ffffc9000108fc60 R08: ffff888115ff6083 R09: 1ffff11022bfec10 [ 34.373176][ T468] task_work_run+0x127/0x190 [ 34.380306][ T468] do_exit+0xa7c/0x24e0 [ 34.388967][ T633] ------------[ cut here ]------------ [ 34.394487][ T633] WARNING: CPU: 1 PID: 633 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.399174][ T561] RSP: 0018:ffffc90001187c40 EFLAGS: 00010293 [ 34.412496][ T445] ? switch_fpu_return+0x19c/0x330 [ 34.417834][ T468] ? __kasan_check_write+0x14/0x20 [ 34.423740][ T520] R10: dffffc0000000000 R11: ffffed1022bfec11 R12: dffffc0000000000 [ 34.432050][ T445] ? put_task_struct+0x90/0x90 [ 34.434953][ T503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.446086][ T445] ? fpu__clear_all+0x20/0x20 [ 34.451736][ T561] RAX: ffffffff842ef547 RBX: ffff8881170e5800 RCX: ffff8881171dcf00 [ 34.460957][ T637] ------------[ cut here ]------------ [ 34.468297][ T576] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.473822][ T468] ? switch_fpu_return+0x19c/0x330 [ 34.474684][ T576] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 34.484891][ T633] Modules linked in: [ 34.501617][ T615] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.503888][ T520] R13: dffffc0000000000 R14: 0000000016f9e000 R15: ffff888115b59800 [ 34.520446][ T425] ? switch_fpu_return+0x19c/0x330 [ 34.520458][ T445] ? __kasan_check_read+0x11/0x20 [ 34.520505][ T445] __x64_sys_exit+0x40/0x40 [ 34.527227][ T606] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.532127][ T615] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 34.536418][ T468] ? put_task_struct+0x90/0x90 [ 34.543414][ T561] RDX: 0000000000000000 RSI: 0000000017890780 RDI: 000000000c04eb7d [ 34.568099][ T503] RIP: 0033:0x7f564b6df0d9 [ 34.583914][ T425] ? put_task_struct+0x90/0x90 [ 34.590412][ T637] WARNING: CPU: 0 PID: 637 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.600857][ T606] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 34.612344][ T445] do_syscall_64+0x31/0x40 [ 34.625015][ T425] ? fpu__clear_all+0x20/0x20 [ 34.625030][ T425] ? __kasan_check_read+0x11/0x20 [ 34.625043][ T425] __x64_sys_exit+0x40/0x40 [ 34.625053][ T425] do_syscall_64+0x31/0x40 [ 34.625064][ T425] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.625073][ T425] RIP: 0033:0x7fd9b89c80d9 [ 34.625079][ T425] Code: Unable to access opcode bytes at RIP 0x7fd9b89c80af. [ 34.625086][ T425] RSP: 002b:00007fd9b8828ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.625101][ T425] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd9b89c80d9 [ 34.625108][ T425] RDX: 00007fd9b88299c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.625115][ T425] RBP: 00007fd9b8a5f024 R08: 0000000000000000 R09: 0000000000000058 [ 34.625122][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.625130][ T425] R13: 00007fd9b8c50038 R14: 00007fd9b8c4ffa0 R15: 00007ffcacdce908 [ 34.625139][ T425] ---[ end trace c6752b0a6da84b5d ]--- [ 34.632180][ T652] ------------[ cut here ]------------ [ 34.637681][ T615] RSP: 0018:ffffc900015c7c40 EFLAGS: 00010293 [ 34.659608][ T633] [ 34.663759][ T561] RBP: ffffc90001187c60 R08: ffff8881170e5883 R09: 1ffff11022e1cb10 [ 34.672673][ T656] ------------[ cut here ]------------ [ 34.679987][ T445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.689598][ T503] Code: Unable to access opcode bytes at RIP 0x7f564b6df0af. [ 34.738322][ T637] Modules linked in: [ 34.755677][ T520] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.760112][ T652] WARNING: CPU: 0 PID: 652 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.774968][ T520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.788290][ T576] RSP: 0018:ffffc900014c7c40 EFLAGS: 00010293 [ 34.788305][ T576] RAX: ffffffff842ef547 RBX: ffff888117616000 RCX: ffff88811786e2c0 [ 34.788335][ T576] RDX: 0000000000000000 RSI: 0000000014e75f20 RDI: 000000000c04eb7d [ 34.810912][ T112] device bridge_slave_1 left promiscuous mode [ 34.817223][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.827054][ T112] device bridge_slave_0 left promiscuous mode [ 34.833211][ T606] RSP: 0018:ffffc9000163fc40 EFLAGS: 00010293 [ 34.833532][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.839923][ T561] R10: dffffc0000000000 R11: ffffed1022e1cb11 R12: dffffc0000000000 [ 34.851911][ T656] WARNING: CPU: 1 PID: 656 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.861881][ T606] RAX: ffffffff842ef547 RBX: ffff888112e29000 RCX: ffff888117d72780 [ 34.872710][ T503] RSP: 002b:00007f564b53fef8 EFLAGS: 00000246 [ 34.876309][ T112] device veth1_macvtap left promiscuous mode [ 34.878805][ T637] [ 34.882655][ T112] device veth0_vlan left promiscuous mode [ 34.892198][ T561] R13: dffffc0000000000 R14: 0000000017890780 R15: ffff888116a57000 [ 34.905520][ T503] ORIG_RAX: 000000000000003c [ 34.905530][ T503] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f564b6df0d9 [ 34.905538][ T503] RDX: 00007f564b5409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.905545][ T503] RBP: 00007f564b776024 R08: 0000000000000000 R09: 0000000000000058 [ 34.905552][ T503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.905560][ T503] R13: 00007f564b967038 R14: 00007f564b966fa0 R15: 00007ffc2e26a978 [ 34.905570][ T503] ---[ end trace c6752b0a6da84b5e ]--- [ 34.912789][ T656] Modules linked in: [ 34.945549][ T445] RIP: 0033:0x7f5d8cee90d9 [ 34.952936][ T520] CR2: 00007f27ccef08e0 CR3: 0000000115c76000 CR4: 00000000003506a0 [ 34.974920][ T520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.983378][ T633] CPU: 0 PID: 633 Comm: syz.3.86 Tainted: G B W syzkaller #0 [ 34.993557][ T445] Code: Unable to access opcode bytes at RIP 0x7f5d8cee90af. [ 35.001612][ T615] [ 35.004016][ T615] RAX: ffffffff842ef547 RBX: ffff888112e2d800 RCX: ffff8881187ea780 [ 35.014919][ T468] ? fpu__clear_all+0x20/0x20 [ 35.022315][ T576] RBP: ffffc900014c7c60 R08: ffff888117616083 R09: 1ffff11022ec2c10 [ 35.034916][ T468] ? __kasan_check_read+0x11/0x20 [ 35.040229][ T520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.045413][ T606] RDX: 0000000000000000 RSI: 0000000017ef4a00 RDI: 000000000c04eb7d [ 35.061242][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.075306][ T679] ------------[ cut here ]------------ [ 35.083113][ T637] CPU: 0 PID: 637 Comm: syz.5.91 Tainted: G B W syzkaller #0 [ 35.110782][ T445] RSP: 002b:00007f5d8cd49ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.111519][ T679] WARNING: CPU: 1 PID: 679 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.129306][ T576] R10: dffffc0000000000 R11: ffffed1022ec2c11 R12: dffffc0000000000 [ 35.131098][ T520] Call Trace: [ 35.140284][ T615] RDX: 0000000000000000 RSI: 0000000017d01e00 RDI: 000000000c04eb7d [ 35.160760][ T561] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.170582][ T684] ------------[ cut here ]------------ [ 35.176259][ T656] [ 35.178630][ T656] CPU: 1 PID: 656 Comm: syz.4.95 Tainted: G B W syzkaller #0 [ 35.187391][ T606] RBP: ffffc9000163fc60 R08: ffff888112e29083 R09: 1ffff110225c5210 [ 35.187401][ T606] R10: dffffc0000000000 R11: ffffed10225c5211 R12: dffffc0000000000 [ 35.187410][ T606] R13: dffffc0000000000 R14: 0000000017ef4a00 R15: ffff8881175fe400 [ 35.187422][ T606] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.187431][ T606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.187440][ T606] CR2: 000055558207e908 CR3: 000000012bfc6000 CR4: 00000000003506b0 [ 35.187452][ T606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.187461][ T606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.187464][ T606] Call Trace: [ 35.187483][ T606] pppol2tp_release+0x150/0x2b0 [ 35.187496][ T606] sock_close+0xb8/0x200 [ 35.187536][ T606] ? sock_mmap+0xa0/0xa0 [ 35.197742][ T683] ------------[ cut here ]------------ [ 35.228943][ T561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.237872][ T652] Modules linked in: [ 35.251608][ T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.255166][ T679] Modules linked in: [ 35.258947][ T445] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5d8cee90d9 [ 35.261637][ T520] pppol2tp_release+0x150/0x2b0 [ 35.272004][ T615] RBP: ffffc900015c7c60 R08: ffff888112e2d883 R09: 1ffff110225c5b10 [ 35.276042][ T679] [ 35.282913][ T576] R13: dffffc0000000000 R14: 0000000014e75f20 R15: ffff888117124c00 [ 35.289439][ T652] [ 35.297436][ T445] RDX: 00007f5d8cd4a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.304099][ T697] ------------[ cut here ]------------ [ 35.309881][ T633] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.315195][ T520] sock_close+0xb8/0x200 [ 35.324222][ T637] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.336370][ T696] ------------[ cut here ]------------ [ 35.344155][ T468] __x64_sys_exit+0x40/0x40 [ 35.348151][ T652] CPU: 1 PID: 652 Comm: syz.3.94 Tainted: G B W syzkaller #0 [ 35.354907][ T684] WARNING: CPU: 0 PID: 684 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.361148][ T656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.368809][ T468] do_syscall_64+0x31/0x40 [ 35.374280][ T679] CPU: 1 PID: 679 Comm: syz.2.101 Tainted: G B W syzkaller #0 [ 35.378607][ T615] R10: dffffc0000000000 R11: ffffed10225c5b11 R12: dffffc0000000000 [ 35.395266][ T697] WARNING: CPU: 1 PID: 697 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.406727][ T445] RBP: 00007f5d8cf80024 R08: 0000000000000000 R09: 0000000000000058 [ 35.411890][ T561] CR2: 00007fdcfa568dac CR3: 0000000119ed0000 CR4: 00000000003506b0 [ 35.420766][ T576] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.427817][ T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.438998][ T468] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.446765][ T656] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.455008][ T633] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 35.471606][ T696] WARNING: CPU: 1 PID: 696 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.475242][ T637] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 35.479767][ T697] Modules linked in: [ 35.487226][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.506229][ T679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.518841][ T468] RIP: 0033:0x7fdcfa2df0d9 [ 35.574737][ T637] RSP: 0018:ffffc90001767c40 EFLAGS: 00010293 [ 35.580977][ T637] RAX: ffffffff842ef547 RBX: ffff888117ca9800 RCX: ffff888118a8cf00 [ 35.589314][ T652] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.589480][ T684] Modules linked in: [ 35.595867][ T520] ? sock_mmap+0xa0/0xa0 [ 35.604269][ T520] __fput+0x2dc/0x730 [ 35.604944][ T633] RSP: 0018:ffffc90001377c40 EFLAGS: 00010293 [ 35.614746][ T652] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 35.630102][ T633] RAX: ffffffff842ef547 RBX: ffff888117ca8800 RCX: ffff8881179d2780 [ 35.644438][ T576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.653617][ T615] R13: dffffc0000000000 R14: 0000000017d01e00 R15: ffff88811570f000 [ 35.661828][ T633] RDX: 0000000000000000 RSI: 00000000137424e0 RDI: 000000000c04eb7d [ 35.670155][ T615] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.675315][ T679] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.681138][ T637] RDX: 0000000000000000 RSI: 000000001932a200 RDI: 000000000c04eb7d [ 35.686870][ T606] __fput+0x2dc/0x730 [ 35.695025][ T576] CR2: 00007f5d8cea41f0 CR3: 000000010d508000 CR4: 00000000003506b0 [ 35.705656][ T656] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 35.707154][ T615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.732981][ T633] RBP: ffffc90001377c60 R08: ffff888117ca8883 R09: 1ffff11022f95110 [ 35.735435][ T679] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 35.742504][ T637] RBP: ffffc90001767c60 R08: ffff888117ca9883 R09: 1ffff11022f95310 [ 35.771947][ T683] WARNING: CPU: 0 PID: 683 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.782862][ T520] ____fput+0x15/0x20 [ 35.782876][ T520] task_work_run+0x127/0x190 [ 35.782891][ T520] do_exit+0xa7c/0x24e0 [ 35.787672][ T576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.798023][ T520] ? __kasan_check_write+0x14/0x20 [ 35.804818][ T633] R10: dffffc0000000000 R11: ffffed1022f95111 R12: dffffc0000000000 [ 35.810180][ T684] [ 35.817844][ T615] CR2: 00007f5d8cea41f0 CR3: 000000010d508000 CR4: 00000000003506b0 [ 35.817855][ T615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.817862][ T615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.817874][ T615] Call Trace: [ 35.820615][ T606] ____fput+0x15/0x20 [ 35.830189][ T683] Modules linked in: [ 35.836350][ T684] CPU: 1 PID: 684 Comm: syz.3.102 Tainted: G B W syzkaller #0 [ 35.845666][ T615] pppol2tp_release+0x150/0x2b0 [ 35.851792][ T697] [ 35.852785][ T637] R10: dffffc0000000000 R11: ffffed1022f95311 R12: dffffc0000000000 [ 35.857306][ T697] CPU: 1 PID: 697 Comm: syz.4.104 Tainted: G B W syzkaller #0 [ 35.868313][ T576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.881156][ T652] RSP: 0018:ffffc900012afc40 EFLAGS: 00010293 [ 35.881172][ T652] RAX: ffffffff842ef547 RBX: ffff888117448800 RCX: ffff888118a8e2c0 [ 35.891083][ T615] sock_close+0xb8/0x200 [ 35.898841][ T520] ? switch_fpu_return+0x19c/0x330 [ 35.904850][ T683] [ 35.914849][ T445] R13: 00007f5d8d171038 R14: 00007f5d8d170fa0 R15: 00007ffe84881478 [ 35.918105][ T637] R13: dffffc0000000000 R14: 000000001932a200 R15: ffff888118bea000 [ 35.924518][ T445] ---[ end trace c6752b0a6da84b5f ]--- [ 35.933078][ T633] R13: dffffc0000000000 R14: 00000000137424e0 R15: ffff888118beb400 [ 35.946717][ T656] RSP: 0018:ffffc900014e7c40 EFLAGS: 00010293 [ 35.955456][ T615] ? sock_mmap+0xa0/0xa0 [ 35.961161][ T684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.966718][ T615] __fput+0x2dc/0x730 [ 35.975791][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.989980][ T606] task_work_run+0x127/0x190 [ 36.004739][ T637] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.014335][ T637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.014376][ T656] RAX: ffffffff842ef547 RBX: ffff88811937b000 RCX: ffff88811947e2c0 [ 36.022844][ T561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.029089][ T606] do_exit+0xa7c/0x24e0 [ 36.029150][ T606] ? __kasan_check_write+0x14/0x20 [ 36.047954][ T520] ? put_task_struct+0x90/0x90 [ 36.049951][ T683] CPU: 0 PID: 683 Comm: syz.6.100 Tainted: G B W syzkaller #0 [ 36.062292][ T520] ? fpu__clear_all+0x20/0x20 [ 36.062307][ T520] ? __kasan_check_read+0x11/0x20 [ 36.062319][ T520] __x64_sys_exit+0x40/0x40 [ 36.062331][ T520] do_syscall_64+0x31/0x40 [ 36.062342][ T520] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.062351][ T520] RIP: 0033:0x7f27ccf300d9 [ 36.062357][ T520] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 36.062364][ T520] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.062385][ T520] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 36.062392][ T520] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.062399][ T520] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 36.062405][ T520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.062413][ T520] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 36.062422][ T520] ---[ end trace c6752b0a6da84b60 ]--- [ 36.062583][ T684] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.062594][ T684] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 36.062601][ T684] RSP: 0018:ffffc9000105fc40 EFLAGS: 00010293 [ 36.062613][ T684] RAX: ffffffff842ef547 RBX: ffff888119aa4800 RCX: ffff888119a18000 [ 36.062620][ T684] RDX: 0000000000000000 RSI: 0000000019a0b200 RDI: 000000000c04eb7d [ 36.062652][ T684] RBP: ffffc9000105fc60 R08: ffff888119aa4883 R09: 1ffff11023354910 [ 36.071083][ T615] ____fput+0x15/0x20 [ 36.075421][ T696] Modules linked in: [ 36.078179][ T615] task_work_run+0x127/0x190 [ 36.081893][ T697] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.088565][ T637] CR2: 00007ffe8487fff8 CR3: 000000010d508000 CR4: 00000000003506b0 [ 36.092809][ T652] RDX: 0000000000000000 RSI: 00000000163a1330 RDI: 000000000c04eb7d [ 36.100188][ T561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.108629][ T679] RSP: 0018:ffffc9000186fc40 EFLAGS: 00010293 [ 36.116798][ T683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.126875][ T606] ? switch_fpu_return+0x19c/0x330 [ 36.135718][ T615] do_exit+0xa7c/0x24e0 [ 36.142702][ T656] RDX: 0000000000000000 RSI: 0000000018bd7200 RDI: 000000000c04eb7d [ 36.183092][ T576] Call Trace: [ 36.183117][ T576] pppol2tp_release+0x150/0x2b0 [ 36.183163][ T576] sock_close+0xb8/0x200 [ 36.190583][ T696] [ 36.206535][ T637] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.206544][ T637] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.206549][ T637] Call Trace: [ 36.206570][ T637] pppol2tp_release+0x150/0x2b0 [ 36.206583][ T637] sock_close+0xb8/0x200 [ 36.206593][ T637] ? sock_mmap+0xa0/0xa0 [ 36.206606][ T637] __fput+0x2dc/0x730 [ 36.206618][ T637] ____fput+0x15/0x20 [ 36.206630][ T637] task_work_run+0x127/0x190 [ 36.206644][ T637] do_exit+0xa7c/0x24e0 [ 36.206678][ T637] ? __kasan_check_write+0x14/0x20 [ 36.206692][ T637] ? switch_fpu_return+0x19c/0x330 [ 36.206735][ T637] ? put_task_struct+0x90/0x90 [ 36.215312][ T684] R10: dffffc0000000000 R11: ffffed1023354911 R12: dffffc0000000000 [ 36.225754][ T633] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.228226][ T606] ? put_task_struct+0x90/0x90 [ 36.234332][ T633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.242479][ T652] RBP: ffffc900012afc60 R08: ffff888117448883 R09: 1ffff11022e89110 [ 36.242487][ T652] R10: dffffc0000000000 R11: ffffed1022e89111 R12: dffffc0000000000 [ 36.242495][ T652] R13: dffffc0000000000 R14: 00000000163a1330 R15: ffff888119141400 [ 36.242505][ T652] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.242512][ T652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.242520][ T652] CR2: 00007ffd22001cf0 CR3: 000000000640f000 CR4: 00000000003506a0 [ 36.242531][ T652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.242537][ T652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.242548][ T652] Call Trace: [ 36.259994][ T615] ? __kasan_check_write+0x14/0x20 [ 36.265877][ T679] [ 36.285880][ T637] ? fpu__clear_all+0x20/0x20 [ 36.285896][ T637] ? __kasan_check_read+0x11/0x20 [ 36.285910][ T637] __x64_sys_exit+0x40/0x40 [ 36.285922][ T637] do_syscall_64+0x31/0x40 [ 36.285935][ T637] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.285944][ T637] RIP: 0033:0x7fd9b89c80d9 [ 36.285950][ T637] Code: Unable to access opcode bytes at RIP 0x7fd9b89c80af. [ 36.285957][ T637] RSP: 002b:00007fd9b8828ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.285971][ T637] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd9b89c80d9 [ 36.285978][ T637] RDX: 00007fd9b88299c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.285985][ T637] RBP: 00007fd9b8a5f024 R08: 0000000000000000 R09: 0000000000000058 [ 36.285992][ T637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.286000][ T637] R13: 00007fd9b8c50038 R14: 00007fd9b8c4ffa0 R15: 00007ffcacdce908 [ 36.286010][ T637] ---[ end trace c6752b0a6da84b61 ]--- [ 36.286176][ T615] ? switch_fpu_return+0x19c/0x330 [ 36.286187][ T615] ? put_task_struct+0x90/0x90 [ 36.286198][ T615] ? fpu__clear_all+0x20/0x20 [ 36.286211][ T615] ? __kasan_check_read+0x11/0x20 [ 36.286223][ T615] __x64_sys_exit+0x40/0x40 [ 36.286234][ T615] do_syscall_64+0x31/0x40 [ 36.286245][ T615] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.286254][ T615] RIP: 0033:0x7fd9b89c80d9 [ 36.286260][ T615] Code: Unable to access opcode bytes at RIP 0x7fd9b89c80af. [ 36.286274][ T615] RSP: 002b:00007fd9b8828ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.286287][ T615] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd9b89c80d9 [ 36.286294][ T615] RDX: 00007fd9b88299c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.286302][ T615] RBP: 00007fd9b8a5f024 R08: 0000000000000000 R09: 0000000000000058 [ 36.286309][ T615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.286317][ T615] R13: 00007fd9b8c50038 R14: 00007fd9b8c4ffa0 R15: 00007ffcacdce908 [ 36.286325][ T615] ---[ end trace c6752b0a6da84b62 ]--- [ 36.286598][ T468] Code: Unable to access opcode bytes at RIP 0x7fdcfa2df0af. [ 36.295661][ T683] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.305154][ T468] RSP: 002b:00007fdcfa13fef8 EFLAGS: 00000246 [ 36.307725][ T606] ? fpu__clear_all+0x20/0x20 [ 36.317778][ T468] ORIG_RAX: 000000000000003c [ 36.325962][ T697] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 36.325971][ T697] RSP: 0018:ffffc9000193fc40 EFLAGS: 00010293 [ 36.325984][ T697] RAX: ffffffff842ef547 RBX: ffff888119bd7000 RCX: ffff888110f1a780 [ 36.325992][ T697] RDX: 0000000000000000 RSI: 0000000013f9e500 RDI: 000000000c04eb7d [ 36.326000][ T697] RBP: ffffc9000193fc60 R08: ffff888119bd7083 R09: 1ffff1102337ae10 [ 36.326007][ T697] R10: dffffc0000000000 R11: ffffed102337ae11 R12: dffffc0000000000 [ 36.326015][ T697] R13: dffffc0000000000 R14: 0000000013f9e500 R15: ffff888119c1b400 [ 36.326025][ T697] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.326032][ T697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.326061][ T697] CR2: 00007ffd22001cf0 CR3: 000000000640f000 CR4: 00000000003506a0 [ 36.347104][ T656] RBP: ffffc900014e7c60 R08: ffff88811937b083 R09: 1ffff1102326f610 [ 36.347137][ T656] R10: dffffc0000000000 R11: ffffed102326f611 R12: dffffc0000000000 [ 36.351119][ T561] Call Trace: [ 36.365128][ T468] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdcfa2df0d9 [ 36.365137][ T468] RDX: 00007fdcfa1409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.365143][ T468] RBP: 00007fdcfa376024 R08: 0000000000000000 R09: 0000000000000058 [ 36.365150][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.365157][ T468] R13: 00007fdcfa567038 R14: 00007fdcfa566fa0 R15: 00007ffd220030d8 [ 36.365167][ T468] ---[ end trace c6752b0a6da84b63 ]--- [ 36.365364][ T696] CPU: 0 PID: 696 Comm: syz.2.107 Tainted: G B W syzkaller #0 [ 36.365370][ T696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.365390][ T696] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.365402][ T696] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 36.365410][ T696] RSP: 0018:ffffc9000196fc40 EFLAGS: 00010293 [ 36.365423][ T696] RAX: ffffffff842ef547 RBX: ffff88811a0c5800 RCX: ffff888119ddbb40 [ 36.365430][ T696] RDX: 