Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. 2026/06/27 09:28:12 parsed 1 programs 2026/06/27 09:28:12 serving rpc on tcp://45833 [ 23.934030][ T24] audit: type=1400 audit(1782552492.950:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.956054][ T24] audit: type=1400 audit(1782552492.950:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.975920][ T24] audit: type=1400 audit(1782552492.950:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.877541][ T24] audit: type=1400 audit(1782552493.900:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.881018][ T293] cgroup: Unknown subsys name 'net' [ 24.900312][ T24] audit: type=1400 audit(1782552493.900:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.928135][ T24] audit: type=1400 audit(1782552493.930:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.928543][ T293] cgroup: Unknown subsys name 'devices' [ 25.036995][ T293] cgroup: Unknown subsys name 'hugetlb' [ 25.042653][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.192092][ T24] audit: type=1400 audit(1782552494.210:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.215297][ T24] audit: type=1400 audit(1782552494.210:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.236147][ T24] audit: type=1400 audit(1782552494.210:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.254554][ T299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.256817][ T24] audit: type=1400 audit(1782552494.210:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.332607][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.884572][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 25.918859][ T307] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.447452][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.454592][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.463410][ T350] device bridge_slave_0 entered promiscuous mode [ 26.470717][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.478183][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.485927][ T350] device bridge_slave_1 entered promiscuous mode [ 26.560127][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.567298][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.574703][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.581794][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.609391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.618146][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.625821][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.642358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.650726][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.657817][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.666586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.674803][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.682350][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.699173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.707747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.722235][ T350] device veth0_vlan entered promiscuous mode [ 26.729523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.738506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.747587][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.755463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.769854][ T350] device veth1_macvtap entered promiscuous mode [ 26.783441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.796047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/06/27 09:28:15 executed programs: 0 [ 26.810331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.977235][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.984314][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.991879][ T372] device bridge_slave_0 entered promiscuous mode [ 26.999699][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.006847][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.014296][ T372] device bridge_slave_1 entered promiscuous mode [ 27.056820][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.063896][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.071434][ T369] device bridge_slave_0 entered promiscuous mode [ 27.079350][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.086589][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.094081][ T369] device bridge_slave_1 entered promiscuous mode [ 27.162431][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.169892][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.177443][ T375] device bridge_slave_0 entered promiscuous mode [ 27.225563][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.232642][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.240408][ T375] device bridge_slave_1 entered promiscuous mode [ 27.279648][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.286917][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.294372][ T371] device bridge_slave_0 entered promiscuous mode [ 27.301273][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.308432][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.315913][ T376] device bridge_slave_0 entered promiscuous mode [ 27.332023][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.339211][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.346687][ T371] device bridge_slave_1 entered promiscuous mode [ 27.353223][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.360359][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.368159][ T376] device bridge_slave_1 entered promiscuous mode [ 27.409913][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.417098][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.533959][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.541061][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.548422][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.555502][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.568860][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.575960][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.583245][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.590345][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.610839][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.618693][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.626045][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.633225][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.641343][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.649320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.656857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.669111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.677523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.685932][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.692958][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.708007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.736212][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.744027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.751878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.760850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.769367][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.776465][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.783896][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.792394][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.799500][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.807176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.817165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.825537][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.832563][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.856474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.864631][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