cess permissive=1 [ 11.504273][ T24] audit: type=1400 audit(1782210590.350:63): avc: denied { siginh } for pid=214 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. 2026/06/23 10:29:59 parsed 1 programs 2026/06/23 10:29:59 serving rpc on tcp://40523 [ 20.330454][ T24] audit: type=1400 audit(1782210599.190:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.334968][ T24] audit: type=1400 audit(1782210599.190:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 20.338965][ T24] audit: type=1400 audit(1782210599.190:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 20.902770][ T24] audit: type=1400 audit(1782210599.770:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.903834][ T293] cgroup: Unknown subsys name 'net' [ 20.925514][ T24] audit: type=1400 audit(1782210599.770:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.952885][ T24] audit: type=1400 audit(1782210599.790:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.953078][ T293] cgroup: Unknown subsys name 'devices' [ 21.063691][ T293] cgroup: Unknown subsys name 'hugetlb' [ 21.069485][ T293] cgroup: Unknown subsys name 'rlimit' [ 21.212080][ T24] audit: type=1400 audit(1782210600.070:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.235260][ T24] audit: type=1400 audit(1782210600.070:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.255734][ T24] audit: type=1400 audit(1782210600.070:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.261332][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.284575][ T24] audit: type=1400 audit(1782210600.070:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.316482][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.715641][ T302] request_module fs-gadgetfs succeeded, but still no fs? [ 21.726517][ T302] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.826768][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.833832][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.841154][ T315] device bridge_slave_0 entered promiscuous mode [ 21.848166][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.855215][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.862502][ T315] device bridge_slave_1 entered promiscuous mode [ 21.895441][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.902503][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.909914][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.916957][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.931990][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.939262][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.946763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.954179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.963770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.971938][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.978973][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.987398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.995850][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.002888][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.014507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.026504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.036581][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.047139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.055524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.063066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.071999][ T315] device veth0_vlan entered promiscuous mode [ 22.081288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.090497][ T315] device veth1_macvtap entered promiscuous mode [ 22.099468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.109208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/06/23 10:30:01 executed programs: 0 [ 22.716904][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.724192][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.731522][ T364] device bridge_slave_0 entered promiscuous mode [ 22.741457][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.748768][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.756394][ T364] device bridge_slave_1 entered promiscuous mode [ 22.798719][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.805931][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.813205][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.820221][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.836348][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.844024][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.851182][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.863820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.872285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.880447][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.887498][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.895934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.904288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.912752][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.919786][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.934600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.942861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.951802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.960108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.968752][ T9] device bridge_slave_1 left promiscuous mode [ 22.975086][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.982712][ T9] device bridge_slave_0 left promiscuous mode [ 22.988828][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.996752][ T9] device veth1_macvtap left promiscuous mode [ 23.002900][ T9] device veth0_vlan left promiscuous mode [ 23.059798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.068173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.079091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.087235][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.095355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.103090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.111131][ T364] device veth0_vlan entered promiscuous mode [ 23.120775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.128965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.138049][ T364] device veth1_macvtap entered promiscuous mode [ 23.146457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.154304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.162536][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.171717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.179976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.345533][ T397] ================================================================== [ 23.353618][ T397] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.361660][ T397] Read of size 4 at addr ffff8881116b0400 by task syz.2.20/397 [ 23.369209][ T397] [ 23.371528][ T397] CPU: 1 PID: 397 Comm: syz.2.20 Not tainted syzkaller #0 [ 23.378632][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 23.388675][ T397] Call Trace: [ 23.392125][ T397] __dump_stack+0x21/0x24 [ 23.396438][ T397] dump_stack_lvl+0x1a7/0x208 [ 23.401091][ T397] ? show_regs_print_info+0x18/0x18 [ 23.406302][ T397] ? thaw_kernel_threads+0x220/0x220 [ 23.411565][ T397] ? __local_bh_enable_ip+0x53/0x80 [ 23.416744][ T397] print_address_description+0x7f/0x2c0 [ 23.422274][ T397] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.427970][ T397] kasan_report+0x100/0x140 [ 23.432449][ T397] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.438160][ T397] __asan_report_load4_noabort+0x14/0x20 [ 23.443785][ T397] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.449311][ T397] pppol2tp_release+0x150/0x2b0 [ 23.454148][ T397] sock_close+0xb8/0x200 [ 23.458365][ T397] ? sock_mmap+0xa0/0xa0 [ 23.462581][ T397] __fput+0x2dc/0x730 [ 23.466562][ T397] ? _raw_spin_lock+0x94/0xf0 [ 23.471219][ T397] ____fput+0x15/0x20 [ 23.475188][ T397] task_work_run+0x127/0x190 [ 23.479902][ T397] do_exit+0xa7c/0x24e0 [ 23.484041][ T397] ? put_task_struct+0x90/0x90 [ 23.488791][ T397] ? __kasan_check_write+0x14/0x20 [ 23.493886][ T397] ? switch_fpu_return+0x19c/0x330 [ 23.498974][ T397] ? unlock_page_memcg+0x110/0x110 [ 23.504064][ T397] ? fpu__clear_all+0x20/0x20 [ 23.508714][ T397] ? task_work_run+0x170/0x190 [ 23.513465][ T397] do_group_exit+0x149/0x310 [ 23.518045][ T397] __x64_sys_exit_group+0x3f/0x40 [ 23.523046][ T397] do_syscall_64+0x31/0x40 [ 23.527434][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.533327][ T397] RIP: 0033:0x7f10a3a42e59 [ 23.537768][ T397] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 23.545110][ T397] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 23.553770][ T397] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 23.561721][ T397] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.569881][ T397] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 23.577928][ T397] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 [ 23.585879][ T397] R13: 00000000000927c0 R14: 0000000000005aed R15: 00007ffc7983e580 [ 23.593834][ T397] [ 23.596148][ T397] Allocated by task 397: [ 23.601080][ T397] __kasan_kmalloc+0xd4/0x100 [ 23.605743][ T397] __kmalloc+0x19f/0x330 [ 23.609976][ T397] l2tp_session_create+0x39/0xb60 [ 23.614980][ T397] pppol2tp_connect+0xbf5/0x1640 [ 23.619912][ T397] __sys_connect+0x3ce/0x450 [ 23.624912][ T397] __x64_sys_connect+0x7a/0x90 [ 23.629768][ T397] do_syscall_64+0x31/0x40 [ 23.634280][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.640151][ T397] [ 23.642477][ T397] Freed by task 7: [ 23.646188][ T397] kasan_set_track+0x4a/0x70 [ 23.650752][ T397] kasan_set_free_info+0x23/0x40 [ 23.655675][ T397] ____kasan_slab_free+0x125/0x160 [ 23.660790][ T397] __kasan_slab_free+0x11/0x20 [ 23.665599][ T397] slab_free_freelist_hook+0xc5/0x190 [ 23.670961][ T397] kfree+0xc0/0x270 [ 23.674751][ T397] l2tp_session_put+0xb2/0x1a0 [ 23.679489][ T397] l2tp_session_delete+0x3a9/0x4a0 [ 23.684573][ T397] l2tp_tunnel_del_work+0x180/0x3d0 [ 23.689741][ T397] process_one_work+0x6fd/0xbc0 [ 23.694577][ T397] worker_thread+0xa8e/0x13c0 [ 23.699327][ T397] kthread+0x324/0x3b0 [ 23.703371][ T397] ret_from_fork+0x1f/0x30 [ 23.707774][ T397] [ 23.710091][ T397] The buggy address belongs to the object at ffff8881116b0400 [ 23.710091][ T397] which belongs to the cache kmalloc-512 of size 512 [ 23.724122][ T397] The buggy address is located 0 bytes inside of [ 23.724122][ T397] 512-byte region [ffff8881116b0400, ffff8881116b0600) [ 23.737479][ T397] The buggy address belongs to the page: [ 23.743114][ T397] page:ffffea000445ac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1116b0 [ 23.753494][ T397] head:ffffea000445ac00 order:2 compound_mapcount:0 compound_pincount:0 [ 23.761805][ T397] flags: 0x4000000000010200(slab|head) [ 23.767256][ T397] raw: 4000000000010200 ffffea00043eeb00 0000000300000003 ffff888100043080 [ 23.775825][ T397] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 23.784383][ T397] page dumped because: kasan: bad access detected [ 23.790769][ T397] page_owner tracks the page as allocated [ 23.796465][ T397] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 96, ts 4314948106, free_ts 0 [ 23.814855][ T397] prep_new_page+0x176/0x190 [ 23.819517][ T397] get_page_from_freelist+0x225f/0x23f0 [ 23.825043][ T397] __alloc_pages_nodemask+0x29a/0x640 [ 23.830390][ T397] new_slab+0x84/0x3f0 [ 23.834462][ T397] ___slab_alloc+0x2f8/0x4c0 [ 23.839026][ T397] __slab_alloc+0x63/0xa0 [ 23.843349][ T397] __kmalloc_track_caller+0x1e4/0x310 [ 23.848696][ T397] __alloc_skb+0xdc/0x520 [ 23.853003][ T397] alloc_skb_with_frags+0xa3/0x560 [ 23.858092][ T397] sock_alloc_send_pskb+0x87f/0x9a0 [ 23.863269][ T397] unix_dgram_sendmsg+0x6f3/0x18f0 [ 23.868358][ T397] sock_write_iter+0x2a6/0x3a0 [ 23.873622][ T397] vfs_write+0x770/0xd70 [ 23.877842][ T397] ksys_write+0x14a/0x260 [ 23.882152][ T397] __x64_sys_write+0x7b/0x90 [ 23.886725][ T397] do_syscall_64+0x31/0x40 [ 23.891113][ T397] page_owner free stack trace missing [ 23.896560][ T397] [ 23.898871][ T397] Memory state around the buggy