0000000000000000 RSI: 000000001922e320 RDI: 000000000c04eb7d [ 36.365438][ T696] RBP: ffffc9000196fc60 R08: ffff88811a0c5883 R09: 1ffff11023418b10 [ 36.365445][ T696] R10: dffffc0000000000 R11: ffffed1023418b11 R12: dffffc0000000000 [ 36.365454][ T696] R13: dffffc0000000000 R14: 000000001922e320 R15: ffff888119f94c00 [ 36.365464][ T696] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.365472][ T696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.365479][ T696] CR2: 00007ffe8487fff8 CR3: 0000000129680000 CR4: 00000000003506b0 [ 36.365490][ T696] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.365526][ T696] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.371901][ T684] R13: dffffc0000000000 R14: 0000000019a0b200 R15: ffff888119c8f800 [ 36.380203][ T633] CR2: 00007ffe8487fff8 CR3: 000000010d573000 CR4: 00000000003506b0 [ 36.383928][ T683] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 36.393822][ T656] R13: dffffc0000000000 R14: 0000000018bd7200 R15: ffff8881196e9000 [ 36.397668][ T606] ? __kasan_check_read+0x11/0x20 [ 36.404701][ T696] Call Trace: [ 36.412639][ T697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.421169][ T576] ? sock_mmap+0xa0/0xa0 [ 36.428539][ T561] pppol2tp_release+0x150/0x2b0 [ 36.428550][ T561] sock_close+0xb8/0x200 [ 36.428561][ T561] ? sock_mmap+0xa0/0xa0 [ 36.428573][ T561] __fput+0x2dc/0x730 [ 36.428585][ T561] ____fput+0x15/0x20 [ 36.428597][ T561] task_work_run+0x127/0x190 [ 36.428612][ T561] do_exit+0xa7c/0x24e0 [ 36.428662][ T561] ? __kasan_check_write+0x14/0x20 [ 36.452292][ T633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.452300][ T633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.452304][ T633] Call Trace: [ 36.452324][ T633] pppol2tp_release+0x150/0x2b0 [ 36.452385][ T633] sock_close+0xb8/0x200 [ 36.452394][ T633] ? sock_mmap+0xa0/0xa0 [ 36.452407][ T633] __fput+0x2dc/0x730 [ 36.452762][ T633] ____fput+0x15/0x20 [ 36.461732][ T684] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.472029][ T656] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.472968][ T683] RSP: 0018:ffffc9000184fc40 EFLAGS: 00010293 [ 36.478208][ T656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.480102][ T683] [ 36.485454][ T652] pppol2tp_release+0x150/0x2b0 [ 36.489901][ T684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.494417][ T652] sock_close+0xb8/0x200 [ 36.499009][ T606] __x64_sys_exit+0x40/0x40 [ 36.505620][ T696] pppol2tp_release+0x150/0x2b0 [ 36.509307][ T697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.517302][ T656] CR2: 00007ffe8487fff8 CR3: 000000010d508000 CR4: 00000000003506b0 [ 36.526674][ T683] RAX: ffffffff842ef547 RBX: ffff8881187f5000 RCX: ffff888119a193c0 [ 36.535435][ T576] __fput+0x2dc/0x730 [ 36.542201][ T679] RAX: ffffffff842ef547 RBX: ffff888119aa5000 RCX: ffff888119a1a780 [ 36.573504][ T696] sock_close+0xb8/0x200 [ 36.577250][ T606] do_syscall_64+0x31/0x40 [ 36.590627][ T656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.591381][ T684] CR2: 00007ffd22001cf0 CR3: 000000010af08000 CR4: 00000000003506a0 [ 36.597299][ T696] ? sock_mmap+0xa0/0xa0 [ 36.600555][ T606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.607817][ T652] ? sock_mmap+0xa0/0xa0 [ 36.616729][ T683] RDX: 0000000000000000 RSI: 0000000014e4b700 RDI: 000000000c04eb7d [ 36.625628][ T656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.628299][ T633] task_work_run+0x127/0x190 [ 36.667420][ T576] ____fput+0x15/0x20 [ 36.674921][ T697] Call Trace: [ 36.705133][ T652] __fput+0x2dc/0x730 [ 36.723491][ T606] RIP: 0033:0x7f5d8cee90d9 [ 36.739361][ T561] ? switch_fpu_return+0x19c/0x330 [ 36.753105][ T679] RDX: 0000000000000000 RSI: 0000000013f9e8c0 RDI: 000000000c04eb7d [ 36.758254][ T711] ------------[ cut here ]------------ [ 36.762516][ T683] RBP: ffffc9000184fc60 R08: ffff8881187f5083 R09: 1ffff110230fea10 [ 36.776879][ T656] Call Trace: [ 36.781146][ T679] RBP: ffffc9000186fc60 R08: ffff888119aa5083 R09: 1ffff11023354a10 [ 36.795313][ T696] __fput+0x2dc/0x730 [ 36.805114][ T684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.891819][ T711] WARNING: CPU: 0 PID: 711 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.919046][ T576] task_work_run+0x127/0x190 [ 36.965851][ T683] R10: dffffc0000000000 R11: ffffed10230fea11 R12: dffffc0000000000 [ 36.975076][ T561] ? put_task_struct+0x90/0x90 [ 36.984339][ T697] pppol2tp_release+0x150/0x2b0 [ 37.014729][ T696] ____fput+0x15/0x20 [ 37.024963][ T711] Modules linked in: [ 37.041642][ T679] R10: dffffc0000000000 R11: ffffed1023354a11 R12: dffffc0000000000 [ 37.058247][ T633] do_exit+0xa7c/0x24e0 [ 37.075064][ T696] task_work_run+0x127/0x190 [ 37.080170][ T606] Code: Unable to access opcode bytes at RIP 0x7f5d8cee90af. [ 37.095040][ T561] ? fpu__clear_all+0x20/0x20 [ 37.115045][ T679] R13: dffffc0000000000 R14: 0000000013f9e8c0 R15: ffff88811277f000 [ 37.151865][ T711] [ 37.182256][ T683] R13: dffffc0000000000 R14: 0000000014e4b700 R15: ffff888117d0ec00 [ 37.189722][ T652] ____fput+0x15/0x20 [ 37.195527][ T606] RSP: 002b:00007f5d8cd49ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.195544][ T606] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5d8cee90d9 [ 37.195570][ T606] RDX: 00007f5d8cd4a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.201287][ T656] pppol2tp_release+0x150/0x2b0 [ 37.216997][ T633] ? __kasan_check_write+0x14/0x20 [ 37.226225][ T652] task_work_run+0x127/0x190 [ 37.234480][ T683] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.237868][ T696] do_exit+0xa7c/0x24e0 [ 37.246573][ T683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.246581][ T683] CR2: 00007f564b51eff8 CR3: 000000000640f000 CR4: 00000000003506b0 [ 37.246592][ T683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.246599][ T683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.246603][ T683] Call Trace: [ 37.246621][ T683] pppol2tp_release+0x150/0x2b0 [ 37.246636][ T683] sock_close+0xb8/0x200 [ 37.280821][ T656] sock_close+0xb8/0x200 [ 37.298252][ T730] ------------[ cut here ]------------ [ 37.303162][ T652] do_exit+0xa7c/0x24e0 [ 37.303336][ T730] WARNING: CPU: 0 PID: 730 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.325936][ T652] ? __kasan_check_write+0x14/0x20 [ 37.335715][ T633] ? switch_fpu_return+0x19c/0x330 [ 37.350511][ T679] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.359263][ T633] ? put_task_struct+0x90/0x90 [ 37.378985][ T697] sock_close+0xb8/0x200 [ 37.381656][ T606] RBP: 00007f5d8cf80024 R08: 0000000000000000 R09: 0000000000000058 [ 37.402213][ T696] ? __kasan_check_write+0x14/0x20 [ 37.406886][ T561] ? __kasan_check_read+0x11/0x20 [ 37.406903][ T561] __x64_sys_exit+0x40/0x40 [ 37.406916][ T561] do_syscall_64+0x31/0x40 [ 37.406929][ T561] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.406939][ T561] RIP: 0033:0x7fdcfa2df0d9 [ 37.406946][ T561] Code: Unable to access opcode bytes at RIP 0x7fdcfa2df0af. [ 37.406974][ T561] RSP: 002b:00007fdcfa13fef8 EFLAGS: 00000246 [ 37.439858][ T730] Modules linked in: [ 37.454990][ T633] ? fpu__clear_all+0x20/0x20 [ 37.465783][ T696] ? switch_fpu_return+0x19c/0x330 [ 37.542722][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.566968][ T683] ? sock_mmap+0xa0/0xa0 [ 37.573549][ T633] ? __kasan_check_read+0x11/0x20 [ 37.585245][ T684] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.593267][ T652] ? switch_fpu_return+0x19c/0x330 [ 37.600649][ T656] ? sock_mmap+0xa0/0xa0 [ 37.608960][ T697] ? sock_mmap+0xa0/0xa0 [ 37.613460][ T747] ------------[ cut here ]------------ [ 37.624630][ T606] R13: 00007f5d8d171038 R14: 00007f5d8d170fa0 R15: 00007ffe84881478 [ 37.628001][ T576] do_exit+0xa7c/0x24e0 [ 37.644934][ T606] ---[ end trace c6752b0a6da84b64 ]--- [ 37.648667][ T683] __fput+0x2dc/0x730 [ 37.654660][ T711] CPU: 0 PID: 711 Comm: syz.5.111 Tainted: G B W syzkaller #0 [ 37.674962][ T684] Call Trace: [ 37.707306][ T633] __x64_sys_exit+0x40/0x40 [ 37.719796][ T683] ____fput+0x15/0x20 [ 37.731872][ T697] __fput+0x2dc/0x730 [ 37.734760][ T747] WARNING: CPU: 1 PID: 747 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.748362][ T652] ? put_task_struct+0x90/0x90 [ 37.762994][ T656] __fput+0x2dc/0x730 [ 37.783587][ T748] ------------[ cut here ]------------ [ 37.792423][ T679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.804599][ T683] task_work_run+0x127/0x190 [ 37.814619][ T683] do_exit+0xa7c/0x24e0 [ 37.816296][ T697] ____fput+0x15/0x20 [ 37.835807][ T683] ? __kasan_check_write+0x14/0x20 [ 37.848341][ T561] ORIG_RAX: 000000000000003c [ 37.853173][ T561] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdcfa2df0d9 [ 37.859721][ T697] task_work_run+0x127/0x190 [ 37.866522][ T679] CR2: 0000001b33324000 CR3: 000000012c9fd000 CR4: 00000000003506a0 [ 37.874544][ T679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.882847][ T683] ? switch_fpu_return+0x19c/0x330 [ 37.884092][ T759] ------------[ cut here ]------------ [ 37.888984][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.905510][ T748] WARNING: CPU: 0 PID: 748 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.919825][ T576] ? __kasan_check_write+0x14/0x20 [ 37.929022][ T683] ? put_task_struct+0x90/0x90 [ 37.933880][ T683] ? fpu__clear_all+0x20/0x20 [ 37.938713][ T747] Modules linked in: [ 37.942672][ T747] CPU: 1 PID: 747 Comm: syz.5.121 Tainted: G B W syzkaller #0 [ 37.952366][ T633] do_syscall_64+0x31/0x40 [ 37.959044][ T576] ? switch_fpu_return+0x19c/0x330 [ 37.964558][ T764] ------------[ cut here ]------------ [ 37.970719][ T652] ? fpu__clear_all+0x20/0x20 [ 37.975851][ T679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.995400][ T759] WARNING: CPU: 0 PID: 759 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.996475][ T656] ____fput+0x15/0x20 [ 38.006106][ T748] Modules linked in: [ 38.013752][ T730] [ 38.016792][ T684] pppol2tp_release+0x150/0x2b0 [ 38.019290][ T561] RDX: 00007fdcfa1409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.021728][ T684] sock_close+0xb8/0x200 [ 38.034298][ T730] CPU: 0 PID: 730 Comm: syz.5.116 Tainted: G B W syzkaller #0 [ 38.048520][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.059738][ T697] do_exit+0xa7c/0x24e0 [ 38.060524][ T683] ? __kasan_check_read+0x11/0x20 [ 38.064146][ T697] ? __kasan_check_write+0x14/0x20 [ 38.074692][ T576] ? put_task_struct+0x90/0x90 [ 38.076517][ T679] Call Trace: [ 38.079588][ T576] ? fpu__clear_all+0x20/0x20 [ 38.082924][ T679] pppol2tp_release+0x150/0x2b0 [ 38.082938][ T679] sock_close+0xb8/0x200 [ 38.082996][ T679] ? sock_mmap+0xa0/0xa0 [ 38.095007][ T561] RBP: 00007fdcfa376024 R08: 0000000000000000 R09: 0000000000000058 [ 38.105470][ T633] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.111622][ T711] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.116381][ T748] CPU: 0 PID: 748 Comm: syz.6.120 Tainted: G B W syzkaller #0 [ 38.130913][ T683] __x64_sys_exit+0x40/0x40 [ 38.131787][ T652] ? __kasan_check_read+0x11/0x20 [ 38.156021][ T656] task_work_run+0x127/0x190 [ 38.166069][ T683] do_syscall_64+0x31/0x40 [ 38.171675][ T652] __x64_sys_exit+0x40/0x40 [ 38.176327][ T747] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.191062][ T764] WARNING: CPU: 0 PID: 764 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.196537][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.215290][ T656] do_exit+0xa7c/0x24e0 [ 38.219639][ T656] ? __kasan_check_write+0x14/0x20 [ 38.226665][ T759] Modules linked in: [ 38.230622][ T759] CPU: 0 PID: 759 Comm: syz.3.125 Tainted: G B W syzkaller #0 [ 38.232046][ T711] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 38.259783][ T633] RIP: 0033:0x7f564b6df0d9 [ 38.263171][ T683] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.264261][ T633] Code: Unable to access opcode bytes at RIP 0x7f564b6df0af. [ 38.276326][ T561] R13: 00007fdcfa567038 R14: 00007fdcfa566fa0 R15: 00007ffd220030d8 [ 38.282360][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.292728][ T796] ------------[ cut here ]------------ [ 38.301024][ T679] __fput+0x2dc/0x730 [ 38.308093][ T683] RIP: 0033:0x7f5d8cee90d9 [ 38.314182][ T683] Code: Unable to access opcode bytes at RIP 0x7f5d8cee90af. [ 38.320676][ T652] do_syscall_64+0x31/0x40 [ 38.326459][ T697] ? switch_fpu_return+0x19c/0x330 [ 38.333241][ T576] ? __kasan_check_read+0x11/0x20 [ 38.340030][ T747] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 38.341723][ T679] ____fput+0x15/0x20 [ 38.372813][ T576] __x64_sys_exit+0x40/0x40 [ 38.372827][ T684] ? sock_mmap+0xa0/0xa0 [ 38.372876][ T684] __fput+0x2dc/0x730 [ 38.382486][ T696] ? put_task_struct+0x90/0x90 [ 38.390839][ T764] Modules linked in: [ 38.391274][ T817] ------------[ cut here ]------------ [ 38.408286][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.420268][ T656] ? switch_fpu_return+0x19c/0x330 [ 38.425478][ T652] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.431764][ T652] RIP: 0033:0x7f564b6df0d9 [ 38.432935][ T683] RSP: 002b:00007f5d8cd49ef8 EFLAGS: 00000246 [ 38.436597][ T561] ---[ end trace c6752b0a6da84b65 ]--- [ 38.449561][ T697] ? put_task_struct+0x90/0x90 [ 38.451291][ T796] WARNING: CPU: 1 PID: 796 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.468573][ T683] ORIG_RAX: 000000000000003c [ 38.473295][ T683] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5d8cee90d9 [ 38.481677][ T730] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.487649][ T696] ? fpu__clear_all+0x20/0x20 [ 38.492909][ T747] RSP: 0018:ffffc90000fc7c40 EFLAGS: 00010293 [ 38.500580][ T576] do_syscall_64+0x31/0x40 [ 38.508523][ T817] WARNING: CPU: 1 PID: 817 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.509261][ T652] Code: Unable to access opcode bytes at RIP 0x7f564b6df0af. [ 38.518649][ T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.518671][ T759] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.518716][ T759] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 38.531266][ T697] ? fpu__clear_all+0x20/0x20 [ 38.548389][ T711] RSP: 0018:ffffc90000c47c40 EFLAGS: 00010293 [ 38.567996][ T764] CPU: 1 PID: 764 Comm: syz.4.124 Tainted: G B W syzkaller #0 [ 38.579218][ T730] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 38.584494][ T829] ------------[ cut here ]------------ [ 38.603976][ T679] task_work_run+0x127/0x190 [ 38.613360][ T817] Modules linked in: [ 38.617656][ T683] RDX: 00007f5d8cd4a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.619502][ T684] ____fput+0x15/0x20 [ 38.626463][ T576] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.631177][ T748] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.636391][ T817] CPU: 1 PID: 817 Comm: syz.6.141 Tainted: G B W syzkaller #0 [ 38.643184][ T679] do_exit+0xa7c/0x24e0 [ 38.655000][ T796] Modules linked in: [ 38.656960][ T633] RSP: 002b:00007f564b53fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.659665][ T796] CPU: 