Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. 2026/06/25 01:15:29 parsed 1 programs 2026/06/25 01:15:29 serving rpc on tcp://36851 [ 23.959213][ T24] audit: type=1400 audit(1782350129.169:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.980031][ T24] audit: type=1400 audit(1782350129.169:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.999564][ T24] audit: type=1400 audit(1782350129.169:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.566680][ T24] audit: type=1400 audit(1782350129.769:67): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.567656][ T295] cgroup: Unknown subsys name 'net' [ 24.589351][ T24] audit: type=1400 audit(1782350129.769:68): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.616570][ T24] audit: type=1400 audit(1782350129.799:69): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.616736][ T295] cgroup: Unknown subsys name 'devices' [ 24.729895][ T295] cgroup: Unknown subsys name 'hugetlb' [ 24.735477][ T295] cgroup: Unknown subsys name 'rlimit' [ 24.847839][ T24] audit: type=1400 audit(1782350130.049:70): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.871012][ T24] audit: type=1400 audit(1782350130.049:71): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.876216][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.891576][ T24] audit: type=1400 audit(1782350130.049:72): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.920167][ T24] audit: type=1400 audit(1782350130.049:73): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.949229][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.428579][ T304] request_module fs-gadgetfs succeeded, but still no fs? [ 25.448450][ T306] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.695423][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.702696][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.710111][ T326] device bridge_slave_0 entered promiscuous mode [ 25.731966][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.739095][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.746286][ T326] device bridge_slave_1 entered promiscuous mode [ 25.915132][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.922197][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.929502][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.936527][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.987343][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.995081][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.003465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.011299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.029385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.037733][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.044784][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.052577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.061473][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.068516][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.075989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.084576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.095988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.106230][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.114118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.121506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.130483][ T326] device veth0_vlan entered promiscuous mode 2026/06/25 01:15:31 executed programs: 0 [ 26.139374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.148278][ T326] device veth1_macvtap entered promiscuous mode [ 26.156801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.166481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.276634][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.283842][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.291379][ T369] device bridge_slave_0 entered promiscuous mode [ 26.306895][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.314005][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.321333][ T369] device bridge_slave_1 entered promiscuous mode [ 26.375600][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.382748][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.390065][ T377] device bridge_slave_0 entered promiscuous mode [ 26.396777][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.403830][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.411201][ T377] device bridge_slave_1 entered promiscuous mode [ 26.462487][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.469541][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.476754][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.483780][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.515418][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.522542][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.529988][ T373] device bridge_slave_0 entered promiscuous mode [ 26.536726][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.543948][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.551447][ T373] device bridge_slave_1 entered promiscuous mode [ 26.573354][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.580481][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.587689][ T371] device bridge_slave_0 entered promiscuous mode [ 26.594799][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.601973][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.609337][ T371] device bridge_slave_1 entered promiscuous mode [ 26.645208][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.652849][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.688394][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.695463][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.702965][ T378] device bridge_slave_0 entered promiscuous mode [ 26.710355][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.717372][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.724713][ T378] device bridge_slave_1 entered promiscuous mode [ 26.847872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.855437][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.863444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.871989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.880103][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.887098][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.921492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.929129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.936461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.943892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.953089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.961343][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.968364][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.976224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.984491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.992692][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.999702][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.006994][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.015508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.023711][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.030730][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.038022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.046141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.054049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.061977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.069997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.077309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.084683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.092132][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.099588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.107748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.115969][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.122994][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.130536][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.138837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.146916][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.153933][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.161229][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.169604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.177662][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.184687][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.192013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.200320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.208391][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.215415][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.222881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.230562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.264180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.272842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.282169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.290574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.315736][ T378] device veth0_vlan entered promiscuous mode [ 27.328052][ T377] device veth0_vlan entered promiscuous mode [ 27.334562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.342552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.350942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.359195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.367425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.375481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.382966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.390566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.397892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.405387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.413412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.421298][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.429413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.437440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.445789][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.453971][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.460992][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.468366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.476776][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.484933][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.491943][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.499310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.507176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.515104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.523031][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.531063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.544710][ T378] device veth1_macvtap entered promiscuous mode [ 27.561107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.571445][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.583831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.596272][ T369] device veth0_vlan entered promiscuous mode [ 27.608072][ T377] device veth1_macvtap entered promiscuous mode [ 27.615409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.625043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.633565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.641980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.650331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.658065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.676478][ T371] device veth0_vlan entered promiscuous mode [ 27.684466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.693402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.700802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.708186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.716948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.725087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.732581][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.740124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.747411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.754869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.763129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.771486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.779721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.793946][ T373] device veth0_vlan entered promiscuous mode [ 27.817180][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.825490][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.835446][ T393] ================================================================== [ 27.843527][ T393] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 27.850173][ T393] Write of size 8 at addr ffff88811340dd50 by task syz.6.21/393 [ 27.857765][ T393] [ 27.860076][ T393] CPU: 1 PID: 393 Comm: syz.6.21 Not tainted syzkaller #0 [ 27.867149][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.877172][ T393] Call Trace: [ 27.880437][ T393] __dump_stack+0x21/0x24 [ 27.884740][ T393] dump_stack_lvl+0x1a7/0x208 [ 27.889392][ T393] ? show_regs_print_info+0x18/0x18 [ 27.894564][ T393] ? thaw_kernel_threads+0x220/0x220 [ 27.899827][ T393] ? debug_smp_processor_id+0x17/0x20 [ 27.905169][ T393] print_address_description+0x7f/0x2c0 [ 27.910685][ T393] ? mutex_lock+0x85/0xf0 [ 27.914987][ T393] kasan_report+0x100/0x140 [ 27.919459][ T393] ? mutex_lock+0x85/0xf0 [ 27.923760][ T393] kasan_check_range+0x249/0x2a0 [ 27.928701][ T393] __kasan_check_write+0x14/0x20 [ 27.933619][ T393] mutex_lock+0x85/0xf0 [ 27.937748][ T393] ? mutex_trylock+0xb0/0xb0 [ 27.942308][ T393] ? l2tp_session_put+0xb2/0x1a0 [ 27.947215][ T393] ? l2tp_session_delete+0x3a9/0x4a0 [ 27.952468][ T393] pppol2tp_release+0x178/0x2b0 [ 27.957290][ T393] sock_close+0xb8/0x200 [ 27.961502][ T393] ? sock_mmap+0xa0/0xa0 [ 27.965715][ T393] __fput+0x2dc/0x730 [ 27.969667][ T393] ____fput+0x15/0x20 [ 27.973621][ T393] task_work_run+0x127/0x190 [ 27.978181][ T393] exit_to_user_mode_loop+0xcb/0xe0 [ 27.983350][ T393] exit_to_user_mode_prepare+0x76/0xa0 [ 27.988779][ T393] syscall_exit_to_user_mode+0x1d/0x40 [ 27.994209][ T393] do_syscall_64+0x3d/0x40 [ 27.998594][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.004455][ T393] RIP: 0033:0x7f9d8d06ce59 [ 28.008841][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.028421][ T393] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 28.036815][ T393] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 28.044762][ T393] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 28.052709][ T393] RBP: 0000000000006c93 R08: 0000000000000001 R09: 0000000000000000 [ 28.060663][ T393] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 28.068607][ T393] R13: 00007f9d8d2e5fac R14: 0000000000006cd1 R15: 00007f9d8d2e5fa0 [ 28.076552][ T393] [ 28.078852][ T393] Allocated by task 394: [ 28.083071][ T393] __kasan_kmalloc+0xd4/0x100 [ 28.087722][ T393] __kmalloc+0x19f/0x330 [ 28.091938][ T393] l2tp_session_create+0x39/0xb60 [ 28.096931][ T393] pppol2tp_connect+0xbf5/0x1640 [ 28.101843][ T393] __sys_connect+0x3ce/0x450 [ 28.106404][ T393] __x64_sys_connect+0x7a/0x90 [ 28.111140][ T393] do_syscall_64+0x31/0x40 [ 28.115528][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.121385][ T393] [ 28.123689][ T393] Freed by task 393: [ 28.127555][ T393] kasan_set_track+0x4a/0x70 [ 28.132116][ T393] kasan_set_free_info+0x23/0x40 [ 28.137026][ T393] ____kasan_slab_free+0x125/0x160 [ 28.142108][ T393] __kasan_slab_free+0x11/0x20 [ 28.146843][ T393] slab_free_freelist_hook+0xc5/0x190 [ 28.152187][ T393] kfree+0xc0/0x270 [ 28.155971][ T393] l2tp_session_put+0xb2/0x1a0 [ 28.160708][ T393] l2tp_session_delete+0x3a9/0x4a0 [ 28.165790][ T393] pppol2tp_release+0x169/0x2b0 [ 28.170613][ T393] sock_close+0xb8/0x200 [ 28.174833][ T393] __fput+0x2dc/0x730 [ 28.178787][ T393] ____fput+0x15/0x20 [ 28.182739][ T393] task_work_run+0x127/0x190 [ 28.187303][ T393] exit_to_user_mode_loop+0xcb/0xe0 [ 28.192474][ T393] exit_to_user_mode_prepare+0x76/0xa0 [ 28.197902][ T393] syscall_exit_to_user_mode+0x1d/0x40 [ 28.203335][ T393] do_syscall_64+0x3d/0x40 [ 28.207725][ T393] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.213583][ T393] [ 28.215887][ T393] The buggy address belongs to the object at ffff88811340dc00 [ 28.215887][ T393] which belongs to the cache kmalloc-512 of size 512 [ 28.229910][ T393] The buggy address is located 336 bytes inside of [ 28.229910][ T393] 512-byte region [ffff88811340dc00, ffff88811340de00) [ 28.243151][ T393] The buggy address belongs to the page: [ 28.248776][ T393] page:ffffea00044d0300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11340c [ 28.258979][ T393] head:ffffea00044d0300 order:2 compound_mapcount:0 compound_pincount:0 [ 28.267284][ T393] flags: 0x4000000000010200(slab|head) [ 28.272720][ T393] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.281274][ T393] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 28.289828][ T393] page dumped because: kasan: bad access detected [ 28.296210][ T393] page_owner tracks the page as allocated [ 28.301905][ T393] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 112, ts 27812855557, free_ts 27804158227 [ 28.322269][ T393] prep_new_page+0x176/0x190 [ 28.326829][ T393] get_page_from_freelist+0x225f/0x23f0 [ 28.332343][ T393] __alloc_pages_nodemask+0x29a/0x640 [ 28.337685][ T393] new_slab+0x84/0x3f0 [ 28.341727][ T393] ___slab_alloc+0x2f8/0x4c0 [ 28.346289][ T393] __slab_alloc+0x63/0xa0 [ 28.350589][ T393] __kmalloc_track_caller+0x1e4/0x310 [ 28.355936][ T393] __alloc_skb+0xdc/0x520 [ 28.360240][ T393] inet6_netconf_notify_devconf+0xd6/0x190 [ 28.366017][ T393] addrconf_ifdown+0x15d5/0x1890 [ 28.370927][ T393] addrconf_notify+0x3bd/0xea0 [ 28.375662][ T393] raw_notifier_call_chain+0x90/0x100 [ 28.381010][ T393] unregister_netdevice_many+0x100e/0x19f0 [ 28.386787][ T393] ip_tunnel_delete_nets+0x343/0x390 [ 28.392041][ T393] ipgre_tap_exit_batch_net+0x22/0x30 [ 28.397381][ T393] cleanup_net+0x5fe/0xb80 [ 28.401766][ T393] page last free stack trace: [ 28.406416][ T393] __free_pages_ok+0x80b/0x830 [ 28.411151][ T393] __free_pages+0xd8/0x390 [ 28.415538][ T393] __free_slab+0xcf/0x190 [ 28.419842][ T393] unfreeze_partials+0x150/0x180 [ 28.424751][ T393] put_cpu_partial+0xc1/0x180 [ 28.429398][ T393] __slab_free+0x2c9/0x3a0 [ 28.433787][ T393] ___cache_free+0x10e/0x130 [ 28.438346][ T393] qlink_free+0x50/0x90 [ 28.442471][ T393] qlist_free_all+0x5f/0xb0 [ 28.446946][ T393] kasan_quarantine_reduce+0x14a/0x160 [ 28.452378][ T393] __kasan_slab_alloc+0x2f/0xe0 [ 28.457200][ T393] slab_post_alloc_hook+0x5d/0x2f0 [ 28.462283][ T393] kmem_cache_alloc+0x15a/0x2d0 [ 28.467105][ T393] __alloc_skb+0x9e/0x520 [ 28.471406][ T393] netlink_sendmsg+0x693/0xb70 [ 28.476144][ T393] ____sys_sendmsg+0x5be/0x8f0 [ 28.480880][ T393] [ 28.483187][ T393] Memory state around the buggy address: [ 28.488790][ T393] ffff88811340dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.496824][ T393] ffff88811340dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.504856][ T393] >ffff88811340dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.512888][ T393] ^ [ 28.519532][ T393] ffff88811340dd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.527563][ T393] ffff88811340de00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.535596][ T393] ================================================================== [ 28.543629][ T393] Disabling lock debugging due to kernel taint [ 28.572346][ T397] ------------[ cut here ]------------ [ 28.577841][ T397] WARNING: CPU: 1 PID: 397 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.580121][ T371] device veth1_macvtap entered promiscuous mode [ 28.594745][ T397] Modules linked in: [ 28.599431][ T397] CPU: 0 PID: 397 Comm: syz.6.22 Tainted: G B syzkaller #0 [ 28.606298][ T373] device veth1_macvtap entered promiscuous mode [ 28.619958][ T369] device veth1_macvtap entered promiscuous mode [ 28.626873][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.637087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.644947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.653757][ T397] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.660422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.661683][ T397] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 28.668780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.695688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.696163][ T397] RSP: 0018:ffffc90002e77d68 EFLAGS: 00010293 [ 28.705016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.710045][ T397] RAX: ffffffff842e9627 RBX: ffff888113448800 RCX: ffff88810dfa62c0 [ 28.718080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.725762][ T397] RDX: 0000000000000000 RSI: 00000000128973e0 RDI: 000000000c04eb7d [ 28.747004][ T397] RBP: ffffc90002e77d88 R08: ffff888113448883 R09: 1ffff11022689110 [ 28.760740][ T397] R10: dffffc0000000000 R11: ffffed1022689111 R12: dffffc0000000000 [ 28.768964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.777179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.780613][ T397] R13: dffffc0000000000 R14: 00000000128973e0 R15: ffff8881136a7800 [ 28.788007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.796474][ T397] FS: 0000555575adb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.804166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.819621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.820215][ T397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.827982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.834709][ T397] CR2: 000055558a367908 CR3: 0000000113645000 CR4: 00000000003506a0 [ 28.843209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.851160][ T397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.859143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.875327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.875427][ T397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.883751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.897791][ T397] Call Trace: [ 28.902833][ T397] pppol2tp_release+0x150/0x2b0 [ 28.907779][ T397] sock_close+0xb8/0x200 [ 28.920726][ T397] ? sock_mmap+0xa0/0xa0 [ 28.928129][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.935032][ T397] __fput+0x2dc/0x730 [ 28.947893][ T429] ------------[ cut here ]------------ [ 28.954670][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.957320][ T397] ____fput+0x15/0x20 [ 28.963409][ T429] WARNING: CPU: 0 PID: 429 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.974209][ T397] task_work_run+0x127/0x190 [ 28.979869][ T429] Modules linked in: [ 28.983617][ T397] exit_to_user_mode_loop+0xcb/0xe0 [ 28.985446][ T429] CPU: 0 PID: 429 Comm: syz.1.18 Tainted: G B syzkaller #0 [ 28.991040][ T397] exit_to_user_mode_prepare+0x76/0xa0 [ 29.002795][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.014134][ T397] syscall_exit_to_user_mode+0x1d/0x40 [ 29.015414][ T429] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.054232][ T429] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.082412][ T454] ------------[ cut here ]------------ [ 29.088780][ T397] do_syscall_64+0x3d/0x40 [ 29.091447][ T454] WARNING: CPU: 0 PID: 454 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.098907][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.109896][ T460] ------------[ cut here ]------------ [ 29.115580][ T460] WARNING: CPU: 0 PID: 460 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.117572][ T397] RIP: 0033:0x7f9d8d06ce59 [ 29.126467][ T429] RSP: 0018:ffffc90002e67d68 EFLAGS: 00010293 [ 29.130333][ T454] Modules linked in: [ 29.131640][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.136480][ T429] [ 29.140523][ T397] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 [ 29.160663][ T454] [ 29.162715][ T460] Modules linked in: [ 29.168931][ T454] CPU: 0 PID: 454 Comm: syz.5.46 Tainted: G B syzkaller #0 [ 29.172307][ T397] ORIG_RAX: 00000000000001b4 [ 29.177257][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.187493][ T460] [ 29.194556][ T429] RAX: ffffffff842e9627 RBX: ffff88811286a000 RCX: ffff8881149cbb40 [ 29.201727][ T397] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 29.211326][ T454] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.221840][ T460] CPU: 1 PID: 460 Comm: syz.0.50 Tainted: G B syzkaller #0 [ 29.224221][ T429] RDX: 0000000000000000 RSI: 0000000005fb4960 RDI: 000000000c04eb7d [ 29.231732][ T397] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.239966][ T454] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.247579][ T460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.267538][ T429] RBP: ffffc90002e67d88 R08: ffff88811286a083 R09: 1ffff1102250d410 [ 29.277364][ T397] RBP: 0000000000006f89 R08: 0000000000000001 R09: 0000000000000000 [ 29.285468][ T454] RSP: 0018:ffffc90002f07d68 EFLAGS: 00010293 [ 29.293501][ T429] R10: dffffc0000000000 R11: ffffed102250d411 R12: dffffc0000000000 [ 29.294629][ T397] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 29.309408][ T454] [ 29.319462][ T460] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.325817][ T460] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.327457][ T429] R13: dffffc0000000000 R14: 0000000005fb4960 R15: ffff888114b5f400 [ 29.351031][ T397] R13: 00007f9d8d2e5fac R14: 0000000000006fbb R15: 00007f9d8d2e5fa0 [ 29.361435][ T454] RAX: ffffffff842e9627 RBX: ffff88811579f000 RCX: ffff888115930000 [ 29.361443][ T454] RDX: 0000000000000000 RSI: 0000000013ba5b00 RDI: 000000000c04eb7d [ 29.361450][ T454] RBP: ffffc90002f07d88 R08: ffff88811579f083 R09: 1ffff11022af3e10 [ 29.361456][ T454] R10: dffffc0000000000 R11: ffffed1022af3e11 R12: dffffc0000000000 [ 29.361464][ T454] R13: dffffc0000000000 R14: 0000000013ba5b00 R15: ffff888114fedc00 [ 29.361473][ T454] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.361480][ T454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.361486][ T454] CR2: 00007f49661fc060 CR3: 0000000114d62000 CR4: 00000000003506b0 [ 29.361503][ T454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.371195][ T460] RSP: 0018:ffffc90002ef7d68 EFLAGS: 00010293 [ 29.381768][ T454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.389532][ T397] ---[ end trace 12f3a01188f86f8b ]--- [ 29.393754][ T429] FS: 00005555788c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.401742][ T460] [ 29.410907][ T454] Call Trace: [ 29.417570][ T460] RAX: ffffffff842e9627 RBX: ffff888115799000 RCX: ffff888115d2e2c0 [ 29.430051][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.437627][ T460] RDX: 0000000000000000 RSI: 0000000007f8ef00 RDI: 000000000c04eb7d [ 29.439909][ T454] pppol2tp_release+0x150/0x2b0 [ 29.447437][ T460] RBP: ffffc90002ef7d88 R08: ffff888115799083 R09: 1ffff11022af3210 [ 29.453249][ T429] CR2: 0000001b34063fff CR3: 0000000114037000 CR4: 00000000003506b0 [ 29.468327][ T460] R10: dffffc0000000000 R11: ffffed1022af3211 R12: dffffc0000000000 [ 29.479801][ T454] sock_close+0xb8/0x200 [ 29.502969][ T460] R13: dffffc0000000000 R14: 0000000007f8ef00 R15: ffff888115967400 [ 29.512322][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.541039][ T112] device bridge_slave_1 left promiscuous mode [ 29.547154][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.558377][ T454] ? sock_mmap+0xa0/0xa0 [ 29.563868][ T454] __fput+0x2dc/0x730 [ 29.571928][ T454] ____fput+0x15/0x20 [ 29.572983][ T460] FS: 0000555592047500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.575924][ T454] task_work_run+0x127/0x190 [ 29.590289][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.598256][ T429] Call Trace: [ 29.601627][ T429] pppol2tp_release+0x150/0x2b0 [ 29.606875][ T112] device bridge_slave_0 left promiscuous mode [ 29.607537][ T454] exit_to_user_mode_loop+0xcb/0xe0 [ 29.613596][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.618555][ T429] sock_close+0xb8/0x200 [ 29.625869][ T460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.629938][ T454] exit_to_user_mode_prepare+0x76/0xa0 [ 29.636825][ T460] CR2: 00007f49661fc060 CR3: 0000000114dd9000 CR4: 00000000003506a0 [ 29.641903][ T429] ? sock_mmap+0xa0/0xa0 [ 29.650926][ T460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.654238][ T454] syscall_exit_to_user_mode+0x1d/0x40 [ 29.662417][ T112] device veth1_macvtap left promiscuous mode [ 29.673625][ T112] device veth0_vlan left promiscuous mode [ 29.673711][ T429] __fput+0x2dc/0x730 [ 29.691080][ T501] ------------[ cut here ]------------ [ 29.691479][ T429] ____fput+0x15/0x20 [ 29.696587][ T460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.700621][ T454] do_syscall_64+0x3d/0x40 [ 29.708872][ T501] WARNING: CPU: 1 PID: 501 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.720724][ T429] task_work_run+0x127/0x190 [ 29.723233][ T501] Modules linked in: [ 29.747539][ T460] Call Trace: [ 29.751073][ T460] pppol2tp_release+0x150/0x2b0 [ 29.751920][ T454] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.756932][ T460] sock_close+0xb8/0x200 [ 29.762448][ T429] exit_to_user_mode_loop+0xcb/0xe0 [ 29.768074][ T501] CPU: 1 PID: 501 Comm: syz.6.69 Tainted: G B W syzkaller #0 [ 29.771879][ T454] RIP: 0033:0x7f5cfa1cbe59 [ 29.782141][ T460] ? sock_mmap+0xa0/0xa0 [ 29.785277][ T429] exit_to_user_mode_prepare+0x76/0xa0 [ 29.794437][ T429] syscall_exit_to_user_mode+0x1d/0x40 [ 29.800164][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.800256][ T429] do_syscall_64+0x3d/0x40 [ 29.814771][ T460] __fput+0x2dc/0x730 [ 29.814845][ T454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.828726][ T460] ____fput+0x15/0x20 [ 29.838625][ T429] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.843110][ T501] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 29.848540][ T429] RIP: 0033:0x7f9f6a1dee59 [ 29.859549][ T501] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 29.879662][ T460] task_work_run+0x127/0x190 [ 29.880751][ T454] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.885234][ T460] exit_to_user_mode_loop+0xcb/0xe0 [ 29.892883][ T429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.898477][ T460] exit_to_user_mode_prepare+0x76/0xa0 [ 29.917917][ T454] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 29.936352][ T454] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.936780][ T501] RSP: 0018:ffffc900031e7d68 EFLAGS: 00010293 [ 29.944463][ T429] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 [ 29.950750][ T454] RBP: 0000000000007183 R08: 0000000000000001 R09: 0000000000000000 [ 29.952134][ T501] [ 29.959157][ T429] ORIG_RAX: 00000000000001b4 [ 29.978548][ T454] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 29.985251][ T460] syscall_exit_to_user_mode+0x1d/0x40 [ 29.991278][ T454] R13: 00007f5cfa444fac R14: 00000000000071b5 R15: 00007f5cfa444fa0 [ 30.000454][ T429] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 30.001523][ T501] RAX: ffffffff842e9627 RBX: ffff8881168c7000 RCX: ffff888116940000 [ 30.009185][ T454] ---[ end trace 12f3a01188f86f8c ]--- [ 30.016901][ T460] do_syscall_64+0x3d/0x40 [ 30.022094][ T429] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.032367][ T460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.035786][ T429] RBP: 00000000000070fc R08: 0000000000000001 R09: 0000000000000000 [ 30.041099][ T501] RDX: 0000000000000000 RSI: 0000000016187e40 RDI: 000000000c04eb7d [ 30.051524][ T429] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 30.064189][ T460] RIP: 0033:0x7f27845c8e59 [ 30.064922][ T429] R13: 00007f9f6a457fac R14: 0000000000007133 R15: 00007f9f6a457fa0 [ 30.069131][ T460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.080713][ T429] ---[ end trace 12f3a01188f86f8d ]--- [ 30.101015][ T501] RBP: ffffc900031e7d88 R08: ffff8881168c7083 R09: 1ffff11022d18e10 [ 30.112855][ T530] ------------[ cut here ]------------ [ 30.119950][ T530] WARNING: CPU: 0 PID: 530 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.120973][ T501] R10: dffffc0000000000 R11: ffffed1022d18e11 R12: dffffc0000000000 [ 30.141457][ T530] Modules linked in: [ 30.145369][ T460] RSP: 002b:00007ffdb57c4e48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.148628][ T538] ------------[ cut here ]------------ [ 30.154276][ T501] R13: dffffc0000000000 R14: 0000000016187e40 R15: ffff888111c7cc00 [ 30.160649][ T530] CPU: 0 PID: 530 Comm: syz.5.84 Tainted: G B W syzkaller #0 [ 30.167371][ T460] RAX: 0000000000000000 RBX: 00007ffdb57c4f30 RCX: 00007f27845c8e59 [ 30.177533][ T538] WARNING: CPU: 0 PID: 538 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.189064][ T501] FS: 0000555575adb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.195553][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.203197][ T460] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.213646][ T538] Modules linked in: [ 30.220880][ T530] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.220993][ T501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.224917][ T538] [ 30.231387][ T460] RBP: 00000000000071a1 R08: 0000000000000001 R09: 0000000000000000 [ 30.237754][ T530] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.240643][ T501] CR2: 00007f496569e2f8 CR3: 00000001162a9000 CR4: 00000000003506a0 [ 30.248720][ T538] CPU: 0 PID: 538 Comm: syz.1.88 Tainted: G B W syzkaller #0 [ 30.275693][ T460] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffdb57c4f70 [ 30.275707][ T460] R13: 00007f2784841fac R14: 00000000000071d3 R15: 00007f2784841fa0 [ 30.285296][ T530] RSP: 0018:ffffc90002f9fd68 EFLAGS: 00010293 [ 30.292342][ T460] ---[ end trace 12f3a01188f86f8e ]--- [ 30.293319][ T501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.303161][ T530] [ 30.322355][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.334414][ T538] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.337552][ T501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.340858][ T530] RAX: ffffffff842e9627 RBX: ffff8881170f7000 RCX: ffff88811809cf00 [ 30.357005][ T501] Call Trace: [ 30.357733][ T538] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.362124][ T501] pppol2tp_release+0x150/0x2b0 [ 30.380400][ T530] RDX: 0000000000000000 RSI: 0000000016448d80 RDI: 000000000c04eb7d [ 30.385225][ T501] sock_close+0xb8/0x200 [ 30.393180][ T538] RSP: 0018:ffffc90002ee7d68 EFLAGS: 00010293 [ 30.403357][ T501] ? sock_mmap+0xa0/0xa0 [ 30.403368][ T501] __fput+0x2dc/0x730 [ 30.403377][ T501] ____fput+0x15/0x20 [ 30.403385][ T501] task_work_run+0x127/0x190 [ 30.403396][ T501] exit_to_user_mode_loop+0xcb/0xe0 [ 30.403403][ T501] exit_to_user_mode_prepare+0x76/0xa0 [ 30.403413][ T501] syscall_exit_to_user_mode+0x1d/0x40 [ 30.403420][ T501] do_syscall_64+0x3d/0x40 [ 30.403429][ T501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.403443][ T501] RIP: 0033:0x7f9d8d06ce59 [ 30.427927][ T530] RBP: ffffc90002f9fd88 R08: ffff8881170f7083 R09: 1ffff11022e1ee10 [ 30.431335][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.449675][ T530] R10: dffffc0000000000 R11: ffffed1022e1ee11 R12: dffffc0000000000 [ 30.459127][ T501] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.459139][ T501] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 30.459144][ T501] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.459149][ T501] RBP: 00000000000073e4 R08: 0000000000000001 R09: 0000000000000000 [ 30.459154][ T501] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 30.459160][ T501] R13: 00007f9d8d2e5fac R14: 000000000000741a R15: 00007f9d8d2e5fa0 [ 30.459167][ T501] ---[ end trace 12f3a01188f86f8f ]--- [ 30.460001][ T538] RAX: ffffffff842e9627 RBX: ffff888118113800 RCX: ffff8881180d0000 [ 30.544980][ T530] R13: dffffc0000000000 R14: 0000000016448d80 R15: ffff888118067800 [ 30.555472][ T538] RDX: 0000000000000000 RSI: 0000000017994b40 RDI: 000000000c04eb7d [ 30.565119][ T538] RBP: ffffc90002ee7d88 R08: ffff888118113883 R09: 1ffff11023022710 [ 30.574214][ T538] R10: dffffc0000000000 R11: ffffed1023022711 R12: dffffc0000000000 [ 30.582710][ T538] R13: dffffc0000000000 R14: 0000000017994b40 R15: ffff888118065400 [ 30.591515][ T538] FS: 00005555788c4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.600918][ T538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.610191][ T538] CR2: 00007f49652b2ff8 CR3: 0000000114da1000 CR4: 00000000003506a0 [ 30.618374][ T538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.626621][ T538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.634982][ T538] Call Trace: [ 30.639744][ T530] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.643258][ T538] pppol2tp_release+0x150/0x2b0 [ 30.657923][ T538] sock_close+0xb8/0x200 [ 30.662593][ T538] ? sock_mmap+0xa0/0xa0 [ 30.681607][ T530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.683000][ T538] __fput+0x2dc/0x730 [ 30.693431][ T530] CR2: 00007f9d8d2e7dac CR3: 000000011568b000 CR4: 00000000003506b0 [ 30.697187][ T538] ____fput+0x15/0x20 [ 30.705549][ T538] task_work_run+0x127/0x190 [ 30.710264][ T530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.716398][ T538] exit_to_user_mode_loop+0xcb/0xe0 [ 30.739450][ T538] exit_to_user_mode_prepare+0x76/0xa0 [ 30.748533][ T530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.765789][ T538] syscall_exit_to_user_mode+0x1d/0x40 [ 30.767675][ T530] Call Trace: [ 30.775761][ T653] ------------[ cut here ]------------ [ 30.780110][ T538] do_syscall_64+0x3d/0x40 [ 30.788590][ T660] ------------[ cut here ]------------ [ 30.794439][ T660] WARNING: CPU: 1 PID: 660 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.794662][ T538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.805339][ T530] pppol2tp_release+0x150/0x2b0 [ 30.810894][ T653] WARNING: CPU: 0 PID: 653 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.816523][ T660] Modules linked in: [ 30.825479][ T530] sock_close+0xb8/0x200 [ 30.827247][ T538] RIP: 0033:0x7f9f6a1dee59 [ 30.829925][ T660] [ 30.834002][ T538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.842620][ T530] ? sock_mmap+0xa0/0xa0 [ 30.864525][ T664] ------------[ cut here ]------------ [ 30.866027][ T653] Modules linked in: [ 30.870471][ T660] CPU: 1 PID: 660 Comm: syz.6.136 Tainted: G B W syzkaller #0 [ 30.874130][ T653] CPU: 0 PID: 653 Comm: syz.0.133 Tainted: G B W syzkaller #0 [ 30.882759][ T664] WARNING: CPU: 1 PID: 664 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.891709][ T538] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.902103][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.920273][ T538] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 30.920312][ T530] __fput+0x2dc/0x730 [ 30.928266][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.932268][ T530] ____fput+0x15/0x20 [ 30.942511][ T538] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.946340][ T660] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.954412][ T653] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.960676][ T664] Modules linked in: [ 30.967093][ T538] RBP: 00000000000075aa R08: 0000000000000001 R09: 0000000000000000 [ 30.971469][ T530] task_work_run+0x127/0x190 [ 30.979441][ T653] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.983642][ T660] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.003402][ T538] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 31.022902][ T664] CPU: 1 PID: 664 Comm: syz.3.138 Tainted: G B W syzkaller #0 [ 31.031004][ T653] RSP: 0018:ffffc9000375fd68 EFLAGS: 00010293 [ 31.039439][ T538] R13: 00007f9f6a457fac R14: 00000000000075dc R15: 00007f9f6a457fa0 [ 31.039507][ T530] exit_to_user_mode_loop+0xcb/0xe0 [ 31.047761][ T653] [ 31.053938][ T530] exit_to_user_mode_prepare+0x76/0xa0 [ 31.062044][ T538] ---[ end trace 12f3a01188f86f90 ]--- [ 31.066644][ T664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.072245][ T653] RAX: ffffffff842e9627 RBX: ffff88811a9fd800 RCX: ffff88811a373b40 [ 31.082154][ T530] syscall_exit_to_user_mode+0x1d/0x40 [ 31.091364][ T653] RDX: 0000000000000000 RSI: 000000002843b400 RDI: 000000000c04eb7d [ 31.097873][ T660] RSP: 0018:ffffc90003827d68 EFLAGS: 00010293 [ 31.103599][ T664] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.108558][ T653] RBP: ffffc9000375fd88 R08: ffff88811a9fd883 R09: 1ffff1102353fb10 [ 31.109862][ T660] [ 31.116189][ T653] R10: dffffc0000000000 R11: ffffed102353fb11 R12: dffffc0000000000 [ 31.124079][ T530] do_syscall_64+0x3d/0x40 [ 31.126721][ T653] R13: dffffc0000000000 R14: 000000002843b400 R15: ffff88811a8dac00 [ 31.134476][ T664] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.146872][ T653] FS: 0000555592047500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.166524][ T653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.166531][ T653] CR2: 0000200000000000 CR3: 00000001183ec000 CR4: 00000000003506b0 [ 31.166541][ T653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.166547][ T653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.166556][ T653] Call Trace: [ 31.166570][ T653] pppol2tp_release+0x150/0x2b0 [ 31.166587][ T653] sock_close+0xb8/0x200 [ 31.175791][ T530] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.190098][ T660] RAX: ffffffff842e9627 RBX: ffff888119cd5800 RCX: ffff88811a3762c0 [ 31.190105][ T660] RDX: 0000000000000000 RSI: 000000001402b7e0 RDI: 000000000c04eb7d [ 31.190111][ T660] RBP: ffffc90003827d88 R08: ffff888119cd5883 R09: 1ffff1102339ab10 [ 31.190117][ T660] R10: dffffc0000000000 R11: ffffed102339ab11 R12: dffffc0000000000 [ 31.190123][ T660] R13: dffffc0000000000 R14: 000000001402b7e0 R15: ffff88811a8d9000 2026/06/25 01:15:36 executed programs: 133 [ 31.190132][ T660] FS: 0000555575adb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.190140][ T660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.190145][ T660] CR2: 0000200000000000 CR3: 000000011a9ae000 CR4: 00000000003506b0 [ 31.190159][ T660] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.198272][ T530] RIP: 0033:0x7f5cfa1cbe59 [ 31.209507][ T653] ? sock_mmap+0xa0/0xa0 [ 31.209517][ T653] __fput+0x2dc/0x730 [ 31.209526][ T653] ____fput+0x15/0x20 [ 31.209535][ T653] task_work_run+0x127/0x190 [ 31.209544][ T653] exit_to_user_mode_loop+0xcb/0xe0 [ 31.209551][ T653] exit_to_user_mode_prepare+0x76/0xa0 [ 31.209561][ T653] syscall_exit_to_user_mode+0x1d/0x40 [ 31.209570][ T653] do_syscall_64+0x3d/0x40 [ 31.209579][ T653] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.209586][ T653] RIP: 0033:0x7f27845c8e59 [ 31.209596][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.209603][ T653] RSP: 002b:00007ffdb57c4e48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.209615][ T653] RAX: 0000000000000000 RBX: 00007ffdb57c4f30 RCX: 00007f27845c8e59 [ 31.209621][ T653] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.209627][ T653] RBP: 000000000000781d R08: 0000000000000001 R09: 0000000000000000 [ 31.209633][ T653] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffdb57c4f70 [ 31.209640][ T653] R13: 00007f2784841fac R14: 0000000000007857 R15: 00007f2784841fa0 [ 31.209647][ T653] ---[ end trace 12f3a01188f86f91 ]--- [ 31.209775][ T660] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.220058][ T530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.243794][ T660] Call Trace: [ 31.252958][ T664] RSP: 0018:ffffc900038efd68 EFLAGS: 00010293 [ 31.272748][ T660] pppol2tp_release+0x150/0x2b0 [ 31.277871][ T530] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 [ 31.312602][ T660] sock_close+0xb8/0x200 [ 31.339358][ T530] ORIG_RAX: 00000000000001b4 [ 31.345622][ T664] [ 31.349212][ T530] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 31.375134][ T664] RAX: ffffffff842e9627 RBX: ffff8881198c3000 RCX: ffff88811ad10000 [ 31.383155][ T660] ? sock_mmap+0xa0/0xa0 [ 31.387467][ T664] RDX: 0000000000000000 RSI: 0000000015c08440 RDI: 000000000c04eb7d [ 31.394650][ T660] __fput+0x2dc/0x730 [ 31.416786][ T664] RBP: ffffc900038efd88 R08: ffff8881198c3083 R09: 1ffff11023318610 [ 31.420828][ T530] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.429986][ T664] R10: dffffc0000000000 R11: ffffed1023318611 R12: dffffc0000000000 [ 31.435745][ T530] RBP: 000000000000758d R08: 0000000000000001 R09: 0000000000000000 [ 31.484595][ T664] R13: dffffc0000000000 R14: 0000000015c08440 R15: ffff88811a8d9400 [ 31.497869][ T660] ____fput+0x15/0x20 [ 31.532370][ T664] FS: 000055558a34c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.541967][ T660] task_work_run+0x127/0x190 [ 31.576787][ T753] ------------[ cut here ]------------ [ 31.585372][ T755] ------------[ cut here ]------------ [ 31.585733][ T530] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 31.590919][ T753] WARNING: CPU: 0 PID: 753 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.590928][ T753] Modules linked in: [ 31.599235][ T530] R13: 00007f5cfa444fac R14: 00000000000075c0 R15: 00007f5cfa444fa0 [ 31.610119][ T755] WARNING: CPU: 0 PID: 755 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.613014][ T660] exit_to_user_mode_loop+0xcb/0xe0 [ 31.621111][ T664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.631117][ T530] ---[ end trace 12f3a01188f86f92 ]--- [ 31.638165][ T755] Modules linked in: [ 31.642980][ T660] exit_to_user_mode_prepare+0x76/0xa0 [ 31.651998][ T753] [ 31.652010][ T753] CPU: 0 PID: 753 Comm: syz.1.182 Tainted: G B W syzkaller #0 [ 31.652014][ T753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.652033][ T753] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.657834][ T660] syscall_exit_to_user_mode+0x1d/0x40 [ 31.663069][ T755] [ 31.673813][ T660] do_syscall_64+0x3d/0x40 [ 31.678554][ T753] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.690558][ T660] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.692986][ T664] CR2: 00007ffd2f8a0d50 CR3: 000000011af3f000 CR4: 00000000003506b0 [ 31.699163][ T660] RIP: 0033:0x7f9d8d06ce59 [ 31.716910][ T753] RSP: 0018:ffffc90003b1fd68 EFLAGS: 00010293 [ 31.722643][ T660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.741143][ T755] CPU: 0 PID: 755 Comm: syz.0.183 Tainted: G B W syzkaller #0 [ 31.741149][ T755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.741166][ T755] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.741175][ T755] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.741189][ T755] RSP: 0018:ffffc90003c9fd68 EFLAGS: 00010293 [ 31.767555][ T660] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 [ 31.771114][ T753] [ 31.781248][ T660] ORIG_RAX: 00000000000001b4 [ 31.805506][ T664] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.805513][ T664] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.805516][ T664] Call Trace: [ 31.805531][ T664] pppol2tp_release+0x150/0x2b0 [ 31.805540][ T664] sock_close+0xb8/0x200 [ 31.805555][ T664] ? sock_mmap+0xa0/0xa0 [ 31.812545][ T660] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 31.817759][ T753] RAX: ffffffff842e9627 RBX: ffff8881180a8000 RCX: ffff88811dab8000 [ 31.820147][ T755] [ 31.820154][ T755] RAX: ffffffff842e9627 RBX: ffff8881180ad800 RCX: ffff88811dac62c0 [ 31.820160][ T755] RDX: 0000000000000000 RSI: 000000001d8e1f20 RDI: 000000000c04eb7d [ 31.820167][ T755] RBP: ffffc90003c9fd88 R08: ffff8881180ad883 R09: 1ffff11023015b10 [ 31.820173][ T755] R10: dffffc0000000000 R11: ffffed1023015b11 R12: dffffc0000000000 [ 31.820179][ T755] R13: dffffc0000000000 R14: 000000001d8e1f20 R15: ffff88811d074000 [ 31.820193][ T755] FS: 0000555592047500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.825452][ T753] RDX: 0000000000000000 RSI: 000000001afdf850 RDI: 000000000c04eb7d [ 31.839907][ T660] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.841319][ T664] __fput+0x2dc/0x730 [ 31.845616][ T660] RBP: 0000000000007830 R08: 0000000000000001 R09: 0000000000000000 [ 31.849210][ T753] RBP: ffffc90003b1fd88 R08: ffff8881180a8083 R09: 1ffff11023015010 [ 31.854392][ T755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.857622][ T664] ____fput+0x15/0x20 [ 31.865839][ T660] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 31.873730][ T753] R10: dffffc0000000000 R11: ffffed1023015011 R12: dffffc0000000000 [ 31.876025][ T755] CR2: 0000200000000000 CR3: 000000011e08b000 CR4: 00000000003506a0 [ 31.885542][ T753] R13: dffffc0000000000 R14: 000000001afdf850 R15: ffff88811d075800 [ 31.892012][ T660] R13: 00007f9d8d2e5fac R14: 0000000000007862 R15: 00007f9d8d2e5fa0 [ 31.908208][ T664] task_work_run+0x127/0x190 [ 31.916105][ T755] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.924791][ T753] FS: 00005555788c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.933116][ T660] ---[ end trace 12f3a01188f86f93 ]--- [ 31.941654][ T664] exit_to_user_mode_loop+0xcb/0xe0 [ 31.949843][ T755] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.953167][ T753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.962249][ T755] Call Trace: [ 31.967380][ T664] exit_to_user_mode_prepare+0x76/0xa0 [ 31.972242][ T755] pppol2tp_release+0x150/0x2b0 [ 31.981821][ T753] CR2: 00003cd8c29c5000 CR3: 000000011df10000 CR4: 00000000003506b0 [ 31.992929][ T755] sock_close+0xb8/0x200 [ 31.995251][ T664] syscall_exit_to_user_mode+0x1d/0x40 [ 32.003211][ T755] ? sock_mmap+0xa0/0xa0 [ 32.012083][ T753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.021661][ T755] __fput+0x2dc/0x730 [ 32.025547][ T753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.034297][ T755] ____fput+0x15/0x20 [ 32.039206][ T664] do_syscall_64+0x3d/0x40 [ 32.049339][ T755] task_work_run+0x127/0x190 [ 32.057699][ T753] Call Trace: [ 32.062661][ T755] exit_to_user_mode_loop+0xcb/0xe0 [ 32.066508][ T753] pppol2tp_release+0x150/0x2b0 [ 32.078879][ T755] exit_to_user_mode_prepare+0x76/0xa0 [ 32.080274][ T664] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.086132][ T755] syscall_exit_to_user_mode+0x1d/0x40 [ 32.089106][ T664] RIP: 0033:0x7f4965450e59 [ 32.105739][ T755] do_syscall_64+0x3d/0x40 [ 32.113858][ T753] sock_close+0xb8/0x200 [ 32.119203][ T755] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.121641][ T753] ? sock_mmap+0xa0/0xa0 [ 32.133350][ T755] RIP: 0033:0x7f27845c8e59 [ 32.134838][ T753] __fput+0x2dc/0x730 [ 32.141277][ T755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.145873][ T753] ____fput+0x15/0x20 [ 32.156713][ T755] RSP: 002b:00007ffdb57c4e48 EFLAGS: 00000246 [ 32.161839][ T664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.167005][ T755] ORIG_RAX: 00000000000001b4 [ 32.169546][ T664] RSP: 002b:00007ffd225d97f8 EFLAGS: 00000246 [ 32.175479][ T755] RAX: 0000000000000000 RBX: 00007ffdb57c4f30 RCX: 00007f27845c8e59 [ 32.179657][ T753] task_work_run+0x127/0x190 [ 32.185776][ T755] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.187975][ T664] ORIG_RAX: 00000000000001b4 [ 32.207747][ T755] RBP: 0000000000007b4e R08: 0000000000000001 R09: 0000000000000000 [ 32.212587][ T753] exit_to_user_mode_loop+0xcb/0xe0 [ 32.242237][ T755] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffdb57c4f70 [ 32.250549][ T664] RAX: 0000000000000000 RBX: 00007ffd225d98e0 RCX: 00007f4965450e59 [ 32.256547][ T755] R13: 00007f2784841fac R14: 0000000000007b80 R15: 00007f2784841fa0 [ 32.261714][ T753] exit_to_user_mode_prepare+0x76/0xa0 [ 32.294428][ T755] ---[ end trace 12f3a01188f86f94 ]--- [ 32.299687][ T664] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.337167][ T664] RBP: 0000000000007867 R08: 0000000000000001 R09: 0000000000000000 [ 32.342384][ T753] syscall_exit_to_user_mode+0x1d/0x40 [ 32.351797][ T664] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffd225d9920 [ 32.377931][ T664] R13: 00007f49656c9fac R14: 000000000000789a R15: 00007f49656c9fa0 [ 32.384115][ T753] do_syscall_64+0x3d/0x40 [ 32.387213][ T805] ------------[ cut here ]------------ [ 32.393640][ T753] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.398105][ T805] WARNING: CPU: 1 PID: 805 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.405806][ T753] RIP: 0033:0x7f9f6a1dee59 [ 32.413663][ T664] ---[ end trace 12f3a01188f86f95 ]--- [ 32.416537][ T753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.440052][ T805] Modules linked in: [ 32.444417][ T753] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.447598][ T805] CPU: 1 PID: 805 Comm: syz.6.208 Tainted: G B W syzkaller #0 [ 32.453964][ T753] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 32.464364][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.470628][ T753] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.488685][ T753] RBP: 0000000000007b42 R08: 0000000000000001 R09: 0000000000000000 [ 32.500176][ T753] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 32.508308][ T753] R13: 00007f9f6a457fac R14: 0000000000007b75 R15: 00007f9f6a457fa0 [ 32.516383][ T753] ---[ end trace 12f3a01188f86f96 ]--- [ 32.524831][ T805] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.531325][ T805] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.551290][ T805] RSP: 0018:ffffc90003997d68 EFLAGS: 00010293 [ 32.567850][ T805] RAX: ffffffff842e9627 RBX: ffff88811d18c800 RCX: ffff88811ac793c0 [ 32.576199][ T841] ------------[ cut here ]------------ [ 32.590322][ T805] RDX: 0000000000000000 RSI: 000000001a442660 RDI: 000000000c04eb7d [ 32.595051][ T841] WARNING: CPU: 1 PID: 841 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.601656][ T805] RBP: ffffc90003997d88 R08: ffff88811d18c883 R09: 1ffff11023a31910 [ 32.630912][ T861] ------------[ cut here ]------------ [ 32.639535][ T841] Modules linked in: [ 32.642189][ T861] WARNING: CPU: 0 PID: 861 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.653438][ T841] CPU: 1 PID: 841 Comm: syz.1.226 Tainted: G B W syzkaller #0 [ 32.653443][ T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.653458][ T841] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.653466][ T841] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.653472][ T841] RSP: 0000:ffffc90003ec7d68 EFLAGS: 00010293 [ 32.653482][ T841] RAX: ffffffff842e9627 RBX: ffff88812b5d0000 RCX: ffff888106df62c0 [ 32.653487][ T841] RDX: 0000000000000000 RSI: 000000000f2c0700 RDI: 000000000c04eb7d [ 32.653494][ T841] RBP: ffffc90003ec7d88 R08: ffff88812b5d0083 R09: 1ffff110256ba010 [ 32.653501][ T841] R10: dffffc0000000000 R11: ffffed10256ba011 R12: dffffc0000000000 [ 32.653507][ T841] R13: dffffc0000000000 R14: 000000000f2c0700 R15: ffff88812b587800 [ 32.653516][ T841] FS: 00005555788c4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.653522][ T841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.653529][ T841] CR2: 0000200000000000 CR3: 000000010ff8c000 CR4: 00000000003506a0 [ 32.653539][ T841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.653545][ T841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.653548][ T841] Call Trace: [ 32.653558][ T841] pppol2tp_release+0x150/0x2b0 [ 32.653568][ T841] sock_close+0xb8/0x200 [ 32.653577][ T841] ? sock_mmap+0xa0/0xa0 [ 32.653586][ T841] __fput+0x2dc/0x730 [ 32.653596][ T841] ____fput+0x15/0x20 [ 32.653605][ T841] task_work_run+0x127/0x190 [ 32.653615][ T841] exit_to_user_mode_loop+0xcb/0xe0 [ 32.653623][ T841] exit_to_user_mode_prepare+0x76/0xa0 [ 32.653633][ T841] syscall_exit_to_user_mode+0x1d/0x40 [ 32.653641][ T841] do_syscall_64+0x3d/0x40 [ 32.653651][ T841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.653663][ T841] RIP: 0033:0x7f9f6a1dee59 [ 32.653672][ T841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.653678][ T841] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.653689][ T841] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 32.653693][ T841] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.653706][ T841] RBP: 0000000000007f27 R08: 0000000000000001 R09: 0000000000000000 [ 32.663880][ T805] R10: dffffc0000000000 R11: ffffed1023a31911 R12: dffffc0000000000 [ 32.699022][ T841] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 32.707624][ T861] Modules linked in: [ 32.712895][ T841] R13: 00007f9f6a457fac R14: 0000000000007f59 R15: 00007f9f6a457fa0 [ 32.720912][ T861] [ 32.729403][ T841] ---[ end trace 12f3a01188f86f97 ]--- [ 32.737140][ T861] CPU: 0 PID: 861 Comm: syz.5.235 Tainted: G B W syzkaller #0 [ 32.754217][ T805] R13: dffffc0000000000 R14: 000000001a442660 R15: ffff88812060f000 [ 32.760605][ T861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.791055][ T805] FS: 0000555575adb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.793041][ T861] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.796819][ T805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.801987][ T861] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.824189][ T805] CR2: 0000200000000000 CR3: 000000011d93f000 CR4: 00000000003506a0 [ 32.825947][ T861] RSP: 0000:ffffc9000388fd68 EFLAGS: 00010293 [ 32.830458][ T805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.834714][ T861] [ 32.840702][ T805] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.864520][ T861] RAX: ffffffff842e9627 RBX: ffff88810b128000 RCX: ffff8881073d4f00 [ 32.874411][ T805] Call Trace: [ 32.888881][ T861] RDX: 0000000000000000 RSI: 000000000af6d0a0 RDI: 000000000c04eb7d [ 32.888888][ T861] RBP: ffffc9000388fd88 R08: ffff88810b128083 R09: 1ffff11021625010 [ 32.888899][ T861] R10: dffffc0000000000 R11: ffffed1021625011 R12: dffffc0000000000 [ 32.888906][ T861] R13: dffffc0000000000 R14: 000000000af6d0a0 R15: ffff888106dbec00 [ 32.888915][ T861] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.888921][ T861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.888927][ T861] CR2: 00003cd8c2a46000 CR3: 0000000106f9b000 CR4: 00000000003506b0 [ 32.888936][ T861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.888942][ T861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.888945][ T861] Call Trace: [ 32.888959][ T861] pppol2tp_release+0x150/0x2b0 [ 32.888968][ T861] sock_close+0xb8/0x200 [ 32.888975][ T861] ? sock_mmap+0xa0/0xa0 [ 32.888984][ T861] __fput+0x2dc/0x730 [ 32.888994][ T861] ____fput+0x15/0x20 [ 32.889002][ T861] task_work_run+0x127/0x190 [ 32.889013][ T861] exit_to_user_mode_loop+0xcb/0xe0 [ 32.889022][ T861] exit_to_user_mode_prepare+0x76/0xa0 [ 32.889031][ T861] syscall_exit_to_user_mode+0x1d/0x40 [ 32.889039][ T861] do_syscall_64+0x3d/0x40 [ 32.889048][ T861] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.889056][ T861] RIP: 0033:0x7f5cfa1cbe59 [ 32.910928][ T805] pppol2tp_release+0x150/0x2b0 [ 32.982289][ T861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.031508][ T805] sock_close+0xb8/0x200 [ 33.161472][ T861] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 [ 33.166740][ T805] ? sock_mmap+0xa0/0xa0 [ 33.177033][ T861] ORIG_RAX: 00000000000001b4 [ 33.186647][ T805] __fput+0x2dc/0x730 [ 33.226164][ T861] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 33.249767][ T935] ------------[ cut here ]------------ [ 33.251301][ T861] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.273080][ T861] RBP: 0000000000007f62 R08: 0000000000000001 R09: 0000000000000000 [ 33.274300][ T935] WARNING: CPU: 0 PID: 935 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.282706][ T805] ____fput+0x15/0x20 [ 33.293321][ T935] Modules linked in: [ 33.295398][ T861] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 33.299219][ T935] CPU: 0 PID: 935 Comm: syz.1.275 Tainted: G B W syzkaller #0 [ 33.307338][ T805] task_work_run+0x127/0x190 [ 33.316318][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.320877][ T861] R13: 00007f5cfa444fac R14: 0000000000007f95 R15: 00007f5cfa444fa0 [ 33.331467][ T935] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.338533][ T805] exit_to_user_mode_loop+0xcb/0xe0 [ 33.344837][ T935] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.350736][ T861] ---[ end trace 12f3a01188f86f98 ]--- [ 33.375086][ T805] exit_to_user_mode_prepare+0x76/0xa0 [ 33.381030][ T805] syscall_exit_to_user_mode+0x1d/0x40 [ 33.386501][ T805] do_syscall_64+0x3d/0x40 [ 33.395512][ T805] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.406657][ T935] RSP: 0018:ffffc90004487d68 EFLAGS: 00010293 [ 33.410130][ T805] RIP: 0033:0x7f9d8d06ce59 [ 33.421843][ T957] ------------[ cut here ]------------ [ 33.434170][ T935] RAX: ffffffff842e9627 RBX: ffff88810cef5800 RCX: ffff88810f7d8000 [ 33.439589][ T955] ------------[ cut here ]------------ [ 33.447840][ T957] WARNING: CPU: 1 PID: 957 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.457835][ T935] RDX: 0000000000000000 RSI: 00000000085d9560 RDI: 000000000c04eb7d [ 33.457843][ T935] RBP: ffffc90004487d88 R08: ffff88810cef5883 R09: 1ffff110219deb10 [ 33.457850][ T935] R10: dffffc0000000000 R11: ffffed10219deb11 R12: dffffc0000000000 [ 33.457856][ T935] R13: dffffc0000000000 R14: 00000000085d9560 R15: ffff888128fc4c00 [ 33.457866][ T935] FS: 00005555788c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.457872][ T935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.457878][ T935] CR2: 00007f49652b2ff8 CR3: 000000010dfe2000 CR4: 00000000003506b0 [ 33.457887][ T935] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.457893][ T935] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.457902][ T935] Call Trace: [ 33.466046][ T955] WARNING: CPU: 1 PID: 955 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.498843][ T935] pppol2tp_release+0x150/0x2b0 [ 33.505414][ T805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.529415][ T935] sock_close+0xb8/0x200 [ 33.532638][ T957] Modules linked in: [ 33.567070][ T935] ? sock_mmap+0xa0/0xa0 [ 33.571266][ T805] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.576954][ T935] __fput+0x2dc/0x730 [ 33.581012][ T805] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 33.601447][ T955] Modules linked in: [ 33.605338][ T955] CPU: 1 PID: 955 Comm: syz.5.284 Tainted: G B W syzkaller #0 [ 33.613925][ T955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.614150][ T935] ____fput+0x15/0x20 [ 33.624140][ T805] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.624146][ T805] RBP: 0000000000007e66 R08: 0000000000000001 R09: 0000000000000000 [ 33.624153][ T805] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 33.624159][ T805] R13: 00007f9d8d2e5fac R14: 0000000000007e99 R15: 00007f9d8d2e5fa0 [ 33.624167][ T805] ---[ end trace 12f3a01188f86f99 ]--- [ 33.625128][ T957] [ 33.644221][ T935] task_work_run+0x127/0x190 [ 33.653663][ T955] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.679245][ T935] exit_to_user_mode_loop+0xcb/0xe0 [ 33.679813][ T957] CPU: 1 PID: 957 Comm: syz.3.285 Tainted: G B W syzkaller #0 [ 33.693075][ T935] exit_to_user_mode_prepare+0x76/0xa0 [ 33.693086][ T935] syscall_exit_to_user_mode+0x1d/0x40 [ 33.693093][ T935] do_syscall_64+0x3d/0x40 [ 33.693102][ T935] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.693111][ T935] RIP: 0033:0x7f9f6a1dee59 [ 33.693120][ T935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.693126][ T935] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.693137][ T935] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 33.693142][ T935] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.693148][ T935] RBP: 00000000000081c9 R08: 0000000000000001 R09: 0000000000000000 [ 33.693154][ T935] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 33.693161][ T935] R13: 00007f9f6a457fac R14: 0000000000008201 R15: 00007f9f6a457fa0 [ 33.693169][ T935] ---[ end trace 12f3a01188f86f9a ]--- [ 33.762950][ T955] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.762964][ T955] RSP: 0018:ffffc9000411fd68 EFLAGS: 00010293 [ 33.772769][ T957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.812363][ T955] [ 33.820623][ T957] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.837283][ T955] RAX: ffffffff842e9627 RBX: ffff88811dc53000 RCX: ffff88812bb4cf00 [ 33.840058][ T957] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.864880][ T955] RDX: 0000000000000000 RSI: 0000000029cf5e20 RDI: 000000000c04eb7d [ 33.864887][ T955] RBP: ffffc9000411fd88 R08: ffff88811dc53083 R09: 1ffff11023b8a610 [ 33.864893][ T955] R10: dffffc0000000000 R11: ffffed1023b8a611 R12: dffffc0000000000 [ 33.864899][ T955] R13: dffffc0000000000 R14: 0000000029cf5e20 R15: ffff88810aba6c00 [ 33.864907][ T955] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.864913][ T955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.864918][ T955] CR2: 00007f9f6a459dac CR3: 000000011d8e4000 CR4: 00000000003506b0 [ 33.864927][ T955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.864933][ T955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.864936][ T955] Call Trace: [ 33.864950][ T955] pppol2tp_release+0x150/0x2b0 [ 33.864959][ T955] sock_close+0xb8/0x200 [ 33.864967][ T955] ? sock_mmap+0xa0/0xa0 [ 33.864977][ T955] __fput+0x2dc/0x730 [ 33.864987][ T955] ____fput+0x15/0x20 [ 33.864996][ T955] task_work_run+0x127/0x190 [ 33.865007][ T955] exit_to_user_mode_loop+0xcb/0xe0 [ 33.865015][ T955] exit_to_user_mode_prepare+0x76/0xa0 [ 33.865025][ T955] syscall_exit_to_user_mode+0x1d/0x40 [ 33.873874][ T957] RSP: 0018:ffffc900044a7d68 EFLAGS: 00010293 [ 33.913251][ T955] do_syscall_64+0x3d/0x40 [ 33.921286][ T957] [ 33.961671][ T955] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.967336][ T957] RAX: ffffffff842e9627 RBX: ffff88811dc57800 RCX: ffff88812bb4a780 [ 33.989005][ T955] RIP: 0033:0x7f5cfa1cbe59 [ 33.996077][ T957] RDX: 0000000000000000 RSI: 000000000ac45260 RDI: 000000000c04eb7d [ 34.009935][ T955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.009941][ T955] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.009953][ T955] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 34.009958][ T955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.009964][ T955] RBP: 000000000000826f R08: 0000000000000001 R09: 0000000000000000 [ 34.009970][ T955] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 34.009976][ T955] R13: 00007f5cfa444fac R14: 00000000000082a1 R15: 00007f5cfa444fa0 [ 34.009984][ T955] ---[ end trace 12f3a01188f86f9b ]--- [ 34.096839][ T957] RBP: ffffc900044a7d88 R08: ffff88811dc57883 R09: 1ffff11023b8af10 [ 34.118604][ T957] R10: dffffc0000000000 R11: ffffed1023b8af11 R12: dffffc0000000000 [ 34.126582][ T957] R13: dffffc0000000000 R14: 000000000ac45260 R15: ffff88812b09ec00 [ 34.158154][ T957] FS: 000055558a34c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.167331][ T957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.199487][ T997] ------------[ cut here ]------------ [ 34.203957][ T957] CR2: 0000001b33e63fff CR3: 000000010ff65000 CR4: 00000000003506a0 [ 34.211793][ T997] WARNING: CPU: 0 PID: 997 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.215766][ T957] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.226908][ T997] Modules linked in: [ 34.238397][ T957] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.242244][ T997] CPU: 0 PID: 997 Comm: syz.0.280 Tainted: G B W syzkaller #0 [ 34.249607][ T957] Call Trace: [ 34.256235][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.264024][ T957] pppol2tp_release+0x150/0x2b0 [ 34.273334][ T957] sock_close+0xb8/0x200 [ 34.276629][ T997] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.283138][ T957] ? sock_mmap+0xa0/0xa0 [ 34.288249][ T997] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.292722][ T957] __fput+0x2dc/0x730 [ 34.311403][ T997] RSP: 0018:ffffc90000c57d68 EFLAGS: 00010293 [ 34.317262][ T957] ____fput+0x15/0x20 [ 34.322000][ T997] RAX: ffffffff842e9627 RBX: ffff88812ce73000 RCX: ffff888110e493c0 [ 34.325892][ T957] task_work_run+0x127/0x190 [ 34.334800][ T997] RDX: 0000000000000000 RSI: 0000000010e38780 RDI: 000000000c04eb7d [ 34.342828][ T957] exit_to_user_mode_loop+0xcb/0xe0 [ 34.342836][ T957] exit_to_user_mode_prepare+0x76/0xa0 [ 34.342846][ T957] syscall_exit_to_user_mode+0x1d/0x40 [ 34.342854][ T957] do_syscall_64+0x3d/0x40 [ 34.342864][ T957] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.342873][ T957] RIP: 0033:0x7f4965450e59 [ 34.342883][ T957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.342889][ T957] RSP: 002b:00007ffd225d97f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.342901][ T957] RAX: 0000000000000000 RBX: 00007ffd225d98e0 RCX: 00007f4965450e59 [ 34.342913][ T957] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.354968][ T997] RBP: ffffc90000c57d88 R08: ffff88812ce73083 R09: 1ffff110259ce610 [ 34.365237][ T957] RBP: 000000000000827a R08: 0000000000000001 R09: 0000000000000000 [ 34.373540][ T997] R10: dffffc0000000000 R11: ffffed10259ce611 R12: dffffc0000000000 [ 34.377933][ T957] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffd225d9920 [ 34.397153][ T997] R13: dffffc0000000000 R14: 0000000010e38780 R15: ffff88811099cc00 [ 34.406580][ T957] R13: 00007f49656c9fac R14: 00000000000082ad R15: 00007f49656c9fa0 [ 34.414426][ T997] FS: 0000555592047500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.423299][ T957] ---[ end trace 12f3a01188f86f9c ]--- [ 34.429842][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.487485][ T997] CR2: 00007f9d8d11f270 CR3: 0000000126a2d000 CR4: 00000000003506b0 [ 34.502619][ T1048] ------------[ cut here ]------------ [ 34.508100][ T997] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.516306][ T1048] WARNING: CPU: 0 PID: 1048 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.527672][ T997] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.536211][ T1048] Modules linked in: [ 34.540230][ T1048] CPU: 0 PID: 1048 Comm: syz.5.331 Tainted: G B W syzkaller #0 [ 34.549872][ T997] Call Trace: [ 34.553172][ T997] pppol2tp_release+0x150/0x2b0 [ 34.564311][ T997] sock_close+0xb8/0x200 [ 34.569654][ T1048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.581580][ T1070] ------------[ cut here ]------------ [ 34.590042][ T1067] ------------[ cut here ]------------ [ 34.595515][ T1067] WARNING: CPU: 1 PID: 1067 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.598484][ T997] ? sock_mmap+0xa0/0xa0 [ 34.609916][ T1070] WARNING: CPU: 0 PID: 1070 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.620050][ T1048] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.628563][ T1048] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.631147][ T1067] Modules linked in: [ 34.648249][ T997] __fput+0x2dc/0x730 [ 34.662863][ T1070] Modules linked in: [ 34.665143][ T1067] [ 34.666811][ T997] ____fput+0x15/0x20 [ 34.674185][ T1070] CPU: 0 PID: 1070 Comm: syz.1.341 Tainted: G B W syzkaller #0 [ 34.676391][ T1067] CPU: 1 PID: 1067 Comm: syz.3.340 Tainted: G B W syzkaller #0 [ 34.682914][ T997] task_work_run+0x127/0x190 [ 34.696817][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.699665][ T1067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.706936][ T1048] RSP: 0018:ffffc90000d97d68 EFLAGS: 00010293 [ 34.716971][ T997] exit_to_user_mode_loop+0xcb/0xe0 [ 34.724605][ T1067] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.735626][ T1067] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.739433][ T1070] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.755659][ T1067] RSP: 0018:ffffc90000ecfd68 EFLAGS: 00010293 [ 34.761711][ T997] exit_to_user_mode_prepare+0x76/0xa0 [ 34.762059][ T1067] [ 34.767777][ T1048] [ 34.767786][ T1048] RAX: ffffffff842e9627 RBX: ffff888111e70800 RCX: ffff888128c68000 [ 34.767799][ T1048] RDX: 0000000000000000 RSI: 000000000fe37880 RDI: 000000000c04eb7d [ 34.793417][ T1067] RAX: ffffffff842e9627 RBX: ffff888112900800 RCX: ffff88810f06bb40 [ 34.802210][ T997] syscall_exit_to_user_mode+0x1d/0x40 [ 34.804850][ T1067] RDX: 0000000000000000 RSI: 000000000ac70d00 RDI: 000000000c04eb7d [ 34.807697][ T997] do_syscall_64+0x3d/0x40 [ 34.820100][ T1070] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.824441][ T1067] RBP: ffffc90000ecfd88 R08: ffff888112900883 R09: 1ffff11022520110 [ 34.839869][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.853650][ T1048] RBP: ffffc90000d97d88 R08: ffff888111e70883 R09: 1ffff110223ce110 [ 34.855738][ T1067] R10: dffffc0000000000 R11: ffffed1022520111 R12: dffffc0000000000 [ 34.862740][ T997] RIP: 0033:0x7f27845c8e59 [ 34.870088][ T1067] R13: dffffc0000000000 R14: 000000000ac70d00 R15: ffff888113031c00 [ 34.874159][ T1048] R10: dffffc0000000000 R11: ffffed10223ce111 R12: dffffc0000000000 [ 34.882733][ T1067] FS: 000055558a34c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.890120][ T1070] RSP: 0018:ffffc90000d67d68 EFLAGS: 00010293 [ 34.898999][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.899974][ T1067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.905094][ T997] RSP: 002b:00007ffdb57c4e48 EFLAGS: 00000246 [ 34.925377][ T1067] CR2: 00007f9d8d11f270 CR3: 0000000111e08000 CR4: 00000000003506a0 [ 34.931416][ T1070] [ 34.937657][ T1067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.945506][ T1048] R13: dffffc0000000000 R14: 000000000fe37880 R15: ffff888111eac400 [ 34.963680][ T1070] RAX: ffffffff842e9627 RBX: ffff888112ae8000 RCX: ffff888129d462c0 [ 34.963687][ T1067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.963697][ T1067] Call Trace: [ 34.971745][ T997] ORIG_RAX: 00000000000001b4 [ 34.987599][ T1048] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.996615][ T1070] RDX: 0000000000000000 RSI: 000000000fe37600 RDI: 000000000c04eb7d [ 34.997825][ T1067] pppol2tp_release+0x150/0x2b0 [ 35.005659][ T1048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.010819][ T1067] sock_close+0xb8/0x200 [ 35.016233][ T1070] RBP: ffffc90000d67d88 R08: ffff888112ae8083 R09: 1ffff1102255d010 [ 35.028478][ T1048] CR2: 0000200000000000 CR3: 0000000115c46000 CR4: 00000000003506b0 [ 35.036477][ T1048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.044486][ T997] RAX: 0000000000000000 RBX: 00007ffdb57c4f30 RCX: 00007f27845c8e59 [ 35.044680][ T1067] ? sock_mmap+0xa0/0xa0 [ 35.052482][ T1048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.064677][ T997] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.064727][ T1067] __fput+0x2dc/0x730 [ 35.072757][ T1070] R10: dffffc0000000000 R11: ffffed102255d011 R12: dffffc0000000000 [ 35.076887][ T1067] ____fput+0x15/0x20 [ 35.084780][ T997] RBP: 000000000000857d R08: 0000000000000001 R09: 0000000000000000 [ 35.096535][ T997] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffdb57c4f70 [ 35.100696][ T1067] task_work_run+0x127/0x190 [ 35.104635][ T1048] Call Trace: [ 35.109469][ T1067] exit_to_user_mode_loop+0xcb/0xe0 [ 35.112454][ T1070] R13: dffffc0000000000 R14: 000000000fe37600 R15: ffff888111eb4400 [ 35.117669][ T1067] exit_to_user_mode_prepare+0x76/0xa0 [ 35.125614][ T1048] pppol2tp_release+0x150/0x2b0 [ 35.131710][ T1067] syscall_exit_to_user_mode+0x1d/0x40 [ 35.135932][ T1048] sock_close+0xb8/0x200 [ 35.142339][ T1067] do_syscall_64+0x3d/0x40 [ 35.145686][ T1070] FS: 00005555788c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.158948][ T1048] ? sock_mmap+0xa0/0xa0 [ 35.163200][ T997] R13: 00007f2784841fac R14: 00000000000085af R15: 00007f2784841fa0 [ 35.171229][ T1048] __fput+0x2dc/0x730 [ 35.173365][ T1067] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.175228][ T1048] ____fput+0x15/0x20 [ 35.181735][ T1067] RIP: 0033:0x7f4965450e59 [ 35.185105][ T997] ---[ end trace 12f3a01188f86f9d ]--- [ 35.194970][ T1070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.197427][ T1067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.218577][ T1048] task_work_run+0x127/0x190 [ 35.224815][ T1067] RSP: 002b:00007ffd225d97f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.231320][ T1070] CR2: 00007f9d8d11f270 CR3: 000000010f973000 CR4: 00000000003506b0 [ 35.236709][ T1067] RAX: 0000000000000000 RBX: 00007ffd225d98e0 RCX: 00007f4965450e59 [ 35.243251][ T1048] exit_to_user_mode_loop+0xcb/0xe0 [ 35.251762][ T1067] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.261135][ T1048] exit_to_user_mode_prepare+0x76/0xa0 [ 35.265223][ T1067] RBP: 0000000000008702 R08: 0000000000000001 R09: 0000000000000000 [ 35.268953][ T1070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.278198][ T1067] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffd225d9920 [ 35.291085][ T1048] syscall_exit_to_user_mode+0x1d/0x40 [ 35.294377][ T1067] R13: 00007f49656c9fac R14: 0000000000008734 R15: 00007f49656c9fa0 [ 35.298350][ T1048] do_syscall_64+0x3d/0x40 [ 35.307444][ T1067] ---[ end trace 12f3a01188f86f9e ]--- [ 35.316808][ T1070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.320959][ T1048] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.331527][ T1048] RIP: 0033:0x7f5cfa1cbe59 [ 35.334593][ T1070] Call Trace: [ 35.336329][ T1048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.340974][ T1070] pppol2tp_release+0x150/0x2b0 [ 35.359783][ T1048] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.364379][ T1070] sock_close+0xb8/0x200 [ 35.372730][ T1048] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 35.384408][ T1070] ? sock_mmap+0xa0/0xa0 [ 35.384750][ T1048] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.404312][ T1134] ------------[ cut here ]------------ [ 35.409922][ T1048] RBP: 00000000000086b3 R08: 0000000000000001 R09: 0000000000000000 [ 35.417554][ T1070] __fput+0x2dc/0x730 [ 35.417993][ T1134] WARNING: CPU: 1 PID: 1134 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.431145][ T1070] ____fput+0x15/0x20 [ 35.432242][ T1048] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 35.442947][ T1070] task_work_run+0x127/0x190 [ 35.444087][ T1134] Modules linked in: [ 35.452450][ T1134] CPU: 1 PID: 1134 Comm: syz.3.373 Tainted: G B W syzkaller #0 [ 35.456260][ T1070] exit_to_user_mode_loop+0xcb/0xe0 [ 35.461644][ T1048] R13: 00007f5cfa444fac R14: 00000000000086e5 R15: 00007f5cfa444fa0 [ 35.474594][ T1070] exit_to_user_mode_prepare+0x76/0xa0 [ 35.475498][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.481240][ T1070] syscall_exit_to_user_mode+0x1d/0x40 [ 35.490445][ T1048] ---[ end trace 12f3a01188f86f9f ]--- [ 35.496201][ T1070] do_syscall_64+0x3d/0x40 [ 35.501374][ T1134] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.513750][ T1134] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 35.523473][ T1070] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.536712][ T1134] RSP: 0018:ffffc90000da7d68 EFLAGS: 00010293 [ 35.540536][ T1070] RIP: 0033:0x7f9f6a1dee59 [ 35.546362][ T1134] [ 35.553351][ T1070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.553859][ T1155] ------------[ cut here ]------------ [ 35.574126][ T1070] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 [ 35.579556][ T1134] RAX: ffffffff842e9627 RBX: ffff888114160000 RCX: ffff8881136bcf00 [ 35.587993][ T1070] ORIG_RAX: 00000000000001b4 [ 35.595512][ T1134] RDX: 0000000000000000 RSI: 00000000128dc9c0 RDI: 000000000c04eb7d [ 35.603845][ T1070] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 35.606593][ T1134] RBP: ffffc90000da7d88 R08: ffff888114160083 R09: 1ffff1102282c010 [ 35.614588][ T1070] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.622503][ T1155] WARNING: CPU: 1 PID: 1155 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.631462][ T1070] RBP: 0000000000008702 R08: 0000000000000001 R09: 0000000000000000 [ 35.640680][ T1134] R10: dffffc0000000000 R11: ffffed102282c011 R12: dffffc0000000000 [ 35.648811][ T1070] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 35.656898][ T1134] R13: dffffc0000000000 R14: 00000000128dc9c0 R15: ffff88811d073400 [ 35.672341][ T1070] R13: 00007f9f6a457fac R14: 0000000000008734 R15: 00007f9f6a457fa0 [ 35.672676][ T1155] Modules linked in: [ 35.680502][ T1134] FS: 000055558a34c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.680666][ T1070] ---[ end trace 12f3a01188f86fa0 ]--- [ 35.686449][ T1155] [ 35.701402][ T1134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.714232][ T1134] CR2: 00007f9d8d11f270 CR3: 0000000110fe0000 CR4: 00000000003506a0 [ 35.723523][ T1134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.738682][ T1155] CPU: 1 PID: 1155 Comm: syz.5.382 Tainted: G B W syzkaller #0 [ 35.747456][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.748171][ T1174] ------------[ cut here ]------------ [ 35.757967][ T1134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.766203][ T1174] WARNING: CPU: 0 PID: 1174 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.771332][ T1155] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.787692][ T1134] Call Trace: [ 35.790649][ T1174] Modules linked in: [ 35.791191][ T1134] pppol2tp_release+0x150/0x2b0 [ 35.799882][ T1134] sock_close+0xb8/0x200 [ 35.802163][ T1174] CPU: 0 PID: 1174 Comm: syz.6.392 Tainted: G B W syzkaller #0 [ 35.804213][ T1134] ? sock_mmap+0xa0/0xa0 [ 35.813124][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.818217][ T1155] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 35.834377][ T1174] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.846976][ T1134] __fput+0x2dc/0x730 [ 35.857301][ T1134] ____fput+0x15/0x20 [ 35.861469][ T1134] task_work_run+0x127/0x190 [ 35.868354][ T1134] exit_to_user_mode_loop+0xcb/0xe0 [ 35.868385][ T1186] ------------[ cut here ]------------ [ 35.873740][ T1134] exit_to_user_mode_prepare+0x76/0xa0 [ 35.884807][ T1174] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 35.886981][ T1155] RSP: 0018:ffffc9000126fd68 EFLAGS: 00010293 [ 35.904673][ T1134] syscall_exit_to_user_mode+0x1d/0x40 [ 35.911583][ T1186] WARNING: CPU: 0 PID: 1186 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.917532][ T1134] do_syscall_64+0x3d/0x40 [ 35.926796][ T1186] Modules linked in: [ 35.931141][ T1155] [ 35.934964][ T1174] RSP: 0018:ffffc90001367d68 EFLAGS: 00010293 [ 35.936988][ T1155] RAX: ffffffff842e9627 RBX: ffff8881284be800 RCX: ffff888115602780 [ 35.938921][ T1174] [ 35.943401][ T1155] RDX: 0000000000000000 RSI: 00000000284b8000 RDI: 000000000c04eb7d [ 35.957964][ T1186] CPU: 0 PID: 1186 Comm: syz.0.398 Tainted: G B W syzkaller #0 [ 35.961648][ T1134] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.970543][ T1174] RAX: ffffffff842e9627 RBX: ffff888115db6800 RCX: ffff888115ec4f00 [ 35.976290][ T1134] RIP: 0033:0x7f4965450e59 [ 35.988626][ T1155] RBP: ffffc9000126fd88 R08: ffff8881284be883 R09: 1ffff11025097d10 [ 35.996635][ T1155] R10: dffffc0000000000 R11: ffffed1025097d11 R12: dffffc0000000000 [ 35.999939][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.007417][ T1155] R13: dffffc0000000000 R14: 00000000284b8000 R15: ffff8881095d4400 [ 36.020410][ T1174] RDX: 0000000000000000 RSI: 00000000163f0000 RDI: 000000000c04eb7d [ 36.024795][ T1134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.030799][ T1186] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.050638][ T1155] FS: 000055558081e500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.056906][ T1174] RBP: ffffc90001367d88 R08: ffff888115db6883 R09: 1ffff11022bb6d10 [ 36.065739][ T1134] RSP: 002b:00007ffd225d97f8 EFLAGS: 00000246 [ 36.073609][ T1155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.074485][ T1174] R10: dffffc0000000000 R11: ffffed1022bb6d11 R12: dffffc0000000000 [ 36.080132][ T1134] ORIG_RAX: 00000000000001b4 [ 36.086802][ T1186] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.099547][ T1155] CR2: 00007f9f6a0b0c00 CR3: 000000010ae57000 CR4: 00000000003506a0 [ 36.118939][ T1174] R13: dffffc0000000000 R14: 00000000163f0000 R15: ffff888115acfc00 [ 36.134862][ T1174] FS: 0000555575adb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.143954][ T1134] RAX: 0000000000000000 RBX: 00007ffd225d98e0 RCX: 00007f4965450e59 [ 36.152190][ T1155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.152319][ T1186] RSP: 0018:ffffc90000dffd68 EFLAGS: 00010293 [ 36.160217][ T1174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.160482][ T1134] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.173619][ T1186] [ 36.181453][ T1155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.184080][ T1174] CR2: 00003cd8c2adc000 CR3: 000000012b76c000 CR4: 00000000003506b0 [ 36.191477][ T1155] Call Trace: [ 36.202684][ T1134] RBP: 0000000000008a38 R08: 0000000000000001 R09: 0000000000000000 [ 36.210444][ T1186] RAX: ffffffff842e9627 RBX: ffff88810ad49000 RCX: ffff8881160ee2c0 [ 36.212240][ T1155] pppol2tp_release+0x150/0x2b0 [ 36.218696][ T1186] RDX: 0000000000000000 RSI: 000000000dc5c510 RDI: 000000000c04eb7d [ 36.224605][ T1134] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffd225d9920 [ 36.237971][ T1174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.239834][ T1155] sock_close+0xb8/0x200 [ 36.247676][ T1186] RBP: ffffc90000dffd88 R08: ffff88810ad49083 R09: 1ffff110215a9210 [ 36.252009][ T1155] ? sock_mmap+0xa0/0xa0 [ 36.260971][ T1174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.264451][ T1134] R13: 00007f49656c9fac R14: 0000000000008a6b R15: 00007f49656c9fa0 [ 36.272533][ T1186] R10: dffffc0000000000 R11: ffffed10215a9211 R12: dffffc0000000000 [ 36.280337][ T1155] __fput+0x2dc/0x730 [ 36.288249][ T1174] Call Trace: [ 36.292226][ T1134] ---[ end trace 12f3a01188f86fa1 ]--- [ 36.295501][ T1186] R13: dffffc0000000000 R14: 000000000dc5c510 R15: ffff88811629c000 [ 36.301827][ T1155] ____fput+0x15/0x20 [ 36.313842][ T1155] task_work_run+0x127/0x190 [ 36.318577][ T1155] exit_to_user_mode_loop+0xcb/0xe0 [ 36.321253][ T1174] pppol2tp_release+0x150/0x2b0 [ 36.325444][ T1155] exit_to_user_mode_prepare+0x76/0xa0 [ 36.328658][ T1174] sock_close+0xb8/0x200 [ 36.335340][ T1155] syscall_exit_to_user_mode+0x1d/0x40 [ 36.338765][ T1186] FS: 0000555592047500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.346315][ T1155] do_syscall_64+0x3d/0x40 [ 36.357032][ T1174] ? sock_mmap+0xa0/0xa0 [ 36.361363][ T1155] entry_SYSCALL_64_after_hwframe+0x61/0xcb 2026/06/25 01:15:41 executed programs: 402 [ 36.361371][ T1155] RIP: 0033:0x7f5cfa1cbe59 [ 36.361380][ T1155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.361386][ T1155] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 36.361399][ T1155] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 36.361406][ T1155] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.361413][ T1155] RBP: 0000000000008ac7 R08: 0000000000000001 R09: 0000000000000000 [ 36.361419][ T1155] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 36.361427][ T1155] R13: 00007f5cfa444fac R14: 0000000000008af9 R15: 00007f5cfa444fa0 [ 36.361435][ T1155] ---[ end trace 12f3a01188f86fa2 ]--- [ 36.367266][ T1186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.376670][ T1174] __fput+0x2dc/0x730 [ 36.399249][ T1186] CR2: 00007ffd2f8a1e80 CR3: 000000012b487000 CR4: 00000000003506b0 [ 36.465110][ T1174] ____fput+0x15/0x20 [ 36.467492][ T1186] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.475452][ T1174] task_work_run+0x127/0x190 [ 36.481023][ T1186] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.492447][ T1235] ------------[ cut here ]------------ [ 36.497900][ T1235] refcount_t: underflow; use-after-free. [ 36.510718][ T1243] ------------[ cut here ]------------ [ 36.515536][ T1174] exit_to_user_mode_loop+0xcb/0xe0 [ 36.516211][ T1243] WARNING: CPU: 1 PID: 1243 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.522477][ T1245] ------------[ cut here ]------------ [ 36.531646][ T1186] Call Trace: [ 36.537015][ T1174] exit_to_user_mode_prepare+0x76/0xa0 [ 36.540546][ T1235] WARNING: CPU: 1 PID: 1235 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 36.546138][ T1174] syscall_exit_to_user_mode+0x1d/0x40 [ 36.555131][ T1243] Modules linked in: [ 36.560632][ T1186] pppol2tp_release+0x150/0x2b0 [ 36.560947][ T1245] WARNING: CPU: 0 PID: 1245 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.564533][ T1186] sock_close+0xb8/0x200 [ 36.569542][ T1174] do_syscall_64+0x3d/0x40 [ 36.579638][ T1243] [ 36.583937][ T1245] Modules linked in: [ 36.588098][ T1243] CPU: 1 PID: 1243 Comm: syz.3.428 Tainted: G B W syzkaller #0 [ 36.590512][ T1245] [ 36.594290][ T1235] Modules linked in: [ 36.594303][ T1235] CPU: 1 PID: 1235 Comm: syz.1.423 Tainted: G B W syzkaller #0 [ 36.594314][ T1235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.603266][ T1174] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.605353][ T1235] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 36.609351][ T1174] RIP: 0033:0x7f9d8d06ce59 [ 36.617877][ T1186] ? sock_mmap+0xa0/0xa0 [ 36.617894][ T1186] __fput+0x2dc/0x730 [ 36.628166][ T1245] CPU: 0 PID: 1245 Comm: syz.5.426 Tainted: G B W syzkaller #0 [ 36.633831][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.633850][ T1243] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.640167][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.644382][ T1235] Code: 04 01 48 c7 c7 20 45 40 85 e8 5c a4 3a 02 0f 0b eb c3 e8 33 94 26 ff c6 05 51 81 82 04 01 48 c7 c7 80 45 40 85 e8 40 a4 3a 02 <0f> 0b eb a7 e8 17 94 26 ff c6 05 32 81 82 04 01 48 c7 c7 a0 44 40 [ 36.661301][ T1174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.671345][ T1243] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.677852][ T1245] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.687730][ T1186] ____fput+0x15/0x20 [ 36.707524][ T1174] RSP: 002b:00007ffc27e129d8 EFLAGS: 00000246 [ 36.726940][ T1235] RSP: 0018:ffffc900015cfd18 EFLAGS: 00010246 [ 36.746678][ T1245] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.762868][ T1243] RSP: 0018:ffffc9000127fd68 EFLAGS: 00010293 [ 36.762879][ T1243] RAX: ffffffff842e9627 RBX: ffff8881175a7000 RCX: ffff88810de93b40 [ 36.762884][ T1243] RDX: 0000000000000000 RSI: 00000000139bbbc0 RDI: 000000000c04eb7d [ 36.762890][ T1243] RBP: ffffc9000127fd88 R08: ffff8881175a7083 R09: 1ffff11022eb4e10 [ 36.762903][ T1243] R10: dffffc0000000000 R11: ffffed1022eb4e11 R12: dffffc0000000000 [ 36.769280][ T1245] RSP: 0018:ffffc9000164fd68 EFLAGS: 00010293 [ 36.802603][ T1186] task_work_run+0x127/0x190 [ 36.810756][ T1174] ORIG_RAX: 00000000000001b4 [ 36.818545][ T1235] [ 36.826658][ T1174] RAX: 0000000000000000 RBX: 00007ffc27e12ac0 RCX: 00007f9d8d06ce59 [ 36.832561][ T1243] R13: dffffc0000000000 R14: 00000000139bbbc0 R15: ffff8881174ad800 [ 36.837272][ T1245] [ 36.841781][ T1186] exit_to_user_mode_loop+0xcb/0xe0 [ 36.844195][ T1245] RAX: ffffffff842e9627 RBX: ffff8881170f7800 RCX: ffff888117a5a780 [ 36.852069][ T1243] FS: 000055558a34c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.860166][ T1174] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.862372][ T1235] RAX: a3abb6bf6f7f1000 RBX: 0000000000000003 RCX: ffff888117a58000 [ 36.867512][ T1174] RBP: 0000000000008b8b R08: 0000000000000001 R09: 0000000000000000 [ 36.875494][ T1186] exit_to_user_mode_prepare+0x76/0xa0 [ 36.884620][ T1245] RDX: 0000000000000000 RSI: 0000000011e5c300 RDI: 000000000c04eb7d [ 36.892404][ T1243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.900487][ T1245] RBP: ffffc9000164fd88 R08: ffff8881170f7883 R09: 1ffff11022e1ef10 [ 36.908296][ T1235] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 36.913877][ T1174] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc27e12b00 [ 36.921735][ T1186] syscall_exit_to_user_mode+0x1d/0x40 [ 36.928438][ T1245] R10: dffffc0000000000 R11: ffffed1022e1ef11 R12: dffffc0000000000 [ 36.936250][ T1243] CR2: 0000200000000000 CR3: 000000011568c000 CR4: 00000000003506a0 [ 36.944329][ T1174] R13: 00007f9d8d2e5fac R14: 0000000000008bbd R15: 00007f9d8d2e5fa0 [ 36.952161][ T1235] RBP: ffffc900015cfd28 R08: ffffc900015cf6a7 R09: fffff520002b9f08 [ 36.957737][ T1245] R13: dffffc0000000000 R14: 0000000011e5c300 R15: ffff888117c4d800 [ 36.965566][ T1186] do_syscall_64+0x3d/0x40 [ 36.973655][ T1174] ---[ end trace 12f3a01188f86fa3 ]--- [ 36.981496][ T1243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.989606][ T1245] FS: 000055558081e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.997408][ T1235] R10: dffffc0000000000 R11: fffff520002b9ed5 R12: 0000000000000000 [ 37.009916][ T1245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.015279][ T1186] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.040582][ T1245] CR2: 0000200000000000 CR3: 0000000126453000 CR4: 00000000003506b0 [ 37.044673][ T1243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.053834][ T1245] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.061449][ T1243] Call Trace: [ 37.068958][ T1186] RIP: 0033:0x7f27845c8e59 [ 37.071847][ T1243] pppol2tp_release+0x150/0x2b0 [ 37.076233][ T1186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.081065][ T1243] sock_close+0xb8/0x200 [ 37.081079][ T1243] ? sock_mmap+0xa0/0xa0 [ 37.100832][ T1235] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 37.105159][ T1243] __fput+0x2dc/0x730 [ 37.109695][ T1235] FS: 00005555788c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.117149][ T1243] ____fput+0x15/0x20 [ 37.127680][ T1245] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.131545][ T1243] task_work_run+0x127/0x190 [ 37.134122][ T1245] Call Trace: [ 37.142908][ T1243] exit_to_user_mode_loop+0xcb/0xe0 [ 37.151867][ T1235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.156311][ T1243] exit_to_user_mode_prepare+0x76/0xa0 [ 37.161781][ T1186] RSP: 002b:00007ffdb57c4e48 EFLAGS: 00000246 [ 37.167069][ T1245] pppol2tp_release+0x150/0x2b0 [ 37.174391][ T1243] syscall_exit_to_user_mode+0x1d/0x40 [ 37.179276][ T1186] ORIG_RAX: 00000000000001b4 [ 37.188197][ T1186] RAX: 0000000000000000 RBX: 00007ffdb57c4f30 RCX: 00007f27845c8e59 [ 37.196375][ T1235] CR2: 0000200000000000 CR3: 0000000117a21000 CR4: 00000000003506b0 [ 37.204521][ T1245] sock_close+0xb8/0x200 [ 37.206106][ T1243] do_syscall_64+0x3d/0x40 [ 37.209111][ T1245] ? sock_mmap+0xa0/0xa0 [ 37.217496][ T1235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.220880][ T1243] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.225905][ T1186] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.232352][ T1243] RIP: 0033:0x7f4965450e59 [ 37.239559][ T1245] __fput+0x2dc/0x730 [ 37.244115][ T1243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.247788][ T1235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.275573][ T1245] ____fput+0x15/0x20 [ 37.279702][ T1186] RBP: 0000000000008c04 R08: 0000000000000001 R09: 0000000000000000 [ 37.281405][ T1243] RSP: 002b:00007ffd225d97f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.287744][ T1245] task_work_run+0x127/0x190 [ 37.300920][ T1186] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffdb57c4f70 [ 37.309149][ T1245] exit_to_user_mode_loop+0xcb/0xe0 [ 37.311338][ T1243] RAX: 0000000000000000 RBX: 00007ffd225d98e0 RCX: 00007f4965450e59 [ 37.314415][ T1186] R13: 00007f2784841fac R14: 0000000000008c36 R15: 00007f2784841fa0 [ 37.330558][ T1245] exit_to_user_mode_prepare+0x76/0xa0 [ 37.336034][ T1245] syscall_exit_to_user_mode+0x1d/0x40 [ 37.341687][ T1235] Call Trace: [ 37.344971][ T1235] l2tp_session_put+0xcb/0x1a0 [ 37.349878][ T1245] do_syscall_64+0x3d/0x40 [ 37.351211][ T1243] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.354427][ T1186] ---[ end trace 12f3a01188f86fa4 ]--- [ 37.362867][ T1243] RBP: 0000000000008e8b R08: 0000000000000001 R09: 0000000000000000 [ 37.367965][ T1235] l2tp_session_delete+0x3a9/0x4a0 [ 37.382300][ T1245] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.384656][ T1243] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffd225d9920 [ 37.388214][ T1245] RIP: 0033:0x7f5cfa1cbe59 [ 37.404818][ T1235] pppol2tp_release+0x169/0x2b0 [ 37.409658][ T1243] R13: 00007f49656c9fac R14: 0000000000008ebe R15: 00007f49656c9fa0 [ 37.412183][ T1275] ------------[ cut here ]------------ [ 37.423273][ T1245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.424909][ T1243] ---[ end trace 12f3a01188f86fa5 ]--- [ 37.443109][ T1235] sock_close+0xb8/0x200 [ 37.452787][ T1275] WARNING: CPU: 0 PID: 1275 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.463308][ T1235] ? sock_mmap+0xa0/0xa0 [ 37.464958][ T1245] RSP: 002b:00007ffeca059e88 EFLAGS: 00000246 [ 37.467597][ T1235] __fput+0x2dc/0x730 [ 37.474088][ T1245] ORIG_RAX: 00000000000001b4 [ 37.482515][ T1245] RAX: 0000000000000000 RBX: 00007ffeca059f70 RCX: 00007f5cfa1cbe59 [ 37.490525][ T1245] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.499834][ T1235] ____fput+0x15/0x20 [ 37.507296][ T1235] task_work_run+0x127/0x190 [ 37.517488][ T1275] Modules linked in: [ 37.518480][ T1245] RBP: 0000000000008e90 R08: 0000000000000001 R09: 0000000000000000 [ 37.521640][ T1235] exit_to_user_mode_loop+0xcb/0xe0 [ 37.530585][ T1245] R10: 0000001b33220000 R11: 0000000000000246 R12: 00007ffeca059fb0 [ 37.534906][ T1275] CPU: 0 PID: 1275 Comm: syz.0.444 Tainted: G B W syzkaller #0 [ 37.543354][ T1245] R13: 00007f5cfa444fac R14: 0000000000008ec2 R15: 00007f5cfa444fa0 [ 37.551467][ T1235] exit_to_user_mode_prepare+0x76/0xa0 [ 37.565720][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.568213][ T1245] ---[ end trace 12f3a01188f86fa6 ]--- [ 37.576448][ T1235] syscall_exit_to_user_mode+0x1d/0x40 [ 37.582274][ T1275] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.591424][ T1235] do_syscall_64+0x3d/0x40 [ 37.600645][ T1235] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.606291][ T1275] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 37.606820][ T1235] RIP: 0033:0x7f9f6a1dee59 [ 37.628088][ T1275] RSP: 0018:ffffc90001337d68 EFLAGS: 00010293 [ 37.632259][ T1235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.636995][ T1275] RAX: ffffffff842e9627 RBX: ffff8881170f3800 RCX: ffff888117823b40 [ 37.656703][ T1235] RSP: 002b:00007ffd2f8a2298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.670190][ T1275] RDX: 0000000000000000 RSI: 0000000018d21100 RDI: 000000000c04eb7d [ 37.675223][ T1235] RAX: 0000000000000000 RBX: 00007ffd2f8a2380 RCX: 00007f9f6a1dee59 [ 37.687289][ T1275] RBP: ffffc90001337d88 R08: ffff8881170f3883 R09: 1ffff11022e1e710 [ 37.689107][ T1235] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.699024][ T1275] R10: dffffc0000000000 R11: ffffed1022e1e711 R12: dffffc0000000000 [ 37.705836][ T1235] RBP: 0000000000008e68 R08: 0000000000000001 R09: 0000000000000000 [ 37.712856][ T1275] R13: dffffc0000000000 R14: 0000000018d21100 R15: ffff88812b860000 [ 37.723807][ T1235] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffd2f8a23c0 [ 37.734245][ T1275] FS: 0000555592047500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.739197][ T1235] R13: 00007f9f6a457fac R14: 0000000000008eab R15: 00007f9f6a457fa0 [ 37.750772][ T1275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.753936][ T1235] ---[ end trace 12f3a01188f86fa7 ]--- [ 37.761252][ T1275] CR2: 00007f5cfa446dac CR3: 0000000128f73000 CR4: 00000000003506a0 [ 37.773830][ T1275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.785460][ T1275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.794597][ T1316] ------------[ cut here ]------------ [ 37.796116][ T1275] Call Trace: [ 37.807406][ T1275] pppol2tp_release+0x150/0x2b0 [ 37.807559][ T1316] WARNING: CPU: 0 PID: 1316 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0