address: [ 23.904516][ T397] ffff8881116b0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.912584][ T397] ffff8881116b0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.920814][ T397] >ffff8881116b0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 23.928983][ T397] ^ [ 23.933037][ T397] ffff8881116b0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 23.941237][ T397] ffff8881116b0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 23.949284][ T397] ================================================================== [ 23.957491][ T397] Disabling lock debugging due to kernel taint [ 23.965115][ T397] ------------[ cut here ]------------ [ 23.971600][ T397] WARNING: CPU: 0 PID: 397 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 23.981695][ T397] Modules linked in: [ 23.985632][ T397] CPU: 0 PID: 397 Comm: syz.2.20 Tainted: G B syzkaller #0 [ 23.994435][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.004694][ T397] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 24.011031][ T397] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 24.030698][ T397] RSP: 0018:ffffc90000c07c00 EFLAGS: 00010293 [ 24.036793][ T397] RAX: ffffffff842e9627 RBX: ffff888110ed7800 RCX: ffff88810d682780 [ 24.044985][ T397] RDX: 0000000000000000 RSI: 000000000cc61b00 RDI: 000000000c04eb7d [ 24.052998][ T397] RBP: ffffc90000c07c20 R08: 0000000000000003 R09: 0000000000000004 [ 24.060971][ T397] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 [ 24.069007][ T397] R13: dffffc0000000000 R14: 000000000cc61b00 R15: ffff8881116b0400 [ 24.077118][ T397] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.086235][ T397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.094056][ T397] CR2: 00007f10a47ee060 CR3: 000000010d4df000 CR4: 00000000003506a0 [ 24.102040][ T397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.110041][ T397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.118254][ T397] Call Trace: [ 24.121681][ T397] pppol2tp_release+0x150/0x2b0 [ 24.126661][ T397] sock_close+0xb8/0x200 [ 24.131492][ T397] ? sock_mmap+0xa0/0xa0 [ 24.135776][ T397] __fput+0x2dc/0x730 [ 24.139787][ T397] ? _raw_spin_lock+0x94/0xf0 [ 24.144499][ T397] ____fput+0x15/0x20 [ 24.148475][ T397] task_work_run+0x127/0x190 [ 24.153081][ T397] do_exit+0xa7c/0x24e0 [ 24.157228][ T397] ? put_task_struct+0x90/0x90 [ 24.161975][ T397] ? __kasan_check_write+0x14/0x20 [ 24.167123][ T397] ? switch_fpu_return+0x19c/0x330 [ 24.172360][ T397] ? unlock_page_memcg+0x110/0x110 [ 24.177465][ T397] ? fpu__clear_all+0x20/0x20 [ 24.182180][ T397] ? task_work_run+0x170/0x190 [ 24.186941][ T397] do_group_exit+0x149/0x310 [ 24.191509][ T397] __x64_sys_exit_group+0x3f/0x40 [ 24.196552][ T397] do_syscall_64+0x31/0x40 [ 24.200968][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.207085][ T397] RIP: 0033:0x7f10a3a42e59 [ 24.211596][ T397] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 24.219142][ T397] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 24.227641][ T397] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 24.235658][ T397] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.243882][ T397] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 24.252184][ T397] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000003 [ 24.260191][ T397] R13: 00000000000927c0 R14: 0000000000005aed R15: 00007ffc7983e580 [ 24.268303][ T397] ---[ end trace 9e3fde30ef4a3b1a ]--- [ 24.281559][ T398] ------------[ cut here ]------------ [ 24.287616][ T398] WARNING: CPU: 0 PID: 398 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 24.297656][ T398] Modules linked in: [ 24.301560][ T398] CPU: 0 PID: 398 Comm: syz.2.21 Tainted: G B W syzkaller #0 [ 24.310090][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.320171][ T398] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 24.326524][ T398] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 24.346341][ T398] RSP: 0018:ffffc90000c87c00 EFLAGS: 00010293 [ 24.353143][ T398] RAX: ffffffff842e9627 RBX: ffff888111572800 RCX: ffff8881112f8000 [ 24.361150][ T398] RDX: 0000000000000000 RSI: 000000000cc610a0 RDI: 000000000c04eb7d [ 24.369420][ T398] RBP: ffffc90000c87c20 R08: ffff888111572883 R09: 1ffff110222ae510 [ 24.377432][ T398] R10: dffffc0000000000 R11: ffffed10222ae511 R12: dffffc0000000000 [ 24.385456][ T398] R13: dffffc0000000000 R14: 000000000cc610a0 R15: ffff88812876f000 [ 24.393504][ T398] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 24.402459][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.409115][ T398] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 24.417171][ T398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.425201][ T398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.433178][ T398] Call Trace: [ 24.436460][ T398] pppol2tp_release+0x150/0x2b0 [ 24.441288][ T398] sock_close+0xb8/0x200 [ 24.445891][ T398] ? sock_mmap+0xa0/0xa0 [ 24.450138][ T398] __fput+0x2dc/0x730 [ 24.454346][ T398] ? _raw_spin_lock+0x94/0xf0 [ 24.459045][ T398] ____fput+0x15/0x20 [ 24.463070][ T398] task_work_run+0x127/0x190 [ 24.467693][ T398] do_exit+0xa7c/0x24e0 [ 24.471878][ T398] ? put_task_struct+0x90/0x90 [ 24.476733][ T398] ? __blkcg_punt_bio_submit+0x170/0x170 [ 24.482582][ T398] ? unlock_page_memcg+0x110/0x110 [ 24.487717][ T398] do_group_exit+0x149/0x310 [ 24.492406][ T398] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 24.498470][ T398] __x64_sys_exit_group+0x3f/0x40 [ 24.503563][ T398] do_syscall_64+0x31/0x40 [ 24.507966][ T398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.513916][ T398] RIP: 0033:0x7f10a3a42e59 [ 24.518319][ T398] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 24.525880][ T398] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 24.534366][ T398] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 24.542364][ T398] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.550366][ T398] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 24.559069][ T398] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000004 [ 24.567073][ T398] R13: 00000000000927c0 R14: 0000000000005d8c R15: 00007ffc7983e580 [ 24.575225][ T398] ---[ end trace 9e3fde30ef4a3b1b ]--- [ 24.585703][ T399] ------------[ cut here ]------------ [ 24.591274][ T399] WARNING: CPU: 0 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 24.601414][ T399] Modules linked in: [ 24.605465][ T399] CPU: 1 PID: 399 Comm: syz.2.22 Tainted: G B W syzkaller #0 [ 24.614655][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.624834][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 24.631357][ T399] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 24.651365][ T399] RSP: 0018:ffffc90000c87c00 EFLAGS: 00010293 [ 24.657487][ T399] RAX: ffffffff842e9627 RBX: ffff8881116cf800 RCX: ffff8881112fbb40 [ 24.665492][ T399] RDX: 0000000000000000 RSI: 0000000010f48340 RDI: 000000000c04eb7d [ 24.673651][ T399] RBP: ffffc90000c87c20 R08: ffff8881116cf883 R09: 1ffff110222d9f10 [ 24.681638][ T399] R10: dffffc0000000000 R11: ffffed10222d9f11 R12: dffffc0000000000 [ 24.690198][ T399] R13: dffffc0000000000 R14: 0000000010f48340 R15: ffff888110e0f800 [ 24.698273][ T399] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 24.707334][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.713945][ T399] CR2: 0000200000000280 CR3: 000000010d4df000 CR4: 00000000003506b0 [ 24.721938][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.729946][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.737978][ T399] Call Trace: [ 24.741248][ T399] pppol2tp_release+0x150/0x2b0 [ 24.746113][ T399] sock_close+0xb8/0x200 [ 24.750355][ T399] ? sock_mmap+0xa0/0xa0 [ 24.754614][ T399] __fput+0x2dc/0x730 [ 24.758598][ T399] ? _raw_spin_lock+0x94/0xf0 [ 24.763400][ T399] ____fput+0x15/0x20 [ 24.767381][ T399] task_work_run+0x127/0x190 [ 24.772213][ T399] do_exit+0xa7c/0x24e0 [ 24.776448][ T399] ? put_task_struct+0x90/0x90 [ 24.781208][ T399] ? __kasan_check_write+0x14/0x20 [ 24.786651][ T399] ? switch_fpu_return+0x19c/0x330 [ 24.791823][ T399] ? unlock_page_memcg+0x110/0x110 [ 24.797005][ T399] ? fpu__clear_all+0x20/0x20 [ 24.801693][ T399] ? task_work_run+0x170/0x190 [ 24.806652][ T399] do_group_exit+0x149/0x310 [ 24.811292][ T399] __x64_sys_exit_group+0x3f/0x40 [ 24.816351][ T399] do_syscall_64+0x31/0x40 [ 24.820774][ T399] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.826759][ T399] RIP: 0033:0x7f10a3a42e59 [ 24.831162][ T399] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 24.838654][ T399] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 24.847564][ T399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 24.855609][ T399] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.864048][ T399] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 24.872191][ T399] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 24.880653][ T399] R13: 00000000000927c0 R14: 0000000000005ecb R15: 00007ffc7983e580 [ 24.889357][ T399] ---[ end trace 9e3fde30ef4a3b1c ]--- [ 24.900136][ T400] ------------[ cut here ]------------ [ 24.905700][ T400] WARNING: CPU: 1 PID: 400 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 24.915710][ T400] Modules linked in: [ 24.919613][ T400] CPU: 1 PID: 400 Comm: syz.2.23 Tainted: G B W syzkaller #0 [ 24.928275][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.938517][ T400] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 24.945325][ T400] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 24.965485][ T400] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 24.971598][ T400] RAX: ffffffff842e9627 RBX: ffff888111967800 RCX: ffff888111d462c0 [ 24.979628][ T400] RDX: 0000000000000000 RSI: 0000000010f48580 RDI: 000000000c04eb7d [ 24.987776][ T400] RBP: ffffc90000c77c20 R08: ffff888111967883 R09: 1ffff1102232cf10 [ 24.995807][ T400] R10: dffffc0000000000 R11: ffffed102232cf11 R12: dffffc0000000000 [ 25.004300][ T400] R13: dffffc0000000000 R14: 0000000010f48580 R15: ffff888111c42800 [ 25.012515][ T400] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.021541][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.028217][ T400] CR2: 0000200000000280 CR3: 000000010d4df000 CR4: 00000000003506a0 [ 25.036289][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.044298][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.052314][ T400] Call Trace: [ 25.055617][ T400] pppol2tp_release+0x150/0x2b0 [ 25.060727][ T400] sock_close+0xb8/0x200 [ 25.065012][ T400] ? sock_mmap+0xa0/0xa0 [ 25.069251][ T400] __fput+0x2dc/0x730 [ 25.073254][ T400] ? _raw_spin_lock+0x94/0xf0 [ 25.078045][ T400] ____fput+0x15/0x20 [ 25.082001][ T400] task_work_run+0x127/0x190 [ 25.086791][ T400] do_exit+0xa7c/0x24e0 [ 25.090947][ T400] ? put_task_struct+0x90/0x90 [ 25.096236][ T400] ? __kasan_check_write+0x14/0x20 [ 25.101341][ T400] ? switch_fpu_return+0x19c/0x330 [ 25.106917][ T400] ? unlock_page_memcg+0x110/0x110 [ 25.112051][ T400] ? fpu__clear_all+0x20/0x20 [ 25.116949][ T400] ? task_work_run+0x170/0x190 [ 25.121732][ T400] do_group_exit+0x149/0x310 [ 25.126450][ T400] __x64_sys_exit_group+0x3f/0x40 [ 25.131497][ T400] do_syscall_64+0x31/0x40 [ 25.136025][ T400] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.141908][ T400] RIP: 0033:0x7f10a3a42e59 [ 25.146330][ T400] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 25.153973][ T400] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.162696][ T400] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 25.170675][ T400] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.178872][ T400] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 25.186942][ T400] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000006 [ 25.195967][ T400] R13: 00000000000927c0 R14: 0000000000006004 R15: 00007ffc7983e580 [ 25.204279][ T400] ---[ end trace 9e3fde30ef4a3b1d ]--- [ 25.218791][ T417] ------------[ cut here ]------------ [ 25.224331][ T417] WARNING: CPU: 1 PID: 417 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 25.234332][ T417] Modules linked in: [ 25.238225][ T417] CPU: 1 PID: 417 Comm: syz.2.25 Tainted: G B W syzkaller #0 [ 25.246854][ T417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.257328][ T417] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 25.263988][ T417] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 25.283620][ T417] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 25.289720][ T417] RAX: ffffffff842e9627 RBX: ffff888111bab000 RCX: ffff888111d413c0 [ 25.297709][ T417] RDX: 0000000000000000 RSI: 0000000010f48d80 RDI: 000000000c04eb7d [ 25.305721][ T417] RBP: ffffc90000f87c20 R08: ffff888111bab083 R09: 1ffff11022375610 [ 25.313701][ T417] R10: dffffc0000000000 R11: ffffed1022375611 R12: dffffc0000000000 [ 25.321803][ T417] R13: dffffc0000000000 R14: 0000000010f48d80 R15: ffff8881120cdc00 [ 25.329812][ T417] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.338773][ T417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.345371][ T417] CR2: 00007ffc7983cda0 CR3: 000000010d4df000 CR4: 00000000003506b0 [ 25.353356][ T417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.361745][ T417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.369726][ T417] Call Trace: [ 25.373041][ T417] pppol2tp_release+0x150/0x2b0 [ 25.377880][ T417] sock_close+0xb8/0x200 [ 25.382113][ T417] ? sock_mmap+0xa0/0xa0 [ 25.386387][ T417] __fput+0x2dc/0x730 [ 25.390348][ T417] ? _raw_spin_lock+0x94/0xf0 [ 25.395090][ T417] ____fput+0x15/0x20 [ 25.399062][ T417] task_work_run+0x127/0x190 [ 25.403707][ T417] do_exit+0xa7c/0x24e0 [ 25.407955][ T417] ? put_task_struct+0x90/0x90 [ 25.412761][ T417] ? __blkcg_punt_bio_submit+0x170/0x170 [ 25.418383][ T417] ? unlock_page_memcg+0x110/0x110 [ 25.423514][ T417] do_group_exit+0x149/0x310 [ 25.428103][ T417] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 25.434320][ T417] __x64_sys_exit_group+0x3f/0x40 [ 25.439368][ T417] do_syscall_64+0x31/0x40 [ 25.443815][ T417] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.449872][ T417] RIP: 0033:0x7f10a3a42e59 [ 25.454330][ T417] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 25.461689][ T417] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.470255][ T417] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 25.478283][ T417] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.486288][ T417] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 25.494384][ T417] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000008 [ 25.502386][ T417] R13: 00000000000927c0 R14: 0000000000006265 R15: 00007ffc7983e580 [ 25.510358][ T417] ---[ end trace 9e3fde30ef4a3b1e ]--- [ 25.520102][ T418] ------------[ cut here ]------------ [ 25.525624][ T418] WARNING: CPU: 1 PID: 418 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 25.535671][ T418] Modules linked in: [ 25.539576][ T418] CPU: 0 PID: 418 Comm: syz.2.26 Tainted: G B W syzkaller #0 [ 25.548220][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.558540][ T418] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 25.565038][ T418] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 25.584684][ T418] RSP: 0018:ffffc90000f97c00 EFLAGS: 00010293 [ 25.590943][ T418] RAX: ffffffff842e9627 RBX: ffff888112143000 RCX: ffff888111d40000 [ 25.598964][ T418] RDX: 0000000000000000 RSI: 0000000010f48b40 RDI: 000000000c04eb7d [ 25.606950][ T418] RBP: ffffc90000f97c20 R08: ffff888112143083 R09: 1ffff11022428610 [ 25.614929][ T418] R10: dffffc0000000000 R11: ffffed1022428611 R12: dffffc0000000000 [ 25.622910][ T418] R13: dffffc0000000000 R14: 0000000010f48b40 R15: ffff888112153400 [ 25.630861][ T418] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.639793][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.646379][ T418] CR2: 00007ffc7983cda0 CR3: 000000012b05e000 CR4: 00000000003506b0 [ 25.654362][ T418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.662352][ T418] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.670309][ T418] Call Trace: [ 25.673628][ T418] pppol2tp_release+0x150/0x2b0 [ 25.678502][ T418] sock_close+0xb8/0x200 [ 25.682789][ T418] ? sock_mmap+0xa0/0xa0 [ 25.687016][ T418] __fput+0x2dc/0x730 [ 25.691159][ T418] ? _raw_spin_lock+0x94/0xf0 [ 25.695868][ T418] ____fput+0x15/0x20 [ 25.699850][ T418] task_work_run+0x127/0x190 [ 25.704618][ T418] do_exit+0xa7c/0x24e0 [ 25.708789][ T418] ? put_task_struct+0x90/0x90 [ 25.713576][ T418] ? __kasan_check_write+0x14/0x20 [ 25.718681][ T418] ? switch_fpu_return+0x19c/0x330 [ 25.723810][ T418] ? unlock_page_memcg+0x110/0x110 [ 25.728917][ T418] ? fpu__clear_all+0x20/0x20 [ 25.733611][ T418] ? task_work_run+0x170/0x190 [ 25.738371][ T418] do_group_exit+0x149/0x310 [ 25.742980][ T418] __x64_sys_exit_group+0x3f/0x40 [ 25.748298][ T418] do_syscall_64+0x31/0x40 [ 25.752763][ T418] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.758655][ T418] RIP: 0033:0x7f10a3a42e59 [ 25.763087][ T418] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 25.770702][ T418] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.779262][ T418] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 25.787376][ T418] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.795917][ T418] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 25.804279][ T418] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000009 [ 25.812273][ T418] R13: 00000000000927c0 R14: 000000000000627c R15: 00007ffc7983e580 [ 25.820231][ T418] ---[ end trace 9e3fde30ef4a3b1f ]--- [ 25.830390][ T419] ------------[ cut here ]------------ [ 25.835910][ T419] WARNING: CPU: 0 PID: 419 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 25.845953][ T419] Modules linked in: [ 25.849859][ T419] CPU: 0 PID: 419 Comm: syz.2.27 Tainted: G B W syzkaller #0 [ 25.858585][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.869021][ T419] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 25.875953][ T419] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 25.895916][ T419] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 25.901977][ T419] RAX: ffffffff842e9627 RBX: ffff8881120db800 RCX: ffff888111eae2c0 [ 25.910444][ T419] RDX: 0000000000000000 RSI: 000000000cc61de0 RDI: 000000000c04eb7d [ 25.918457][ T419] RBP: ffffc90000c77c20 R08: ffff8881120db883 R09: 1ffff1102241b710 [ 25.926473][ T419] R10: dffffc0000000000 R11: ffffed102241b711 R12: dffffc0000000000 [ 25.934469][ T419] R13: dffffc0000000000 R14: 000000000cc61de0 R15: ffff888112003400 [ 25.942543][ T419] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.951458][ T419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.958051][ T419] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 25.966061][ T419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.974053][ T419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.982212][ T419] Call Trace: [ 25.985494][ T419] pppol2tp_release+0x150/0x2b0 [ 25.990415][ T419] sock_close+0xb8/0x200 [ 25.994665][ T419] ? sock_mmap+0xa0/0xa0 [ 25.998895][ T419] __fput+0x2dc/0x730 [ 26.002883][ T419] ? _raw_spin_lock+0x94/0xf0 [ 26.007638][ T419] ____fput+0x15/0x20 [ 26.011593][ T419] task_work_run+0x127/0x190 [ 26.016201][ T419] do_exit+0xa7c/0x24e0 [ 26.020393][ T419] ? put_task_struct+0x90/0x90 [ 26.025229][ T419] ? __kasan_check_write+0x14/0x20 [ 26.030331][ T419] ? switch_fpu_return+0x19c/0x330 [ 26.035444][ T419] ? unlock_page_memcg+0x110/0x110 [ 26.040547][ T419] ? fpu__clear_all+0x20/0x20 [ 26.045768][ T419] ? task_work_run+0x170/0x190 [ 26.050614][ T419] do_group_exit+0x149/0x310 [ 26.055237][ T419] __x64_sys_exit_group+0x3f/0x40 [ 26.060253][ T419] do_syscall_64+0x31/0x40 [ 26.064699][ T419] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.070577][ T419] RIP: 0033:0x7f10a3a42e59 [ 26.075002][ T419] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 26.082388][ T419] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.090872][ T419] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 26.098888][ T419] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.106889][ T419] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 26.115040][ T419] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000a [ 26.123037][ T419] R13: 00000000000927c0 R14: 00000000000063a9 R15: 00007ffc7983e580 [ 26.131030][ T419] ---[ end trace 9e3fde30ef4a3b20 ]--- [ 26.185178][ T422] ------------[ cut here ]------------ [ 26.190759][ T422] WARNING: CPU: 0 PID: 422 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 26.200773][ T422] Modules linked in: [ 26.204779][ T422] CPU: 0 PID: 422 Comm: syz.2.30 Tainted: G B W syzkaller #0 [ 26.213312][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.223397][ T422] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 26.229789][ T422] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 26.249413][ T422] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 26.255501][ T422] RAX: ffffffff842e9627 RBX: ffff888112043000 RCX: ffff888111d43b40 [ 26.263485][ T422] RDX: 0000000000000000 RSI: 000000000c7b2760 RDI: 000000000c04eb7d [ 26.271451][ T422] RBP: ffffc90000c77c20 R08: ffff888112043083 R09: 1ffff11022408610 [ 26.279442][ T422] R10: dffffc0000000000 R11: ffffed1022408611 R12: dffffc0000000000 [ 26.287475][ T422] R13: dffffc0000000000 R14: 000000000c7b2760 R15: ffff8881111c4c00 [ 26.295594][ T422] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.305985][ T422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.312590][ T422] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 26.320562][ T422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.328564][ T422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.336544][ T422] Call Trace: [ 26.339811][ T422] pppol2tp_release+0x150/0x2b0 [ 26.344667][ T422] sock_close+0xb8/0x200 [ 26.348900][ T422] ? sock_mmap+0xa0/0xa0 [ 26.353165][ T422] __fput+0x2dc/0x730 [ 26.357143][ T422] ? _raw_spin_lock+0x94/0xf0 [ 26.361795][ T422] ____fput+0x15/0x20 [ 26.365780][ T422] task_work_run+0x127/0x190 [ 26.370363][ T422] do_exit+0xa7c/0x24e0 [ 26.374531][ T422] ? put_task_struct+0x90/0x90 [ 26.379284][ T422] ? __blkcg_punt_bio_submit+0x170/0x170 [ 26.384933][ T422] ? unlock_page_memcg+0x110/0x110 [ 26.390033][ T422] do_group_exit+0x149/0x310 [ 26.394645][ T422] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 26.400726][ T422] __x64_sys_exit_group+0x3f/0x40 [ 26.405762][ T422] do_syscall_64+0x31/0x40 [ 26.410174][ T422] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.416075][ T422] RIP: 0033:0x7f10a3a42e59 [ 26.420481][ T422] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 26.429144][ T422] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.439268][ T422] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 26.447322][ T422] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.455348][ T422] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 26.463346][ T422] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000d [ 26.471317][ T422] R13: 00000000000927c0 R14: 0000000000006609 R15: 00007ffc7983e580 [ 26.479586][ T422] ---[ end trace 9e3fde30ef4a3b21 ]--- [ 26.495004][ T423] ------------[ cut here ]------------ [ 26.500476][ T423] WARNING: CPU: 0 PID: 423 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 26.510469][ T423] Modules linked in: [ 26.514449][ T423] CPU: 0 PID: 423 Comm: syz.2.31 Tainted: G B W syzkaller #0 [ 26.523117][ T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.533200][ T423] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 26.539524][ T423] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 26.559302][ T423] RSP: 0018:ffffc90000f97c00 EFLAGS: 00010293 [ 26.565435][ T423] RAX: ffffffff842e9627 RBX: ffff888112044000 RCX: ffff888111d44f00 [ 26.573692][ T423] RDX: 0000000000000000 RSI: 000000000c7b2e00 RDI: 000000000c04eb7d [ 26.581655][ T423] RBP: ffffc90000f97c20 R08: ffff888112044083 R09: 1ffff11022408810 [ 26.589666][ T423] R10: dffffc0000000000 R11: ffffed1022408811 R12: dffffc0000000000 [ 26.597668][ T423] R13: dffffc0000000000 R14: 000000000c7b2e00 R15: ffff8881111c5800 [ 26.605662][ T423] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.614614][ T423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.621207][ T423] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 26.629235][ T423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.637223][ T423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.645201][ T423] Call Trace: [ 26.648487][ T423] pppol2tp_release+0x150/0x2b0 [ 26.653361][ T423] sock_close+0xb8/0x200 [ 26.657605][ T423] ? sock_mmap+0xa0/0xa0 [ 26.661824][ T423] __fput+0x2dc/0x730 [ 26.665839][ T423] ? _raw_spin_lock+0x94/0xf0 [ 26.670517][ T423] ____fput+0x15/0x20 [ 26.674606][ T423] task_work_run+0x127/0x190 [ 26.679221][ T423] do_exit+0xa7c/0x24e0 [ 26.683592][ T423] ? put_task_struct+0x90/0x90 [ 26.688355][ T423] ? __blkcg_punt_bio_submit+0x170/0x170 [ 26.694036][ T423] ? unlock_page_memcg+0x110/0x110 [ 26.699146][ T423] do_group_exit+0x149/0x310 [ 26.703755][ T423] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 26.709822][ T423] __x64_sys_exit_group+0x3f/0x40 [ 26.714865][ T423] do_syscall_64+0x31/0x40 [ 26.719283][ T423] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.725186][ T423] RIP: 0033:0x7f10a3a42e59 [ 26.729586][ T423] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 26.736966][ T423] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.745397][ T423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 26.753391][ T423] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.761443][ T423] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 26.769438][ T423] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000e [ 26.777454][ T423] R13: 00000000000927c0 R14: 000000000000663b R15: 00007ffc7983e580 [ 26.786339][ T423] ---[ end trace 9e3fde30ef4a3b22 ]--- [ 26.802801][ T425] ------------[ cut here ]------------ [ 26.808293][ T425] WARNING: CPU: 0 PID: 425 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 26.818346][ T425] Modules linked in: [ 26.822628][ T425] CPU: 0 PID: 425 Comm: syz.2.33 Tainted: G B W syzkaller #0 [ 26.831113][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.841304][ T425] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 26.847682][ T425] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 26.867513][ T425] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 26.873619][ T425] RAX: ffffffff842e9627 RBX: ffff888112adc800 RCX: ffff88810d448000 [ 26.881702][ T425] RDX: 0000000000000000 RSI: 000000000c7b2be0 RDI: 000000000c04eb7d [ 26.889827][ T425] RBP: ffffc90000f87c20 R08: ffff888112adc883 R09: 1ffff1102255b910 [ 26.897923][ T425] R10: dffffc0000000000 R11: ffffed102255b911 R12: dffffc0000000000 [ 26.905937][ T425] R13: dffffc0000000000 R14: 000000000c7b2be0 R15: ffff8881111c4000 [ 26.913935][ T425] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.922908][ T425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.929570][ T425] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 26.937570][ T425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.945555][ T425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.953553][ T425] Call Trace: [ 26.956844][ T425] pppol2tp_release+0x150/0x2b0 [ 26.961679][ T425] sock_close+0xb8/0x200 [ 26.966685][ T425] ? sock_mmap+0xa0/0xa0 [ 26.970933][ T425] __fput+0x2dc/0x730 [ 26.974946][ T425] ? _raw_spin_lock+0x94/0xf0 [ 26.979627][ T425] ____fput+0x15/0x20 [ 26.983657][ T425] task_work_run+0x127/0x190 [ 26.988268][ T425] do_exit+0xa7c/0x24e0 [ 26.992448][ T425] ? put_task_struct+0x90/0x90 [ 26.997579][ T425] ? __kasan_check_write+0x14/0x20 [ 27.002795][ T425] ? switch_fpu_return+0x19c/0x330 [ 27.008011][ T425] ? unlock_page_memcg+0x110/0x110 [ 27.013199][ T425] ? fpu__clear_all+0x20/0x20 [ 27.017875][ T425] ? task_work_run+0x170/0x190 [ 27.022696][ T425] do_group_exit+0x149/0x310 [ 27.027303][ T425] __x64_sys_exit_group+0x3f/0x40 [ 27.032352][ T425] do_syscall_64+0x31/0x40 [ 27.036855][ T425] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.042761][ T425] RIP: 0033:0x7f10a3a42e59 [ 27.047166][ T425] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 27.054633][ T425] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.063070][ T425] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 27.071130][ T425] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.079247][ T425] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 27.087458][ T425] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000010 [ 27.095594][ T425] R13: 00000000000927c0 R14: 0000000000006894 R15: 00007ffc7983e580 [ 27.103607][ T425] ---[ end trace 9e3fde30ef4a3b23 ]--- [ 27.114395][ T426] ------------[ cut here ]------------ [ 27.120245][ T426] WARNING: CPU: 1 PID: 426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.130301][ T426] Modules linked in: [ 27.134504][ T426] CPU: 0 PID: 426 Comm: syz.2.34 Tainted: G B W syzkaller #0 [ 27.143116][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.153477][ T426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.159865][ T426] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 27.179665][ T426] RSP: 0018:ffffc90000f97c00 EFLAGS: 00010293 [ 27.185780][ T426] RAX: ffffffff842e9627 RBX: ffff888111653800 RCX: ffff888111452780 [ 27.193869][ T426] RDX: 0000000000000000 RSI: 000000000f7ce560 RDI: 000000000c04eb7d [ 27.201829][ T426] RBP: ffffc90000f97c20 R08: ffff888111653883 R09: 1ffff110222ca710 [ 27.209881][ T426] R10: dffffc0000000000 R11: ffffed10222ca711 R12: dffffc0000000000 [ 27.217892][ T426] R13: dffffc0000000000 R14: 000000000f7ce560 R15: ffff888111597c00 [ 27.225900][ T426] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.234861][ T426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.241442][ T426] CR2: 0000200000000280 CR3: 000000012b05e000 CR4: 00000000003506b0 [ 27.249432][ T426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.257421][ T426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.265418][ T426] Call Trace: [ 27.268706][ T426] pppol2tp_release+0x150/0x2b0 [ 27.274191][ T426] sock_close+0xb8/0x200 [ 27.278428][ T426] ? sock_mmap+0xa0/0xa0 [ 27.282699][ T426] __fput+0x2dc/0x730 [ 27.286675][ T426] ? _raw_spin_lock+0x94/0xf0 [ 27.291328][ T426] ____fput+0x15/0x20 [ 27.295463][ T426] task_work_run+0x127/0x190 [ 27.300060][ T426] do_exit+0xa7c/0x24e0 [ 27.304297][ T426] ? put_task_struct+0x90/0x90 [ 27.309060][ T426] ? __blkcg_punt_bio_submit+0x170/0x170 [ 27.314716][ T426] ? unlock_page_memcg+0x110/0x110 [ 27.319823][ T426] do_group_exit+0x149/0x310 [ 27.324424][ T426] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 27.330495][ T426] __x64_sys_exit_group+0x3f/0x40 [ 27.335789][ T426] do_syscall_64+0x31/0x40 [ 27.340200][ T426] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.346290][ T426] RIP: 0033:0x7f10a3a42e59 [ 27.352102][ T426] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 27.359500][ T426] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.367924][ T426] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 27.375911][ T426] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.383891][ T426] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 27.391843][ T426] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000011 [ 27.399841][ T426] R13: 00000000000927c0 R14: 00000000000068ac R15: 00007ffc7983e580 [ 27.408101][ T426] ---[ end trace 9e3fde30ef4a3b24 ]--- [ 27.418388][ T427] ------------[ cut here ]------------ [ 27.423906][ T427] WARNING: CPU: 1 PID: 427 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.433960][ T427] Modules linked in: [ 27.437921][ T427] CPU: 0 PID: 427 Comm: syz.2.35 Tainted: G B W syzkaller #0 [ 27.446626][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.456946][ T427] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.463516][ T427] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 27.483191][ T427] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 27.489272][ T427] RAX: ffffffff842e9627 RBX: ffff888113143800 RCX: ffff8881114513c0 [ 27.497391][ T427] RDX: 0000000000000000 RSI: 000000000d5ce2c0 RDI: 000000000c04eb7d [ 27.505424][ T427] RBP: ffffc90000fa7c20 R08: ffff888113143883 R09: 1ffff11022628710 [ 27.513408][ T427] R10: dffffc0000000000 R11: ffffed1022628711 R12: dffffc0000000000 [ 27.521613][ T427] R13: dffffc0000000000 R14: 000000000d5ce2c0 R15: ffff888112aab800 [ 27.529618][ T427] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.538583][ T427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.545936][ T427] CR2: 0000200000000280 CR3: 000000010d4df000 CR4: 00000000003506a0 [ 27.554454][ T427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.562545][ T427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.570581][ T427] Call Trace: [ 27.573985][ T427] pppol2tp_release+0x150/0x2b0 [ 27.578899][ T427] sock_close+0xb8/0x200 [ 27.583187][ T427] ? sock_mmap+0xa0/0xa0 [ 27.587420][ T427] __fput+0x2dc/0x730 [ 27.591382][ T427] ? _raw_spin_lock+0x94/0xf0 [ 27.596109][ T427] ____fput+0x15/0x20 [ 27.600103][ T427] task_work_run+0x127/0x190 [ 27.604989][ T427] do_exit+0xa7c/0x24e0 [ 27.609238][ T427] ? put_task_struct+0x90/0x90 [ 27.614035][ T427] ? __kasan_check_write+0x14/0x20 [ 27.619151][ T427] ? switch_fpu_return+0x19c/0x330 [ 27.624286][ T427] ? unlock_page_memcg+0x110/0x110 [ 27.629399][ T427] ? fpu__clear_all+0x20/0x20 [ 27.634113][ T427] ? task_work_run+0x170/0x190 [ 27.638874][ T427] do_group_exit+0x149/0x310 [ 27.643509][ T427] __x64_sys_exit_group+0x3f/0x40 [ 27.648533][ T427] do_syscall_64+0x31/0x40 [ 27.652966][ T427] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.658854][ T427] RIP: 0033:0x7f10a3a42e59 [ 27.663300][ T427] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 27.670659][ T427] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.679084][ T427] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 27.687155][ T427] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.695159][ T427] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 27.703154][ T427] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000012 [ 27.711115][ T427] R13: 00000000000927c0 R14: 00000000000069e4 R15: 00007ffc7983e580 [ 27.719114][ T427] ---[ end trace 9e3fde30ef4a3b25 ]--- [ 27.731579][ T428] ------------[ cut here ]------------ [ 27.737097][ T428] WARNING: CPU: 0 PID: 428 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 27.747088][ T428] Modules linked in: 2026/06/23 10:30:06 executed programs: 21 [ 27.750976][ T428] CPU: 0 PID: 428 Comm: syz.2.36 Tainted: G B W syzkaller #0 [ 27.759912][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.770169][ T428] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 27.776730][ T428] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 27.796495][ T428] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 27.802586][ T428] RAX: ffffffff842e9627 RBX: ffff8881132ea800 RCX: ffff88810d44bb40 [ 27.810537][ T428] RDX: 0000000000000000 RSI: 000000000c1136a0 RDI: 000000000c04eb7d [ 27.818518][ T428] RBP: ffffc90000c77c20 R08: ffff8881132ea883 R09: 1ffff1102265d510 [ 27.826506][ T428] R10: dffffc0000000000 R11: ffffed102265d511 R12: dffffc0000000000 [ 27.834484][ T428] R13: dffffc0000000000 R14: 000000000c1136a0 R15: ffff8881130fc000 [ 27.842479][ T428] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.851402][ T428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.858087][ T428] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 27.866066][ T428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.874062][ T428] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.882304][ T428] Call Trace: [ 27.885732][ T428] pppol2tp_release+0x150/0x2b0 [ 27.890610][ T428] sock_close+0xb8/0x200 [ 27.894996][ T428] ? sock_mmap+0xa0/0xa0 [ 27.899235][ T428] __fput+0x2dc/0x730 [ 27.903288][ T428] ? _raw_spin_lock+0x94/0xf0 [ 27.908004][ T428] ____fput+0x15/0x20 [ 27.911975][ T428] task_work_run+0x127/0x190 [ 27.916604][ T428] do_exit+0xa7c/0x24e0 [ 27.920750][ T428] ? put_task_struct+0x90/0x90 [ 27.925615][ T428] ? __kasan_check_write+0x14/0x20 [ 27.930717][ T428] ? switch_fpu_return+0x19c/0x330 [ 27.936028][ T428] ? unlock_page_memcg+0x110/0x110 [ 27.941573][ T428] ? fpu__clear_all+0x20/0x20 [ 27.946371][ T428] ? task_work_run+0x170/0x190 [ 27.951126][ T428] do_group_exit+0x149/0x310 [ 27.955733][ T428] __x64_sys_exit_group+0x3f/0x40 [ 27.960752][ T428] do_syscall_64+0x31/0x40 [ 27.965363][ T428] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.971332][ T428] RIP: 0033:0x7f10a3a42e59 [ 27.976046][ T428] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 27.983423][ T428] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.991926][ T428] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 28.000019][ T428] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.008000][ T428] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 28.016020][ T428] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000013 [ 28.024047][ T428] R13: 00000000000927c0 R14: 0000000000006b13 R15: 00007ffc7983e580 [ 28.032004][ T428] ---[ end trace 9e3fde30ef4a3b26 ]--- [ 28.042089][ T429] ------------[ cut here ]------------ [ 28.047611][ T429] WARNING: CPU: 1 PID: 429 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.057597][ T429] Modules linked in: [ 28.061514][ T429] CPU: 1 PID: 429 Comm: syz.2.37 Tainted: G B W syzkaller #0 [ 28.070104][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.080220][ T429] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.086835][ T429] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 28.106635][ T429] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 28.112751][ T429] RAX: ffffffff842e9627 RBX: ffff8881133c0000 RCX: ffff88810d44cf00 [ 28.120854][ T429] RDX: 0000000000000000 RSI: 0000000029f514a0 RDI: 000000000c04eb7d [ 28.129161][ T429] RBP: ffffc90000c77c20 R08: ffff8881133c0083 R09: 1ffff11022678010 [ 28.137236][ T429] R10: dffffc0000000000 R11: ffffed1022678011 R12: dffffc0000000000 [ 28.145239][ T429] R13: dffffc0000000000 R14: 0000000029f514a0 R15: ffff8881133e6000 [ 28.153250][ T429] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.162202][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.168775][ T429] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506a0 [ 28.176772][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.184840][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.192811][ T429] Call Trace: [ 28.196099][ T429] pppol2tp_release+0x150/0x2b0 [ 28.200935][ T429] sock_close+0xb8/0x200 [ 28.205424][ T429] ? sock_mmap+0xa0/0xa0 [ 28.209662][ T429] __fput+0x2dc/0x730 [ 28.213655][ T429] ? _raw_spin_lock+0x94/0xf0 [ 28.218349][ T429] ____fput+0x15/0x20 [ 28.222371][ T429] task_work_run+0x127/0x190 [ 28.226957][ T429] do_exit+0xa7c/0x24e0 [ 28.231087][ T429] ? put_task_struct+0x90/0x90 [ 28.235859][ T429] ? __blkcg_punt_bio_submit+0x170/0x170 [ 28.241555][ T429] ? unlock_page_memcg+0x110/0x110 [ 28.246685][ T429] do_group_exit+0x149/0x310 [ 28.251495][ T429] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 28.257697][ T429] __x64_sys_exit_group+0x3f/0x40 [ 28.262796][ T429] do_syscall_64+0x31/0x40 [ 28.267195][ T429] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.273663][ T429] RIP: 0033:0x7f10a3a42e59 [ 28.278101][ T429] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 28.285606][ T429] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.294045][ T429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 28.302022][ T429] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.310028][ T429] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 28.318011][ T429] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000014 [ 28.326228][ T429] R13: 00000000000927c0 R14: 0000000000006c4c R15: 00007ffc7983e580 [ 28.334233][ T429] ---[ end trace 9e3fde30ef4a3b27 ]--- [ 28.385260][ T432] ------------[ cut here ]------------ [ 28.390748][ T432] WARNING: CPU: 1 PID: 432 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.400828][ T432] Modules linked in: [ 28.404754][ T432] CPU: 1 PID: 432 Comm: syz.2.40 Tainted: G B W syzkaller #0 [ 28.413252][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.423331][ T432] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.429637][ T432] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 28.449423][ T432] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 28.455572][ T432] RAX: ffffffff842e9627 RBX: ffff888110bca800 RCX: ffff888110c213c0 [ 28.463561][ T432] RDX: 0000000000000000 RSI: 0000000029f51a20 RDI: 000000000c04eb7d [ 28.471513][ T432] RBP: ffffc90000f87c20 R08: ffff888110bca883 R09: 1ffff11022179510 [ 28.479497][ T432] R10: dffffc0000000000 R11: ffffed1022179511 R12: dffffc0000000000 [ 28.487486][ T432] R13: dffffc0000000000 R14: 0000000029f51a20 R15: ffff888110fc2400 [ 28.495469][ T432] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.504410][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.510976][ T432] CR2: 0000200000000280 CR3: 00000001073d5000 CR4: 00000000003506a0 [ 28.519458][ T432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.527621][ T432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.535604][ T432] Call Trace: [ 28.538908][ T432] pppol2tp_release+0x150/0x2b0 [ 28.543915][ T432] sock_close+0xb8/0x200 [ 28.548152][ T432] ? sock_mmap+0xa0/0xa0 [ 28.552404][ T432] __fput+0x2dc/0x730 [ 28.556378][ T432] ? _raw_spin_lock+0x94/0xf0 [ 28.561031][ T432] ____fput+0x15/0x20 [ 28.565025][ T432] task_work_run+0x127/0x190 [ 28.569609][ T432] do_exit+0xa7c/0x24e0 [ 28.573773][ T432] ? put_task_struct+0x90/0x90 [ 28.579190][ T432] ? __blkcg_punt_bio_submit+0x170/0x170 [ 28.584870][ T432] ? unlock_page_memcg+0x110/0x110 [ 28.590260][ T432] do_group_exit+0x149/0x310 [ 28.594909][ T432] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 28.600977][ T432] __x64_sys_exit_group+0x3f/0x40 [ 28.606157][ T432] do_syscall_64+0x31/0x40 [ 28.610567][ T432] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.616537][ T432] RIP: 0033:0x7f10a3a42e59 [ 28.620942][ T432] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 28.628346][ T432] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.636762][ T432] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 28.644753][ T432] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.652729][ T432] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 28.660679][ T432] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000017 [ 28.668682][ T432] R13: 00000000000927c0 R14: 0000000000006ea4 R15: 00007ffc7983e580 [ 28.676684][ T432] ---[ end trace 9e3fde30ef4a3b28 ]--- [ 28.694808][ T433] ------------[ cut here ]------------ [ 28.700283][ T433] WARNING: CPU: 1 PID: 433 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.710306][ T433] Modules linked in: [ 28.714320][ T433] CPU: 1 PID: 433 Comm: syz.2.41 Tainted: G B W syzkaller #0 [ 28.722832][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.733382][ T433] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.739739][ T433] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 28.759670][ T433] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 28.765760][ T433] RAX: ffffffff842e9627 RBX: ffff88811334f800 RCX: ffff888110c20000 [ 28.773762][ T433] RDX: 0000000000000000 RSI: 0000000029f51b40 RDI: 000000000c04eb7d [ 28.781745][ T433] RBP: ffffc90000f87c20 R08: ffff88811334f883 R09: 1ffff11022669f10 [ 28.789748][ T433] R10: dffffc0000000000 R11: ffffed1022669f11 R12: dffffc0000000000 [ 28.797731][ T433] R13: dffffc0000000000 R14: 0000000029f51b40 R15: ffff8881133b6c00 [ 28.805709][ T433] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.814639][ T433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.821198][ T433] CR2: 0000200000000280 CR3: 000000010d4df000 CR4: 00000000003506a0 [ 28.829178][ T433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.837543][ T433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.845570][ T433] Call Trace: [ 28.849196][ T433] pppol2tp_release+0x150/0x2b0 [ 28.854311][ T433] sock_close+0xb8/0x200 [ 28.858573][ T433] ? sock_mmap+0xa0/0xa0 [ 28.862868][ T433] __fput+0x2dc/0x730 [ 28.866848][ T433] ? _raw_spin_lock+0x94/0xf0 [ 28.871504][ T433] ____fput+0x15/0x20 [ 28.875761][ T433] task_work_run+0x127/0x190 [ 28.880375][ T433] do_exit+0xa7c/0x24e0 [ 28.884547][ T433] ? put_task_struct+0x90/0x90 [ 28.889307][ T433] ? __blkcg_punt_bio_submit+0x170/0x170 [ 28.895038][ T433] ? unlock_page_memcg+0x110/0x110 [ 28.900150][ T433] do_group_exit+0x149/0x310 [ 28.904765][ T433] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 28.910825][ T433] __x64_sys_exit_group+0x3f/0x40 [ 28.915973][ T433] do_syscall_64+0x31/0x40 [ 28.920383][ T433] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.926312][ T433] RIP: 0033:0x7f10a3a42e59 [ 28.930724][ T433] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 28.938107][ T433] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.946527][ T433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 28.954505][ T433] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.962483][ T433] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 28.970451][ T433] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000018 [ 28.978440][ T433] R13: 00000000000927c0 R14: 0000000000006ed3 R15: 00007ffc7983e580 [ 28.986437][ T433] ---[ end trace 9e3fde30ef4a3b29 ]--- [ 28.996633][ T434] ------------[ cut here ]------------ [ 29.002104][ T434] WARNING: CPU: 0 PID: 434 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.012341][ T434] Modules linked in: [ 29.016246][ T434] CPU: 1 PID: 434 Comm: syz.2.42 Tainted: G B W syzkaller #0 [ 29.024786][ T434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.034890][ T434] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.041195][ T434] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.061150][ T434] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 29.067390][ T434] RAX: ffffffff842e9627 RBX: ffff88811383f800 RCX: ffff888110c23b40 [ 29.075489][ T434] RDX: 0000000000000000 RSI: 000000000b168fa0 RDI: 000000000c04eb7d [ 29.083550][ T434] RBP: ffffc90000fa7c20 R08: ffff88811383f883 R09: 1ffff11022707f10 [ 29.091515][ T434] R10: dffffc0000000000 R11: ffffed1022707f11 R12: dffffc0000000000 [ 29.099517][ T434] R13: dffffc0000000000 R14: 000000000b168fa0 R15: ffff8881137f2c00 [ 29.107569][ T434] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.116555][ T434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.123618][ T434] CR2: 0000200000000280 CR3: 000000010d5b4000 CR4: 00000000003506a0 [ 29.131662][ T434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.139646][ T434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.147633][ T434] Call Trace: [ 29.150909][ T434] pppol2tp_release+0x150/0x2b0 [ 29.155775][ T434] sock_close+0xb8/0x200 [ 29.160010][ T434] ? sock_mmap+0xa0/0xa0 [ 29.164408][ T434] __fput+0x2dc/0x730 [ 29.168419][ T434] ? _raw_spin_lock+0x94/0xf0 [ 29.173137][ T434] ____fput+0x15/0x20 [ 29.177113][ T434] task_work_run+0x127/0x190 [ 29.181718][ T434] do_exit+0xa7c/0x24e0 [ 29.185912][ T434] ? put_task_struct+0x90/0x90 [ 29.190667][ T434] ? __kasan_check_write+0x14/0x20 [ 29.195817][ T434] ? switch_fpu_return+0x19c/0x330 [ 29.200924][ T434] ? unlock_page_memcg+0x110/0x110 [ 29.206057][ T434] ? fpu__clear_all+0x20/0x20 [ 29.210728][ T434] ? task_work_run+0x170/0x190 [ 29.215507][ T434] do_group_exit+0x149/0x310 [ 29.220097][ T434] __x64_sys_exit_group+0x3f/0x40 [ 29.225160][ T434] do_syscall_64+0x31/0x40 [ 29.229567][ T434] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.235479][ T434] RIP: 0033:0x7f10a3a42e59 [ 29.239892][ T434] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 29.247305][ T434] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.255747][ T434] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 29.263732][ T434] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.271698][ T434] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 29.279685][ T434] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000019 [ 29.287663][ T434] R13: 00000000000927c0 R14: 0000000000007009 R15: 00007ffc7983e580 [ 29.295658][ T434] ---[ end trace 9e3fde30ef4a3b2a ]--- [ 29.306225][ T435] ------------[ cut here ]------------ [ 29.311721][ T435] WARNING: CPU: 0 PID: 435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.321774][ T435] Modules linked in: [ 29.325702][ T435] CPU: 0 PID: 435 Comm: syz.2.43 Tainted: G B W syzkaller #0 [ 29.334231][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.344492][ T435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.350906][ T435] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.370588][ T435] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 29.376753][ T435] RAX: ffffffff842e9627 RBX: ffff888113610000 RCX: ffff888111453b40 [ 29.384818][ T435] RDX: 0000000000000000 RSI: 000000000b1689a0 RDI: 000000000c04eb7d [ 29.392800][ T435] RBP: ffffc90000f87c20 R08: ffff888113610083 R09: 1ffff110226c2010 [ 29.400754][ T435] R10: dffffc0000000000 R11: ffffed10226c2011 R12: dffffc0000000000 [ 29.408811][ T435] R13: dffffc0000000000 R14: 000000000b1689a0 R15: ffff888113640400 [ 29.416854][ T435] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.425966][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.432699][ T435] CR2: 00007f10a3afec42 CR3: 000000012b05e000 CR4: 00000000003506a0 [ 29.440759][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.448769][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.456753][ T435] Call Trace: [ 29.460023][ T435] pppol2tp_release+0x150/0x2b0 [ 29.464926][ T435] sock_close+0xb8/0x200 [ 29.469161][ T435] ? sock_mmap+0xa0/0xa0 [ 29.473417][ T435] __fput+0x2dc/0x730 [ 29.477396][ T435] ? _raw_spin_lock+0x94/0xf0 [ 29.482052][ T435] ____fput+0x15/0x20 [ 29.486047][ T435] task_work_run+0x127/0x190 [ 29.490626][ T435] do_exit+0xa7c/0x24e0 [ 29.494916][ T435] ? put_task_struct+0x90/0x90 [ 29.499702][ T435] ? __blkcg_punt_bio_submit+0x170/0x170 [ 29.505373][ T435] ? unlock_page_memcg+0x110/0x110 [ 29.510621][ T435] do_group_exit+0x149/0x310 [ 29.515247][ T435] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 29.521313][ T435] __x64_sys_exit_group+0x3f/0x40 [ 29.526354][ T435] do_syscall_64+0x31/0x40 [ 29.530785][ T435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.536704][ T435] RIP: 0033:0x7f10a3a42e59 [ 29.541132][ T435] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 29.548518][ T435] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.556949][ T435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 29.564940][ T435] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.572952][ T435] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 29.580924][ T435] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001a [ 29.588944][ T435] R13: 00000000000927c0 R14: 000000000000713e R15: 00007ffc7983e580 [ 29.596927][ T435] ---[ end trace 9e3fde30ef4a3b2b ]--- [ 29.606985][ T436] ------------[ cut here ]------------ [ 29.612502][ T436] WARNING: CPU: 0 PID: 436 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.622492][ T436] Modules linked in: [ 29.626392][ T436] CPU: 0 PID: 436 Comm: syz.2.44 Tainted: G B W syzkaller #0 [ 29.634931][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.645023][ T436] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.651423][ T436] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.671177][ T436] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 29.677279][ T436] RAX: ffffffff842e9627 RBX: ffff888113879000 RCX: ffff888110c24f00 [ 29.685265][ T436] RDX: 0000000000000000 RSI: 000000000b148680 RDI: 000000000c04eb7d [ 29.693245][ T436] RBP: ffffc90000fa7c20 R08: ffff888113879083 R09: 1ffff1102270f210 [ 29.701200][ T436] R10: dffffc0000000000 R11: ffffed102270f211 R12: dffffc0000000000 [ 29.709193][ T436] R13: dffffc0000000000 R14: 000000000b148680 R15: ffff888113643400 [ 29.717199][ T436] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.726360][ T436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.732977][ T436] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 29.740938][ T436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.748934][ T436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.756928][ T436] Call Trace: [ 29.760244][ T436] pppol2tp_release+0x150/0x2b0 [ 29.765147][ T436] sock_close+0xb8/0x200 [ 29.769390][ T436] ? sock_mmap+0xa0/0xa0 [ 29.774071][ T436] __fput+0x2dc/0x730 [ 29.778048][ T436] ? _raw_spin_lock+0x94/0xf0 [ 29.782838][ T436] ____fput+0x15/0x20 [ 29.786837][ T436] task_work_run+0x127/0x190 [ 29.791432][ T436] do_exit+0xa7c/0x24e0 [ 29.795611][ T436] ? put_task_struct+0x90/0x90 [ 29.800378][ T436] ? __blkcg_punt_bio_submit+0x170/0x170 [ 29.806323][ T436] ? unlock_page_memcg+0x110/0x110 [ 29.812664][ T436] do_group_exit+0x149/0x310 [ 29.817260][ T436] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 29.823754][ T436] __x64_sys_exit_group+0x3f/0x40 [ 29.828840][ T436] do_syscall_64+0x31/0x40 [ 29.833303][ T436] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.839193][ T436] RIP: 0033:0x7f10a3a42e59 [ 29.843661][ T436] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 29.851877][ T436] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.860510][ T436] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 29.868522][ T436] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.876551][ T436] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 29.884780][ T436] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001b [ 29.893100][ T436] R13: 00000000000927c0 R14: 000000000000726b R15: 00007ffc7983e580 [ 29.901200][ T436] ---[ end trace 9e3fde30ef4a3b2c ]--- [ 29.915443][ T437] ------------[ cut here ]------------ [ 29.920920][ T437] WARNING: CPU: 0 PID: 437 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.931169][ T437] Modules linked in: [ 29.935109][ T437] CPU: 0 PID: 437 Comm: syz.2.45 Tainted: G B W syzkaller #0 [ 29.943646][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.953809][ T437] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.960152][ T437] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.979779][ T437] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 29.986206][ T437] RAX: ffffffff842e9627 RBX: ffff88811387a000 RCX: ffff888110c262c0 [ 29.994210][ T437] RDX: 0000000000000000 RSI: 000000000b1483a0 RDI: 000000000c04eb7d [ 30.002285][ T437] RBP: ffffc90000fa7c20 R08: ffff88811387a083 R09: 1ffff1102270f410 [ 30.010249][ T437] R10: dffffc0000000000 R11: ffffed102270f411 R12: dffffc0000000000 [ 30.018536][ T437] R13: dffffc0000000000 R14: 000000000b1483a0 R15: ffff8881137d2800 [ 30.027246][ T437] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.036222][ T437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.042830][ T437] CR2: 0000200000000280 CR3: 000000012b05e000 CR4: 00000000003506b0 [ 30.050815][ T437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.058927][ T437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.067094][ T437] Call Trace: [ 30.070369][ T437] pppol2tp_release+0x150/0x2b0 [ 30.080130][ T437] sock_close+0xb8/0x200 [ 30.084396][ T437] ? sock_mmap+0xa0/0xa0 [ 30.088665][ T437] __fput+0x2dc/0x730 [ 30.092660][ T437] ? _raw_spin_lock+0x94/0xf0 [ 30.097332][ T437] ____fput+0x15/0x20 [ 30.101289][ T437] task_work_run+0x127/0x190 [ 30.105899][ T437] do_exit+0xa7c/0x24e0 [ 30.110223][ T437] ? put_task_struct+0x90/0x90 [ 30.115007][ T437] ? __blkcg_punt_bio_submit+0x170/0x170 [ 30.120634][ T437] ? unlock_page_memcg+0x110/0x110 [ 30.125943][ T437] do_group_exit+0x149/0x310 [ 30.130533][ T437] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 30.136614][ T437] __x64_sys_exit_group+0x3f/0x40 [ 30.141639][ T437] do_syscall_64+0x31/0x40 [ 30.146105][ T437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.152119][ T437] RIP: 0033:0x7f10a3a42e59 [ 30.156659][ T437] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 30.164834][ T437] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.173289][ T437] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 30.181256][ T437] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.189248][ T437] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 30.197232][ T437] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001c [ 30.205216][ T437] R13: 00000000000927c0 R14: 00000000000073a0 R15: 00007ffc7983e580 [ 30.213203][ T437] ---[ end trace 9e3fde30ef4a3b2d ]--- [ 30.225099][ T438] ------------[ cut here ]------------ [ 30.230581][ T438] WARNING: CPU: 1 PID: 438 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.240610][ T438] Modules linked in: [ 30.244547][ T438] CPU: 1 PID: 438 Comm: syz.2.46 Tainted: G B W syzkaller #0 [ 30.253070][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.263683][ T438] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.270018][ T438] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.289797][ T438] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 30.295891][ T438] RAX: ffffffff842e9627 RBX: ffff88811003e800 RCX: ffff888113ac0000 [ 30.303902][ T438] RDX: 0000000000000000 RSI: 0000000029f515e0 RDI: 000000000c04eb7d [ 30.311868][ T438] RBP: ffffc90000fa7c20 R08: ffff88811003e883 R09: 1ffff11022007d10 [ 30.319852][ T438] R10: dffffc0000000000 R11: ffffed1022007d11 R12: dffffc0000000000 [ 30.327830][ T438] R13: dffffc0000000000 R14: 0000000029f515e0 R15: ffff888110308800 [ 30.335936][ T438] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.345009][ T438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.351578][ T438] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506a0 [ 30.359568][ T438] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.367545][ T438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.375528][ T438] Call Trace: [ 30.378813][ T438] pppol2tp_release+0x150/0x2b0 [ 30.383683][ T438] sock_close+0xb8/0x200 [ 30.387915][ T438] ? sock_mmap+0xa0/0xa0 [ 30.392174][ T438] __fput+0x2dc/0x730 [ 30.396149][ T438] ? _raw_spin_lock+0x94/0xf0 [ 30.400797][ T438] ____fput+0x15/0x20 [ 30.404788][ T438] task_work_run+0x127/0x190 [ 30.409368][ T438] do_exit+0xa7c/0x24e0 [ 30.413526][ T438] ? put_task_struct+0x90/0x90 [ 30.418276][ T438] ? __blkcg_punt_bio_submit+0x170/0x170 [ 30.423928][ T438] ? unlock_page_memcg+0x110/0x110 [ 30.429035][ T438] do_group_exit+0x149/0x310 [ 30.433638][ T438] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 30.439697][ T438] __x64_sys_exit_group+0x3f/0x40 [ 30.444811][ T438] do_syscall_64+0x31/0x40 [ 30.449342][ T438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.455248][ T438] RIP: 0033:0x7f10a3a42e59 [ 30.459643][ T438] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 30.467011][ T438] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.476314][ T438] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 30.484530][ T438] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.492539][ T438] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 30.500687][ T438] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001d [ 30.508692][ T438] R13: 00000000000927c0 R14: 00000000000074d5 R15: 00007ffc7983e580 [ 30.516680][ T438] ---[ end trace 9e3fde30ef4a3b2e ]--- [ 30.526812][ T439] ------------[ cut here ]------------ [ 30.532313][ T439] WARNING: CPU: 1 PID: 439 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.542446][ T439] Modules linked in: [ 30.546338][ T439] CPU: 1 PID: 439 Comm: syz.2.47 Tainted: G B W syzkaller #0 [ 30.554864][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.565122][ T439] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.571453][ T439] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.591083][ T439] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 30.597197][ T439] RAX: ffffffff842e9627 RBX: ffff888113b08000 RCX: ffff888111454f00 [ 30.605179][ T439] RDX: 0000000000000000 RSI: 0000000010309400 RDI: 000000000c04eb7d [ 30.613199][ T439] RBP: ffffc90000fa7c20 R08: ffff888113b08083 R09: 1ffff11022761010 [ 30.621155][ T439] R10: dffffc0000000000 R11: ffffed1022761011 R12: dffffc0000000000 [ 30.629157][ T439] R13: dffffc0000000000 R14: 0000000010309400 R15: ffff888113bca000 [ 30.637513][ T439] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.646486][ T439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.653097][ T439] CR2: 00007f10a3b032ac CR3: 000000000640f000 CR4: 00000000003506a0 [ 30.661052][ T439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.669055][ T439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.677265][ T439] Call Trace: [ 30.680537][ T439] pppol2tp_release+0x150/0x2b0 [ 30.685405][ T439] sock_close+0xb8/0x200 [ 30.689654][ T439] ? sock_mmap+0xa0/0xa0 [ 30.693927][ T439] __fput+0x2dc/0x730 [ 30.697924][ T439] ? _raw_spin_lock+0x94/0xf0 [ 30.702619][ T439] ____fput+0x15/0x20 [ 30.706615][ T439] task_work_run+0x127/0x190 [ 30.711200][ T439] do_exit+0xa7c/0x24e0 [ 30.715381][ T439] ? put_task_struct+0x90/0x90 [ 30.720150][ T439] ? __kasan_check_write+0x14/0x20 [ 30.725267][ T439] ? switch_fpu_return+0x19c/0x330 [ 30.730371][ T439] ? unlock_page_memcg+0x110/0x110 [ 30.735509][ T439] ? fpu__clear_all+0x20/0x20 [ 30.740180][ T439] ? task_work_run+0x170/0x190 [ 30.744986][ T439] do_group_exit+0x149/0x310 [ 30.749579][ T439] __x64_sys_exit_group+0x3f/0x40 [ 30.754628][ T439] do_syscall_64+0x31/0x40 [ 30.759042][ T439] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.764941][ T439] RIP: 0033:0x7f10a3a42e59 [ 30.769339][ T439] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 30.776735][ T439] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.785179][ T439] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 30.793370][ T439] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.801349][ T439] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 30.809476][ T439] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000001e [ 30.817463][ T439] R13: 00000000000927c0 R14: 0000000000007603 R15: 00007ffc7983e580 [ 30.825593][ T439] ---[ end trace 9e3fde30ef4a3b2f ]--- [ 30.839701][ T441] ------------[ cut here ]------------ [ 30.845307][ T441] WARNING: CPU: 1 PID: 441 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.855705][ T441] Modules linked in: [ 30.859606][ T441] CPU: 1 PID: 441 Comm: syz.2.49 Tainted: G B W syzkaller #0 [ 30.868409][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.878870][ T441] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.885799][ T441] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.905783][ T441] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 30.911938][ T441] RAX: ffffffff842e9627 RBX: ffff88811395c000 RCX: ffff8881129b8000 [ 30.919969][ T441] RDX: 0000000000000000 RSI: 0000000029f51720 RDI: 000000000c04eb7d [ 30.928103][ T441] RBP: ffffc90000c77c20 R08: ffff88811395c083 R09: 1ffff1102272b810 [ 30.936122][ T441] R10: dffffc0000000000 R11: ffffed102272b811 R12: dffffc0000000000 [ 30.944229][ T441] R13: dffffc0000000000 R14: 0000000029f51720 R15: ffff88811030b000 [ 30.952227][ T441] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.961155][ T441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.967751][ T441] CR2: 0000200000000280 CR3: 000000010d5b4000 CR4: 00000000003506a0 [ 30.975742][ T441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.983729][ T441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.991694][ T441] Call Trace: [ 30.994998][ T441] pppol2tp_release+0x150/0x2b0 [ 30.999845][ T441] sock_close+0xb8/0x200 [ 31.004097][ T441] ? sock_mmap+0xa0/0xa0 [ 31.008353][ T441] __fput+0x2dc/0x730 [ 31.012346][ T441] ? _raw_spin_lock+0x94/0xf0 [ 31.017165][ T441] ____fput+0x15/0x20 [ 31.021129][ T441] task_work_run+0x127/0x190 [ 31.025814][ T441] do_exit+0xa7c/0x24e0 [ 31.029983][ T441] ? put_task_struct+0x90/0x90 [ 31.034773][ T441] ? __kasan_check_write+0x14/0x20 [ 31.040001][ T441] ? switch_fpu_return+0x19c/0x330 [ 31.045183][ T441] ? unlock_page_memcg+0x110/0x110 [ 31.050304][ T441] ? fpu__clear_all+0x20/0x20 [ 31.055014][ T441] ? task_work_run+0x170/0x190 [ 31.059794][ T441] do_group_exit+0x149/0x310 [ 31.064412][ T441] __x64_sys_exit_group+0x3f/0x40 [ 31.069435][ T441] do_syscall_64+0x31/0x40 [ 31.073872][ T441] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.079756][ T441] RIP: 0033:0x7f10a3a42e59 [ 31.084172][ T441] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 31.091526][ T441] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.099963][ T441] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 31.107980][ T441] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.116092][ T441] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 31.124100][ T441] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000020 [ 31.132054][ T441] R13: 00000000000927c0 R14: 000000000000785a R15: 00007ffc7983e580 [ 31.140043][ T441] ---[ end trace 9e3fde30ef4a3b30 ]--- [ 31.154781][ T442] ------------[ cut here ]------------ [ 31.160257][ T442] WARNING: CPU: 1 PID: 442 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.170259][ T442] Modules linked in: [ 31.174205][ T442] CPU: 1 PID: 442 Comm: syz.2.50 Tainted: G B W syzkaller #0 [ 31.182705][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.192780][ T442] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.199112][ T442] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.218734][ T442] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 31.225044][ T442] RAX: ffffffff842e9627 RBX: ffff88811395b800 RCX: ffff888113ac3b40 [ 31.233206][ T442] RDX: 0000000000000000 RSI: 0000000029f51500 RDI: 000000000c04eb7d [ 31.241197][ T442] RBP: ffffc90000f87c20 R08: ffff88811395b883 R09: 1ffff1102272b710 [ 31.249348][ T442] R10: dffffc0000000000 R11: ffffed102272b711 R12: dffffc0000000000 [ 31.257536][ T442] R13: dffffc0000000000 R14: 0000000029f51500 R15: ffff88811399c000 [ 31.265632][ T442] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.274770][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.281447][ T442] CR2: 0000200000000280 CR3: 000000010d4df000 CR4: 00000000003506a0 [ 31.289440][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.297428][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.305415][ T442] Call Trace: [ 31.308696][ T442] pppol2tp_release+0x150/0x2b0 [ 31.313586][ T442] sock_close+0xb8/0x200 [ 31.317836][ T442] ? sock_mmap+0xa0/0xa0 [ 31.322096][ T442] __fput+0x2dc/0x730 [ 31.326121][ T442] ? _raw_spin_lock+0x94/0xf0 [ 31.330899][ T442] ____fput+0x15/0x20 [ 31.334898][ T442] task_work_run+0x127/0x190 [ 31.339509][ T442] do_exit+0xa7c/0x24e0 [ 31.343713][ T442] ? put_task_struct+0x90/0x90 [ 31.348597][ T442] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.354478][ T442] ? unlock_page_memcg+0x110/0x110 [ 31.359594][ T442] do_group_exit+0x149/0x310 [ 31.364239][ T442] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 31.370321][ T442] __x64_sys_exit_group+0x3f/0x40 [ 31.375352][ T442] do_syscall_64+0x31/0x40 [ 31.379770][ T442] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.385686][ T442] RIP: 0033:0x7f10a3a42e59 [ 31.390082][ T442] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 31.397452][ T442] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.405869][ T442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 31.413851][ T442] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.421819][ T442] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 31.429806][ T442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000021 [ 31.437801][ T442] R13: 00000000000927c0 R14: 0000000000007871 R15: 00007ffc7983e580 [ 31.445888][ T442] ---[ end trace 9e3fde30ef4a3b31 ]--- [ 31.457081][ T443] ------------[ cut here ]------------ [ 31.462626][ T443] WARNING: CPU: 1 PID: 443 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.472646][ T443] Modules linked in: [ 31.476579][ T443] CPU: 1 PID: 443 Comm: syz.2.51 Tainted: G B W syzkaller #0 [ 31.485274][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.495466][ T443] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.501786][ T443] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.522173][ T443] RSP: 0018:ffffc90000f97c00 EFLAGS: 00010293 [ 31.528263][ T443] RAX: ffffffff842e9627 RBX: ffff88811395e000 RCX: ffff888113ac4f00 [ 31.536382][ T443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 31.544582][ T443] RBP: ffffc90000f97c20 R08: ffff88811395e083 R09: 1ffff1102272bc10 [ 31.553736][ T443] R10: dffffc0000000000 R11: ffffed102272bc11 R12: dffffc0000000000 [ 31.561713][ T443] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811399ec00 [ 31.569818][ T443] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.578783][ T443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.585391][ T443] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506a0 [ 31.593387][ T443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.601690][ T443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.609681][ T443] Call Trace: [ 31.612980][ T443] pppol2tp_release+0x150/0x2b0 [ 31.617812][ T443] sock_close+0xb8/0x200 [ 31.622061][ T443] ? sock_mmap+0xa0/0xa0 [ 31.626777][ T443] __fput+0x2dc/0x730 [ 31.630778][ T443] ? _raw_spin_lock+0x94/0xf0 [ 31.635475][ T443] ____fput+0x15/0x20 [ 31.639478][ T443] task_work_run+0x127/0x190 [ 31.644094][ T443] do_exit+0xa7c/0x24e0 [ 31.648253][ T443] ? put_task_struct+0x90/0x90 [ 31.653178][ T443] ? __kasan_check_write+0x14/0x20 [ 31.658391][ T443] ? switch_fpu_return+0x19c/0x330 [ 31.663543][ T443] ? unlock_page_memcg+0x110/0x110 [ 31.668650][ T443] ? fpu__clear_all+0x20/0x20 [ 31.673372][ T443] ? task_work_run+0x170/0x190 [ 31.678131][ T443] do_group_exit+0x149/0x310 [ 31.682861][ T443] __x64_sys_exit_group+0x3f/0x40 [ 31.687933][ T443] do_syscall_64+0x31/0x40 [ 31.692391][ T443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.698280][ T443] RIP: 0033:0x7f10a3a42e59 [ 31.702706][ T443] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 31.710063][ T443] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.718504][ T443] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 31.726500][ T443] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.734497][ T443] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 31.742479][ T443] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000022 [ 31.750519][ T443] R13: 00000000000927c0 R14: 00000000000079a5 R15: 00007ffc7983e580 [ 31.758510][ T443] ---[ end trace 9e3fde30ef4a3b32 ]--- [ 31.768241][ T444] ------------[ cut here ]------------ [ 31.773990][ T444] WARNING: CPU: 0 PID: 444 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.784071][ T444] Modules linked in: [ 31.787959][ T444] CPU: 0 PID: 444 Comm: syz.2.52 Tainted: G B W syzkaller #0 [ 31.796529][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.806714][ T444] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.813584][ T444] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.833270][ T444] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 31.839332][ T444] RAX: ffffffff842e9627 RBX: ffff888112ad2800 RCX: ffff888113ac62c0 [ 31.847331][ T444] RDX: 0000000000000000 RSI: 000000000b148ea0 RDI: 000000000c04eb7d [ 31.855454][ T444] RBP: ffffc90000f87c20 R08: ffff888112ad2883 R09: 1ffff1102255a510 [ 31.863566][ T444] R10: dffffc0000000000 R11: ffffed102255a511 R12: dffffc0000000000 [ 31.871526][ T444] R13: dffffc0000000000 R14: 000000000b148ea0 R15: ffff88811414dc00 [ 31.879553][ T444] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.888562][ T444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.895180][ T444] CR2: 0000200000000280 CR3: 00000001073d5000 CR4: 00000000003506b0 [ 31.903203][ T444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.911480][ T444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.919616][ T444] Call Trace: [ 31.922930][ T444] pppol2tp_release+0x150/0x2b0 [ 31.927766][ T444] sock_close+0xb8/0x200 [ 31.931993][ T444] ? sock_mmap+0xa0/0xa0 [ 31.936263][ T444] __fput+0x2dc/0x730 [ 31.940255][ T444] ? _raw_spin_lock+0x94/0xf0 [ 31.945282][ T444] ____fput+0x15/0x20 [ 31.949271][ T444] task_work_run+0x127/0x190 [ 31.953879][ T444] do_exit+0xa7c/0x24e0 [ 31.958076][ T444] ? put_task_struct+0x90/0x90 [ 31.962855][ T444] ? __kasan_check_write+0x14/0x20 [ 31.967963][ T444] ? switch_fpu_return+0x19c/0x330 [ 31.973087][ T444] ? unlock_page_memcg+0x110/0x110 [ 31.978196][ T444] ? fpu__clear_all+0x20/0x20 [ 31.982906][ T444] ? task_work_run+0x170/0x190 [ 31.987686][ T444] do_group_exit+0x149/0x310 [ 31.992601][ T444] __x64_sys_exit_group+0x3f/0x40 [ 31.997641][ T444] do_syscall_64+0x31/0x40 [ 32.002038][ T444] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.007944][ T444] RIP: 0033:0x7f10a3a42e59 [ 32.012359][ T444] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 