1 PID: 796 Comm: syz.4.137 Tainted: G B W syzkaller #0 [ 38.669333][ T748] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 38.680388][ T696] ? __kasan_check_read+0x11/0x20 [ 38.698049][ T684] task_work_run+0x127/0x190 [ 38.702563][ T747] RAX: ffffffff842ef547 RBX: ffff88811bd16000 RCX: ffff88811a7f13c0 [ 38.713358][ T652] RSP: 002b:00007f564b53fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.720162][ T747] RDX: 0000000000000000 RSI: 000000001ae4a560 RDI: 000000000c04eb7d [ 38.726174][ T730] RSP: 0018:ffffc9000190fc40 EFLAGS: 00010293 [ 38.733814][ T683] RBP: 00007f5d8cf80024 R08: 0000000000000000 R09: 0000000000000058 [ 38.740424][ T633] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f564b6df0d9 [ 38.756895][ T679] ? __kasan_check_write+0x14/0x20 [ 38.759669][ T696] __x64_sys_exit+0x40/0x40 [ 38.762247][ T679] ? switch_fpu_return+0x19c/0x330 [ 38.762292][ T679] ? put_task_struct+0x90/0x90 [ 38.767166][ T576] RIP: 0033:0x7f27ccf300d9 [ 38.773317][ T684] do_exit+0xa7c/0x24e0 [ 38.778780][ T759] RSP: 0018:ffffc9000102fc40 EFLAGS: 00010293 [ 38.782767][ T730] RAX: ffffffff842ef547 RBX: ffff888127073800 RCX: ffff88811a7c3b40 [ 38.795022][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.812070][ T829] WARNING: CPU: 1 PID: 829 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.822649][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.834481][ T652] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f564b6df0d9 [ 38.837842][ T711] [ 38.844101][ T748] RSP: 0018:ffffc90000f77c40 EFLAGS: 00010293 [ 38.846408][ T759] [ 38.853999][ T759] RAX: ffffffff842ef547 RBX: ffff88810eef9800 RCX: ffff88811ad32780 [ 38.854128][ T679] ? fpu__clear_all+0x20/0x20 [ 38.867489][ T576] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 38.874275][ T748] RAX: ffffffff842ef547 RBX: ffff88811bd14800 RCX: ffff88811a7f62c0 [ 38.879944][ T747] RBP: ffffc90000fc7c60 R08: ffff88811bd16083 R09: 1ffff110237a2c10 [ 38.883611][ T684] ? __kasan_check_write+0x14/0x20 [ 38.898252][ T696] do_syscall_64+0x31/0x40 [ 38.902855][ T696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.909552][ T683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.914450][ T633] RDX: 00007f564b5409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.918211][ T764] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.927052][ T748] RDX: 0000000000000000 RSI: 000000001a60bbd0 RDI: 000000000c04eb7d [ 38.933332][ T711] RAX: ffffffff842ef547 RBX: ffff88812706a000 RCX: ffff88811aa62780 [ 38.943197][ T860] ------------[ cut here ]------------ [ 38.953878][ T679] ? __kasan_check_read+0x11/0x20 [ 38.960580][ T829] Modules linked in: [ 38.962483][ T652] RDX: 00007f564b5409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.964658][ T829] CPU: 1 PID: 829 Comm: syz.2.139 Tainted: G B W syzkaller #0 [ 38.977902][ T679] __x64_sys_exit+0x40/0x40 [ 38.989290][ T683] R13: 00007f5d8d171038 R14: 00007f5d8d170fa0 R15: 00007ffe84881478 [ 38.997569][ T748] RBP: ffffc90000f77c60 R08: ffff88811bd14883 R09: 1ffff110237a2910 [ 38.998504][ T759] RDX: 0000000000000000 RSI: 000000001cce0600 RDI: 000000000c04eb7d [ 39.019855][ T730] RDX: 0000000000000000 RSI: 0000000013f9ef60 RDI: 000000000c04eb7d [ 39.025563][ T764] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 39.030733][ T862] ------------[ cut here ]------------ [ 39.059136][ T697] ? __kasan_check_read+0x11/0x20 [ 39.064249][ T697] __x64_sys_exit+0x40/0x40 [ 39.068930][ T817] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.078389][ T860] WARNING: CPU: 0 PID: 860 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.088875][ T679] do_syscall_64+0x31/0x40 [ 39.093382][ T683] ---[ end trace c6752b0a6da84b66 ]--- [ 39.093403][ T656] ? put_task_struct+0x90/0x90 [ 39.093458][ T656] ? fpu__clear_all+0x20/0x20 [ 39.111513][ T696] RIP: 0033:0x7fdcfa2df0d9 [ 39.119955][ T684] ? switch_fpu_return+0x19c/0x330 [ 39.125374][ T679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.138852][ T696] Code: Unable to access opcode bytes at RIP 0x7fdcfa2df0af. [ 39.146780][ T711] RDX: 0000000000000000 RSI: 000000001aa39e00 RDI: 000000000c04eb7d [ 39.148179][ T748] R10: dffffc0000000000 R11: ffffed10237a2911 R12: dffffc0000000000 [ 39.164827][ T747] R10: dffffc0000000000 R11: ffffed10237a2c11 R12: dffffc0000000000 [ 39.187759][ T696] RSP: 002b:00007fdcfa13fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 39.196622][ T747] R13: dffffc0000000000 R14: 000000001ae4a560 R15: ffff88811abbf800 [ 39.204642][ T747] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.213885][ T679] RIP: 0033:0x7fdcfa2df0d9 [ 39.218756][ T711] RBP: ffffc90000c47c60 R08: ffff88812706a083 R09: 1ffff11024e0d410 [ 39.227362][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.232044][ T684] ? put_task_struct+0x90/0x90 [ 39.242203][ T764] RSP: 0018:ffffc9000595fc40 EFLAGS: 00010293 [ 39.250471][ T697] do_syscall_64+0x31/0x40 [ 39.255161][ T817] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 39.268015][ T759] RBP: ffffc9000102fc60 R08: ffff88810eef9883 R09: 1ffff11021ddf310 [ 39.283274][ T576] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 39.290428][ T697] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.298168][ T877] ------------[ cut here ]------------ [ 39.308101][ T877] WARNING: CPU: 0 PID: 877 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.319237][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.323916][ T730] RBP: ffffc9000190fc60 R08: ffff888127073883 R09: 1ffff11024e0e710 [ 39.338371][ T862] WARNING: CPU: 0 PID: 862 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.345900][ T696] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdcfa2df0d9 [ 39.351104][ T656] ? __kasan_check_read+0x11/0x20 2026/08/13 19:29:26 executed programs: 166 [ 39.357476][ T889] ------------[ cut here ]------------ [ 39.362146][ T679] Code: Unable to access opcode bytes at RIP 0x7fdcfa2df0af. [ 39.370648][ T881] ------------[ cut here ]------------ [ 39.375399][ T684] ? fpu__clear_all+0x20/0x20 [ 39.384915][ T633] RBP: 00007f564b776024 R08: 0000000000000000 R09: 0000000000000058 [ 39.385900][ T656] __x64_sys_exit+0x40/0x40 [ 39.397777][ T829] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.400771][ T860] Modules linked in: [ 39.404135][ T829] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 39.404139][ T860] [ 39.404182][ T860] CPU: 0 PID: 860 Comm: syz.5.152 Tainted: G B W syzkaller #0 [ 39.434874][ T764] RAX: ffffffff842ef547 RBX: ffff88811bfa9800 RCX: ffff88811cc9bb40 [ 39.455031][ T748] R13: dffffc0000000000 R14: 000000001a60bbd0 R15: ffff88811abbf400 [ 39.455080][ T891] ------------[ cut here ]------------ [ 39.463149][ T748] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.463157][ T748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.463165][ T748] CR2: 00007f27cd1b9dac CR3: 0000000128ab0000 CR4: 00000000003506b0 [ 39.463175][ T748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.463205][ T748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.476080][ T881] WARNING: CPU: 1 PID: 881 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.494881][ T652] RBP: 00007f564b776024 R08: 0000000000000000 R09: 0000000000000058 [ 39.505410][ T877] Modules linked in: [ 39.520810][ T679] RSP: 002b:00007fdcfa13fef8 EFLAGS: 00000246 [ 39.528483][ T889] WARNING: CPU: 1 PID: 889 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.548242][ T684] ? __kasan_check_read+0x11/0x20 [ 39.548522][ T576] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 39.553386][ T684] __x64_sys_exit+0x40/0x40 [ 39.561724][ T697] RIP: 0033:0x7f27ccf300d9 [ 39.566459][ T679] ORIG_RAX: 000000000000003c [ 39.575556][ T817] RSP: 0018:ffffc900010bfc40 EFLAGS: 00010293 [ 39.583198][ T696] RDX: 00007fdcfa1409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.584214][ T656] do_syscall_64+0x31/0x40 [ 39.594327][ T862] Modules linked in: [ 39.596452][ T697] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 39.599349][ T633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.600582][ T697] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 [ 39.608781][ T711] R10: dffffc0000000000 R11: ffffed1024e0d411 R12: dffffc0000000000 [ 39.630715][ T829] RSP: 0018:ffffc900011bfc40 EFLAGS: 00010293 [ 39.630733][ T829] RAX: ffffffff842ef547 RBX: ffff88811b8e5800 RCX: ffff88811b7713c0 [ 39.630742][ T829] RDX: 0000000000000000 RSI: 000000000ef04500 RDI: 000000000c04eb7d [ 39.630751][ T829] RBP: ffffc900011bfc60 R08: ffff88811b8e5883 R09: 1ffff1102371cb10 [ 39.630760][ T829] R10: dffffc0000000000 R11: ffffed102371cb11 R12: dffffc0000000000 [ 39.630802][ T829] R13: dffffc0000000000 R14: 000000000ef04500 R15: ffff88811bbff800 [ 39.637846][ T796] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.646908][ T817] RAX: ffffffff842ef547 RBX: ffff88811b8cc000 RCX: ffff888128740000 [ 39.654316][ T652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.667648][ T747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.685084][ T679] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdcfa2df0d9 [ 39.705027][ T889] Modules linked in: [ 39.710813][ T796] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 39.720350][ T696] RBP: 00007fdcfa376024 R08: 0000000000000000 R09: 0000000000000058 [ 39.742937][ T759] R10: dffffc0000000000 R11: ffffed1021ddf311 R12: dffffc0000000000 [ 39.754842][ T862] [ 39.756851][ T748] Call Trace: [ 39.758463][ T862] CPU: 1 PID: 862 Comm: syz.3.154 Tainted: G B W syzkaller #0 [ 39.761497][ T748] pppol2tp_release+0x150/0x2b0 [ 39.761540][ T748] sock_close+0xb8/0x200 [ 39.770475][ T764] RDX: 0000000000000000 RSI: 000000000ef04a00 RDI: 000000000c04eb7d [ 39.770485][ T764] RBP: ffffc9000595fc60 R08: ffff88811bfa9883 R09: 1ffff110237f5310 [ 39.770493][ T764] R10: dffffc0000000000 R11: ffffed10237f5311 R12: dffffc0000000000 [ 39.770526][ T764] R13: dffffc0000000000 R14: 000000000ef04a00 R15: ffff888110d46400 [ 39.776204][ T684] do_syscall_64+0x31/0x40 [ 39.787941][ T817] RDX: 0000000000000000 RSI: 000000001e10b500 RDI: 000000000c04eb7d [ 39.788868][ T891] WARNING: CPU: 0 PID: 891 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.815017][ T889] [ 39.839533][ T576] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.848054][ T748] ? sock_mmap+0xa0/0xa0 [ 39.852345][ T748] __fput+0x2dc/0x730 [ 39.852634][ T730] R10: dffffc0000000000 R11: ffffed1024e0e711 R12: dffffc0000000000 [ 39.857279][ T711] R13: dffffc0000000000 R14: 000000001aa39e00 R15: ffff8881271fec00 [ 39.865736][ T877] [ 39.873624][ T711] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.879896][ T764] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.884454][ T711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.893178][ T891] Modules linked in: [ 39.899867][ T679] RDX: 00007fdcfa1409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.905113][ T711] CR2: 00007f5d8cd28ff8 CR3: 000000010d573000 CR4: 00000000003506b0 [ 39.912380][ T684] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.920374][ T711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.934132][ T656] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.934884][ T829] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.945529][ T748] ____fput+0x15/0x20 [ 39.949525][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.953748][ T877] CPU: 1 PID: 877 Comm: syz.2.159 Tainted: G B W syzkaller #0 [ 39.963296][ T697] ORIG_RAX: 000000000000003c [ 39.972208][ T759] R13: dffffc0000000000 R14: 000000001cce0600 R15: ffff888110d49400 [ 39.980203][ T711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.993270][ T860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.997558][ T711] Call Trace: [ 40.006930][ T829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.012647][ T576] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 40.022163][ T817] RBP: ffffc900010bfc60 R08: ffff88811b8cc083 R09: 1ffff11023719810 [ 40.030461][ T652] R13: 00007f564b967038 R14: 00007f564b966fa0 R15: 00007ffc2e26a978 [ 40.034556][ T696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.039861][ T656] RIP: 0033:0x7f27ccf300d9 [ 40.051239][ T881] Modules linked in: [ 40.051261][ T881] CPU: 0 PID: 881 Comm: syz.5.162 Tainted: G B W syzkaller #0 [ 40.051268][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.051287][ T881] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.051301][ T881] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 40.051308][ T881] RSP: 0018:ffffc9000130fc40 EFLAGS: 00010293 [ 40.051319][ T881] RAX: ffffffff842ef547 RBX: ffff8881055ae800 RCX: ffff88811f600000 [ 40.051327][ T881] RDX: 0000000000000000 RSI: 000000001f5464a0 RDI: 000000000c04eb7d [ 40.051336][ T881] RBP: ffffc9000130fc60 R08: ffff8881055ae883 R09: 1ffff11020ab5d10 [ 40.051345][ T881] R10: dffffc0000000000 R11: ffffed1020ab5d11 R12: dffffc0000000000 [ 40.051353][ T881] R13: dffffc0000000000 R14: 000000001f5464a0 R15: ffff8881085fac00 [ 40.051363][ T881] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.051389][ T881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.059040][ T748] task_work_run+0x127/0x190 [ 40.074354][ T862] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.083726][ T633] R13: 00007f564b967038 R14: 00007f564b966fa0 R15: 00007ffc2e26a978 [ 40.104727][ T730] R13: dffffc0000000000 R14: 0000000013f9ef60 R15: ffff88811abbc800 [ 40.146997][ T764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.174885][ T829] CR2: 00007fdcfa29a1f0 CR3: 000000012db6d000 CR4: 00000000003506b0 [ 40.174906][ T829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.174914][ T829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.174928][ T829] Call Trace: [ 40.192790][ T747] CR2: 00007f564c499060 CR3: 000000010d573000 CR4: 00000000003506b0 [ 40.199427][ T889] CPU: 0 PID: 889 Comm: syz.6.165 Tainted: G B W syzkaller #0 [ 40.216595][ T652] ---[ end trace c6752b0a6da84b67 ]--- [ 40.224207][ T697] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 40.243375][ T696] R13: 00007fdcfa567038 R14: 00007fdcfa566fa0 R15: 00007ffd220030d8 [ 40.266312][ T889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.271512][ T817] R10: dffffc0000000000 R11: ffffed1023719811 R12: dffffc0000000000 [ 40.277401][ T679] RBP: 00007fdcfa376024 R08: 0000000000000000 R09: 0000000000000058 [ 40.285288][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.293304][ T881] CR2: 00007f5d8d170fac CR3: 000000000640f000 CR4: 00000000003506b0 [ 40.303859][ T684] RIP: 0033:0x7f564b6df0d9 [ 40.309833][ T759] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.319811][ T860] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.324842][ T829] pppol2tp_release+0x150/0x2b0 [ 40.334672][ T941] ------------[ cut here ]------------ [ 40.345615][ T891] [ 40.348116][ T891] CPU: 0 PID: 891 Comm: syz.3.161 Tainted: G B W syzkaller #0 [ 40.349548][ T656] Code: Unable to access opcode bytes at RIP 0x7f27ccf300af. [ 40.361582][ T679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.364602][ T711] pppol2tp_release+0x150/0x2b0 [ 40.372973][ T889] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.383760][ T817] R13: dffffc0000000000 R14: 000000001e10b500 R15: ffff88811bc07c00 [ 40.392596][ T862] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 40.413997][ T796] RSP: 0018:ffffc9000110fc40 EFLAGS: 00010293 [ 40.414650][ T684] Code: Unable to access opcode bytes at RIP 0x7f564b6df0af. [ 40.420941][ T877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.444780][ T941] WARNING: CPU: 0 PID: 941 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.450797][ T576] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 40.455909][ T881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.485920][ T796] RAX: ffffffff842ef547 RBX: ffff88811cf78000 RCX: ffff888116b2e2c0 [ 40.498254][ T747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.505942][ T748] do_exit+0xa7c/0x24e0 [ 40.507662][ T817] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.510535][ T748] ? __kasan_check_write+0x14/0x20 [ 40.510591][ T748] ? switch_fpu_return+0x19c/0x330 [ 40.523813][ T684] RSP: 002b:00007f564b53fef8 EFLAGS: 00000246 [ 40.526422][ T796] RDX: 0000000000000000 RSI: 000000001bdc2800 RDI: 000000000c04eb7d [ 40.544862][ T829] sock_close+0xb8/0x200 [ 40.549740][ T656] RSP: 002b:00007f27ccd90ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 40.559864][ T860] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 40.564905][ T829] ? sock_mmap+0xa0/0xa0 [ 40.585902][ T949] ------------[ cut here ]------------ [ 40.591444][ T949] WARNING: CPU: 0 PID: 949 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.599323][ T697] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.602541][ T881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.611421][ T696] ---[ end trace c6752b0a6da84b68 ]--- [ 40.618735][ T796] RBP: ffffc9000110fc60 R08: ffff88811cf78083 R09: 1ffff110239ef010 [ 40.624978][ T684] ORIG_RAX: 000000000000003c [ 40.632074][ T759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.643097][ T889] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 40.653887][ T764] CR2: 00007f564b968dac CR3: 000000012b803000 CR4: 00000000003506a0 [ 40.663702][ T679] R13: 00007fdcfa567038 R14: 00007fdcfa566fa0 R15: 00007ffd220030d8 [ 40.679578][ T633] ---[ end trace c6752b0a6da84b69 ]--- [ 40.688449][ T891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.688647][ T747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.708673][ T953] ------------[ cut here ]------------ [ 40.714201][ T953] WARNING: CPU: 0 PID: 953 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.726208][ T952] ------------[ cut here ]------------ [ 40.732311][ T952] WARNING: CPU: 0 PID: 952 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.739108][ T730] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.743359][ T759] CR2: 00007f564b53fff8 CR3: 00000001073e6000 CR4: 00000000003506b0 [ 40.760515][ T941] Modules linked in: [ 40.765861][ T748] ? put_task_struct+0x90/0x90 [ 40.770676][ T748] ? fpu__clear_all+0x20/0x20 [ 40.775055][ T796] R10: dffffc0000000000 R11: ffffed10239ef011 R12: dffffc0000000000 [ 40.777765][ T684] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f564b6df0d9 [ 40.788031][ T941] CPU: 0 PID: 941 Comm: syz.6.180 Tainted: G B W syzkaller #0 [ 40.793107][ T877] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.800153][ T576] ---[ end trace c6752b0a6da84b6a ]--- [ 40.800333][ T796] R13: dffffc0000000000 R14: 000000001bdc2800 R15: ffff88811bc05000 [ 40.813926][ T656] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f27ccf300d9 [ 40.821105][ T891] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.832655][ T748] ? __kasan_check_read+0x11/0x20 [ 40.838088][ T817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.845257][ T730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.850898][ T711] sock_close+0xb8/0x200 [ 40.853758][ T697] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 40.858153][ T679] ---[ end trace c6752b0a6da84b6b ]--- [ 40.871231][ T891] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 40.893750][ T817] CR2: 00007fd9b9782060 CR3: 000000012bfc6000 CR4: 00000000003506a0 [ 40.903864][ T860] RSP: 0018:ffffc90001147c40 EFLAGS: 00010293 [ 40.910238][ T953] Modules linked in: [ 40.914267][ T953] CPU: 0 PID: 953 Comm: syz.2.182 Tainted: G B W syzkaller #0 [ 40.923446][ T748] __x64_sys_exit+0x40/0x40 [ 40.928217][ T730] CR2: 00007f27cd1b9dac CR3: 000000012bfc6000 CR4: 00000000003506a0 [ 40.934507][ T941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.945072][ T829] __fput+0x2dc/0x730 [ 40.947479][ T747] Call Trace: [ 40.953913][ T747] pppol2tp_release+0x150/0x2b0 [ 40.954579][ T949] Modules linked in: [ 40.960711][ T711] ? sock_mmap+0xa0/0xa0 [ 40.976139][ T817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.984563][ T656] RDX: 00007f27ccd919c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.986733][ T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.994369][ T877] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 41.007188][ T974] ------------[ cut here ]------------ [ 41.028258][ T748] do_syscall_64+0x31/0x40 [ 41.029136][ T860] RAX: ffffffff842ef547 RBX: ffff88811dcc2800 RCX: ffff88811d6e93c0 [ 41.033094][ T748] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.041282][ T817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.041287][ T817] Call Trace: [ 41.041303][ T817] pppol2tp_release+0x150/0x2b0 [ 41.041316][ T817] sock_close+0xb8/0x200 [ 41.041327][ T817] ? sock_mmap+0xa0/0xa0 [ 41.041339][ T817] __fput+0x2dc/0x730 [ 41.041375][ T817] ____fput+0x15/0x20 [ 41.049903][ T949] [ 41.056008][ T881] Call Trace: [ 41.062345][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.063956][ T952] Modules linked in: [ 41.097555][ T889] RSP: 0018:ffffc9000184fc40 EFLAGS: 00010293 [ 41.105504][ T953] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 41.114047][ T796] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.123419][ T759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.131875][ T941] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 41.138650][ T862] RSP: 0018:ffffc9000129fc40 EFLAGS: 00010293 [ 41.146229][ T953] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 41.152328][ T697] R13: 00007f27cd1b8038 R14: 00007f27cd1b7fa0 R15: 00007ffe8c5a9ef8 [ 41.166658][ T684] RDX: 00007f564b5409c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.182131][ T941] Code: 5d c3 e8 9c bc 35 fd be 02 00 00 00 eb 0a e8 90 bc 35 fd be 01 00 00 00 4c 89 f7 e8 13 13 0f fe e9 0f ff ff ff e8 79 bc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 bc 35 fd 4c 89 f7 be 03 [ 41.184279][ T889] RAX: ffffffff842ef547 RBX: ffff888107fff800 RCX: ffff8881055c0000 [ 41.206244][ T985] ------------[ cut here ]------------ [ 41.214622][ T949] CPU: 1 PID: 949 Comm: syz.3.177 Tainted: G B W syzkaller #0 [ 41.216535][ T764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.231984][ T656] RBP: 00007f27ccfc7024 R08: 0000000000000000 R09: 0000000000000058 [ 41.233681][ T881] pppol2tp_release+0x150/0x2b0 [ 41.241244][ T979] ------------[ cut here ]------------ [ 41.246257][ T862] RAX: ffffffff842ef547 RBX: ffff88811cd70000 RCX: ffff88811d7c0000 [ 41.254990][ T979] WARNING: CPU: 1 PID: 979 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0