32.019701][ T444] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.028123][ T444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 32.036122][ T444] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.044194][ T444] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 32.052189][ T444] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000023 [ 32.060157][ T444] R13: 00000000000927c0 R14: 0000000000007ada R15: 00007ffc7983e580 [ 32.068262][ T444] ---[ end trace 9e3fde30ef4a3b33 ]--- [ 32.084142][ T446] ------------[ cut here ]------------ [ 32.089621][ T446] WARNING: CPU: 0 PID: 446 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.099668][ T446] Modules linked in: [ 32.103607][ T446] CPU: 0 PID: 446 Comm: syz.2.54 Tainted: G B W syzkaller #0 [ 32.112080][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.122194][ T446] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.128518][ T446] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.148297][ T446] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 32.155056][ T446] RAX: ffffffff842e9627 RBX: ffff888112ad4000 RCX: ffff888113ac2780 [ 32.163079][ T446] RDX: 0000000000000000 RSI: 000000000b1481c0 RDI: 000000000c04eb7d [ 32.171056][ T446] RBP: ffffc90000f87c20 R08: ffff888112ad4083 R09: 1ffff1102255a810 [ 32.180196][ T446] R10: dffffc0000000000 R11: ffffed102255a811 R12: dffffc0000000000 [ 32.188212][ T446] R13: dffffc0000000000 R14: 000000000b1481c0 R15: ffff888128651c00 [ 32.196209][ T446] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.205219][ T446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.211784][ T446] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506b0 [ 32.219799][ T446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.227801][ T446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.235912][ T446] Call Trace: [ 32.239206][ T446] pppol2tp_release+0x150/0x2b0 [ 32.244072][ T446] sock_close+0xb8/0x200 [ 32.248337][ T446] ? sock_mmap+0xa0/0xa0 [ 32.252601][ T446] __fput+0x2dc/0x730 [ 32.256586][ T446] ? _raw_spin_lock+0x94/0xf0 [ 32.261273][ T446] ____fput+0x15/0x20 [ 32.265277][ T446] task_work_run+0x127/0x190 [ 32.269867][ T446] do_exit+0xa7c/0x24e0 [ 32.274041][ T446] ? put_task_struct+0x90/0x90 [ 32.278804][ T446] ? __kasan_check_write+0x14/0x20 [ 32.283968][ T446] ? switch_fpu_return+0x19c/0x330 [ 32.289073][ T446] ? unlock_page_memcg+0x110/0x110 [ 32.294373][ T446] ? fpu__clear_all+0x20/0x20 [ 32.299066][ T446] ? task_work_run+0x170/0x190 [ 32.303870][ T446] do_group_exit+0x149/0x310 [ 32.308464][ T446] __x64_sys_exit_group+0x3f/0x40 [ 32.313500][ T446] do_syscall_64+0x31/0x40 [ 32.317910][ T446] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.323913][ T446] RIP: 0033:0x7f10a3a42e59 [ 32.328587][ T446] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 32.335968][ T446] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.344412][ T446] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 32.352409][ T446] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.360377][ T446] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 32.368400][ T446] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000025 [ 32.376391][ T446] R13: 00000000000927c0 R14: 0000000000007d37 R15: 00007ffc7983e580 [ 32.384393][ T446] ---[ end trace 9e3fde30ef4a3b34 ]--- [ 32.435293][ T449] ------------[ cut here ]------------ [ 32.440800][ T449] WARNING: CPU: 1 PID: 449 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.450813][ T449] Modules linked in: [ 32.454914][ T449] CPU: 0 PID: 449 Comm: syz.2.57 Tainted: G B W syzkaller #0 [ 32.463500][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.473585][ T449] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.479907][ T449] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.499774][ T449] RSP: 0018:ffffc90000f87c00 EFLAGS: 00010293 [ 32.505898][ T449] RAX: ffffffff842e9627 RBX: ffff888114baa800 RCX: ffff8881149b62c0 [ 32.513990][ T449] RDX: 0000000000000000 RSI: 0000000029f51aa0 RDI: 000000000c04eb7d [ 32.521957][ T449] RBP: ffffc90000f87c20 R08: ffff888114baa883 R09: 1ffff11022975510 [ 32.530103][ T449] R10: dffffc0000000000 R11: ffffed1022975511 R12: dffffc0000000000 [ 32.538172][ T449] R13: dffffc0000000000 R14: 0000000029f51aa0 R15: ffff888114abdc00 [ 32.546194][ T449] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.555251][ T449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.562032][ T449] CR2: 00007f10a47ee060 CR3: 000000012b05e000 CR4: 00000000003506b0 [ 32.570069][ T449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.578603][ T449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.586723][ T449] Call Trace: [ 32.590009][ T449] pppol2tp_release+0x150/0x2b0 [ 32.594889][ T449] sock_close+0xb8/0x200 [ 32.599140][ T449] ? sock_mmap+0xa0/0xa0 [ 32.603434][ T449] __fput+0x2dc/0x730 [ 32.607406][ T449] ? _raw_spin_lock+0x94/0xf0 [ 32.612065][ T449] ____fput+0x15/0x20 [ 32.616081][ T449] task_work_run+0x127/0x190 [ 32.620662][ T449] do_exit+0xa7c/0x24e0 [ 32.624827][ T449] ? put_task_struct+0x90/0x90 [ 32.629668][ T449] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.635338][ T449] ? unlock_page_memcg+0x110/0x110 [ 32.640472][ T449] do_group_exit+0x149/0x310 [ 32.645086][ T449] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 32.651162][ T449] __x64_sys_exit_group+0x3f/0x40 [ 32.656228][ T449] do_syscall_64+0x31/0x40 [ 32.660646][ T449] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.666642][ T449] RIP: 0033:0x7f10a3a42e59 [ 32.671040][ T449] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 32.678413][ T449] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.686859][ T449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 32.694850][ T449] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.702834][ T449] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 32.710794][ T449] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000028 [ 32.718794][ T449] R13: 00000000000927c0 R14: 0000000000007e77 R15: 00007ffc7983e580 [ 32.726787][ T449] ---[ end trace 9e3fde30ef4a3b35 ]--- [ 32.736936][ T450] ------------[ cut here ]------------ [ 32.742451][ T450] WARNING: CPU: 0 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.752571][ T450] Modules linked in: [ 32.756454][ T450] CPU: 0 PID: 450 Comm: syz.2.58 Tainted: G B W syzkaller #0 [ 32.764986][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.775064][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 2026/06/23 10:30:11 executed programs: 43 [ 32.781591][ T450] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.801335][ T450] RSP: 0018:ffffc90000fa7c00 EFLAGS: 00010293 [ 32.807536][ T450] RAX: ffffffff842e9627 RBX: ffff888114b1f000 RCX: ffff8881129bcf00 [ 32.815521][ T450] RDX: 0000000000000000 RSI: 000000000f7ce760 RDI: 000000000c04eb7d [ 32.823519][ T450] RBP: ffffc90000fa7c20 R08: ffff888114b1f083 R09: 1ffff11022963e10 [ 32.831491][ T450] R10: dffffc0000000000 R11: ffffed1022963e11 R12: dffffc0000000000 [ 32.839524][ T450] R13: dffffc0000000000 R14: 000000000f7ce760 R15: ffff888114b36c00 [ 32.847561][ T450] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.856517][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.863129][ T450] CR2: 00007f10a47ee060 CR3: 000000010dcf0000 CR4: 00000000003506b0 [ 32.871083][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.879252][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.887233][ T450] Call Trace: [ 32.890505][ T450] pppol2tp_release+0x150/0x2b0 [ 32.895392][ T450] sock_close+0xb8/0x200 [ 32.899777][ T450] ? sock_mmap+0xa0/0xa0 [ 32.904050][ T450] __fput+0x2dc/0x730 [ 32.908107][ T450] ? _raw_spin_lock+0x94/0xf0 [ 32.912813][ T450] ____fput+0x15/0x20 [ 32.916802][ T450] task_work_run+0x127/0x190 [ 32.921396][ T450] do_exit+0xa7c/0x24e0 [ 32.925708][ T450] ? put_task_struct+0x90/0x90 [ 32.930490][ T450] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.936162][ T450] ? unlock_page_memcg+0x110/0x110 [ 32.941277][ T450] do_group_exit+0x149/0x310 [ 32.945887][ T450] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 32.951976][ T450] __x64_sys_exit_group+0x3f/0x40 [ 32.957012][ T450] do_syscall_64+0x31/0x40 [ 32.961859][ T450] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.968125][ T450] RIP: 0033:0x7f10a3a42e59 [ 32.972649][ T450] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 32.980092][ T450] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.988530][ T450] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 32.996531][ T450] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.004569][ T450] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 33.012554][ T450] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000029 [ 33.020512][ T450] R13: 00000000000927c0 R14: 0000000000007ea5 R15: 00007ffc7983e580 [ 33.028684][ T450] ---[ end trace 9e3fde30ef4a3b36 ]--- [ 33.040313][ T451] ------------[ cut here ]------------ [ 33.045825][ T451] WARNING: CPU: 1 PID: 451 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.055812][ T451] Modules linked in: [ 33.059701][ T451] CPU: 1 PID: 451 Comm: syz.2.59 Tainted: G B W syzkaller #0 [ 33.068226][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.078312][ T451] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.084914][ T451] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.104552][ T451] RSP: 0018:ffffc90000c77c00 EFLAGS: 00010293 [ 33.110721][ T451] RAX: ffffffff842e9627 RBX: ffff888114cd6000 RCX: ffff8881129be2c0 [ 33.118727][ T451] RDX: 0000000000000000 RSI: 000000000d5ce780 RDI: 000000000c04eb7d [ 33.127150][ T451] RBP: ffffc90000c77c20 R08: ffff888114cd6083 R09: 1ffff1102299ac10 [ 33.135243][ T451] R10: dffffc0000000000 R11: ffffed102299ac11 R12: dffffc0000000000 [ 33.143260][ T451] R13: dffffc0000000000 R14: 000000000d5ce780 R15: ffff888113934400 [ 33.151230][ T451] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.160178][ T451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.166777][ T451] CR2: 0000200000000280 CR3: 000000000640f000 CR4: 00000000003506a0 [ 33.174851][ T451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.182956][ T451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.190911][ T451] Call Trace: [ 33.194235][ T451] pppol2tp_release+0x150/0x2b0 [ 33.199083][ T451] sock_close+0xb8/0x200 [ 33.203347][ T451] ? sock_mmap+0xa0/0xa0 [ 33.207590][ T451] __fput+0x2dc/0x730 [ 33.211553][ T451] ? _raw_spin_lock+0x94/0xf0 [ 33.216245][ T451] ____fput+0x15/0x20 [ 33.220216][ T451] task_work_run+0x127/0x190 [ 33.224831][ T451] do_exit+0xa7c/0x24e0 [ 33.228996][ T451] ? put_task_struct+0x90/0x90 [ 33.233775][ T451] ? __kasan_check_write+0x14/0x20 [ 33.238880][ T451] ? switch_fpu_return+0x19c/0x330 [ 33.244106][ T451] ? unlock_page_memcg+0x110/0x110 [ 33.249208][ T451] ? fpu__clear_all+0x20/0x20 [ 33.254056][ T451] ? task_work_run+0x170/0x190 [ 33.258842][ T451] do_group_exit+0x149/0x310 [ 33.263513][ T451] __x64_sys_exit_group+0x3f/0x40 [ 33.268613][ T451] do_syscall_64+0x31/0x40 [ 33.273051][ T451] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.279114][ T451] RIP: 0033:0x7f10a3a42e59 [ 33.283679][ T451] Code: Unable to access opcode bytes at RIP 0x7f10a3a42e2f. [ 33.291045][ T451] RSP: 002b:00007ffc7983e4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.299472][ T451] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10a3a42e59 [ 33.307502][ T451] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.315515][ T451] RBP: 00007ffc7983e52c R08: 0000000000000000 R09: 00000000000927c0 [ 33.323499][ T451] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002a [ 33.331450][ T451] R13: 00000000000927c0 R14: 0000000000007fd2 R15: 00007ffc7983e580 [ 33.339480][ T451] ---[ end trace 9e3fde30ef4a3b37 ]--- [ 33.350891][ T452] ------------[ cut here ]------------ [ 33.356475][ T452] WARNING: CPU: 1 PID: 452 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.366481][ T452] Modules linked in: [ 33.370402][ T452] CPU: 1 PID: 452 Comm: syz.2.60 Tainted: G B W syzkaller #0 [ 33.379010][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026