.871844][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.879764][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.887851][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.895594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.903019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.911120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.919733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.927931][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.934964][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.942741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.951050][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.959398][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.966469][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.977296][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.986066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.994277][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.001471][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.028283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.036998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.044981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.053305][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.060386][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.081944][ T372] device veth0_vlan entered promiscuous mode [ 28.095805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.103936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.112314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.121427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.130020][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.138580][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.146986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.154859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.163076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.171533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.179892][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.186969][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.194517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.202109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.212211][ T369] device veth0_vlan entered promiscuous mode [ 28.220208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.228467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.236604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.244621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.252998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.260601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.269290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.277469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.292860][ T372] device veth1_macvtap entered promiscuous mode [ 28.313135][ T375] device veth0_vlan entered promiscuous mode [ 28.322130][ T369] device veth1_macvtap entered promiscuous mode [ 28.329245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.337523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.346012][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.353758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.362165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.371018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.379058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.387248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.395553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.403655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.411511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.419133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.427379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.435478][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.448586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.457163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.478621][ T376] device veth0_vlan entered promiscuous mode [ 28.491545][ T375] device veth1_macvtap entered promiscuous mode [ 28.516563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.524735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.534420][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.542908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.551418][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.559575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.567688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.576158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.584266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.592195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.600566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.609122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.617431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.625870][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.634195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.642766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.651255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.659711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.667310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.676254][ T376] device veth1_macvtap entered promiscuous mode [ 28.683637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.691517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.700275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.711331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.719859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.753122][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.761155][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.770740][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.782073][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.790679][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.798871][ T424] ================================================================== [ 28.799681][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.806982][ T424] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 28.806992][ T424] Write of size 8 at addr ffff888113b8b950 by task syz.0.17/424 [ 28.806994][ T424] [ 28.807011][ T424] CPU: 1 PID: 424 Comm: syz.0.17 Not tainted syzkaller #0 [ 28.807017][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.807021][ T424] Call Trace: [ 28.807037][ T424] __dump_stack+0x21/0x24 [ 28.807048][ T424] dump_stack_lvl+0x1a7/0x208 [ 28.807061][ T424] ? show_regs_print_info+0x18/0x18 [ 28.807073][ T424] ? thaw_kernel_threads+0x220/0x220 [ 28.807085][ T424] ? debug_smp_processor_id+0x17/0x20 [ 28.807097][ T424] print_address_description+0x7f/0x2c0 [ 28.807108][ T424] ? mutex_lock+0x85/0xf0 [ 28.807119][ T424] kasan_report+0x100/0x140 [ 28.807130][ T424] ? mutex_lock+0x85/0xf0 [ 28.807140][ T424] kasan_check_range+0x249/0x2a0 [ 28.807186][ T424] __kasan_check_write+0x14/0x20 [ 28.816209][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.822058][ T424] mutex_lock+0x85/0xf0 [ 28.830549][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.832049][ T424] ? mutex_trylock+0xb0/0xb0 [ 28.848631][ T371] device veth0_vlan entered promiscuous mode [ 28.849250][ T424] ? l2tp_session_put+0xb2/0x1a0 [ 28.941665][ T424] ? l2tp_session_delete+0x3a9/0x4a0 [ 28.946947][ T424] pppol2tp_release+0x178/0x2b0 [ 28.951790][ T424] sock_close+0xb8/0x200 [ 28.956064][ T424] ? sock_mmap+0xa0/0xa0 [ 28.960403][ T424] __fput+0x2dc/0x730 [ 28.964387][ T424] ____fput+0x15/0x20 [ 28.968379][ T424] task_work_run+0x127/0x190 [ 28.972971][ T424] exit_to_user_mode_loop+0xcb/0xe0 [ 28.978180][ T424] exit_to_user_mode_prepare+0x76/0xa0 [ 28.983642][ T424] syscall_exit_to_user_mode+0x1d/0x40 [ 28.989139][ T424] do_syscall_64+0x3d/0x40 [ 28.993586][ T424] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.999829][ T424] RIP: 0033:0x7f1f1db67e59 [ 29.004257][ T424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.024013][ T424] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.032431][ T424] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 29.040635][ T424] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.048622][ T424] RBP: 0000000000007053 R08: 0000000000000001 R09: 0000000000000000 [ 29.056609][ T424] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 29.064595][ T424] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 29.072652][ T424] [ 29.074994][ T424] Allocated by task 424: [ 29.079243][ T424] __kasan_kmalloc+0xd4/0x100 [ 29.083930][ T424] __kmalloc+0x19f/0x330 [ 29.088164][ T424] l2tp_session_create+0x39/0xb60 [ 29.093179][ T424] pppol2tp_connect+0xbf5/0x1640 [ 29.098107][ T424] __sys_connect+0x3ce/0x450 [ 29.102703][ T424] __x64_sys_connect+0x7a/0x90 [ 29.107492][ T424] do_syscall_64+0x31/0x40 [ 29.111936][ T424] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.117818][ T424] [ 29.120141][ T424] Freed by task 424: [ 29.124076][ T424] kasan_set_track+0x4a/0x70 [ 29.128657][ T424] kasan_set_free_info+0x23/0x40 [ 29.133592][ T424] ____kasan_slab_free+0x125/0x160 [ 29.138825][ T424] __kasan_slab_free+0x11/0x20 [ 29.143619][ T424] slab_free_freelist_hook+0xc5/0x190 [ 29.149009][ T424] kfree+0xc0/0x270 [ 29.152815][ T424] l2tp_session_put+0xb2/0x1a0 [ 29.157573][ T424] l2tp_session_delete+0x3a9/0x4a0 [ 29.162674][ T424] pppol2tp_release+0x169/0x2b0 [ 29.167726][ T424] sock_close+0xb8/0x200 [ 29.171998][ T424] __fput+0x2dc/0x730 [ 29.175992][ T424] ____fput+0x15/0x20 [ 29.180113][ T424] task_work_run+0x127/0x190 [ 29.184701][ T424] exit_to_user_mode_loop+0xcb/0xe0 [ 29.189898][ T424] exit_to_user_mode_prepare+0x76/0xa0 [ 29.195351][ T424] syscall_exit_to_user_mode+0x1d/0x40 [ 29.200816][ T424] do_syscall_64+0x3d/0x40 [ 29.205231][ T424] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.211112][ T424] [ 29.213447][ T424] The buggy address belongs to the object at ffff888113b8b800 [ 29.213447][ T424] which belongs to the cache kmalloc-512 of size 512 [ 29.227496][ T424] The buggy address is located 336 bytes inside of [ 29.227496][ T424] 512-byte region [ffff888113b8b800, ffff888113b8ba00) [ 29.240762][ T424] The buggy address belongs to the page: [ 29.246410][ T424] page:ffffea00044ee200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113b88 [ 29.256638][ T424] head:ffffea00044ee200 order:2 compound_mapcount:0 compound_pincount:0 [ 29.265224][ T424] flags: 0x4000000000010200(slab|head) [ 29.270679][ T424] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 29.279371][ T424] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 29.287945][ T424] page dumped because: kasan: bad access detected [ 29.294356][ T424] page_owner tracks the page as allocated [ 29.300079][ T424] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 325, ts 28781675478, free_ts 28532565119 [ 29.320558][ T424] prep_new_page+0x176/0x190 [ 29.325142][ T424] get_page_from_freelist+0x225f/0x23f0 [ 29.330694][ T424] __alloc_pages_nodemask+0x29a/0x640 [ 29.336275][ T424] new_slab+0x84/0x3f0 [ 29.340344][ T424] ___slab_alloc+0x2f8/0x4c0 [ 29.344934][ T424] __slab_alloc+0x63/0xa0 [ 29.349264][ T424] __kmalloc_track_caller+0x1e4/0x310 [ 29.354631][ T424] __alloc_skb+0xdc/0x520 [ 29.358960][ T424] alloc_skb_with_frags+0xa3/0x560 [ 29.364106][ T424] sock_alloc_send_pskb+0x87f/0x9a0 [ 29.369319][ T424] unix_dgram_sendmsg+0x6f3/0x18f0 [ 29.374429][ T424] sock_write_iter+0x2a6/0x3a0 [ 29.379189][ T424] vfs_write+0x770/0xd70 [ 29.383427][ T424] ksys_write+0x14a/0x260 [ 29.387750][ T424] __x64_sys_write+0x7b/0x90 [ 29.392336][ T424] do_syscall_64+0x31/0x40 [ 29.396740][ T424] page last free stack trace: [ 29.401409][ T424] __free_pages_ok+0x80b/0x830 [ 29.406169][ T424] __free_pages+0xd8/0x390 [ 29.410583][ T424] __free_slab+0xcf/0x190 [ 29.414909][ T424] unfreeze_partials+0x150/0x180 [ 29.419901][ T424] put_cpu_partial+0xc1/0x180 [ 29.424594][ T424] __slab_free+0x2c9/0x3a0 [ 29.429011][ T424] ___cache_free+0x10e/0x130 [ 29.433598][ T424] qlink_free+0x50/0x90 [ 29.437755][ T424] qlist_free_all+0x5f/0xb0 [ 29.442253][ T424] kasan_quarantine_reduce+0x14a/0x160 [ 29.447705][ T424] __kasan_slab_alloc+0x2f/0xe0 [ 29.452554][ T424] slab_post_alloc_hook+0x5d/0x2f0 [ 29.457660][ T424] kmem_cache_alloc_trace+0x155/0x2e0 [ 29.463025][ T424] syslog_print+0x127/0x720 [ 29.467520][ T424] do_syslog+0x94c/0x9a0 [ 29.471755][ T424] __x64_sys_syslog+0x7c/0x90 [ 29.476462][ T424] [ 29.478805][ T424] Memory state around the buggy address: [ 29.484435][ T424] ffff888113b8b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.492498][ T424] ffff888113b8b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.500644][ T424] >ffff888113b8b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.508730][ T424] ^ [ 29.515403][ T424] ffff888113b8b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.523466][ T424] ffff888113b8ba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.531541][ T424] ================================================================== [ 29.539597][ T424] Disabling lock debugging due to kernel taint [ 29.563255][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 29.563267][ T24] audit: type=1400 audit(1782552498.580:108): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.592886][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.604247][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.611210][ T24] audit: type=1400 audit(1782552498.580:109): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.632710][ T371] device veth1_macvtap entered promiscuous mode [ 29.640061][ T24] audit: type=1400 audit(1782552498.580:110): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.662058][ T24] audit: type=1400 audit(1782552498.580:111): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.683580][ T24] audit: type=1400 audit(1782552498.580:112): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.704251][ T24] audit: type=1400 audit(1782552498.580:113): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.729278][ T24] audit: type=1400 audit(1782552498.580:114): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.759638][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.780935][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.793672][ T435] ------------[ cut here ]------------ [ 29.799535][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.827526][ T435] WARNING: CPU: 1 PID: 435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.865670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.874090][ T443] ------------[ cut here ]------------ [ 29.883701][ T445] ------------[ cut here ]------------ [ 29.889972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.898645][ T444] ------------[ cut here ]------------ [ 29.899424][ T443] WARNING: CPU: 0 PID: 443 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.904136][ T444] WARNING: CPU: 1 PID: 444 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.904147][ T444] Modules linked in: [ 29.915938][ T445] WARNING: CPU: 0 PID: 445 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 29.938978][ T443] Modules linked in: [ 29.946286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.949292][ T443] CPU: 0 PID: 443 Comm: syz.3.37 Tainted: G B syzkaller #0 [ 29.961448][ T435] Modules linked in: [ 29.963804][ T445] Modules linked in: [ 29.971738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.975822][ T445] CPU: 0 PID: 445 Comm: syz.0.39 Tainted: G B syzkaller #0 [ 29.980423][ T435] CPU: 1 PID: 435 Comm: syz.2.31 Tainted: G B syzkaller #0 [ 29.989401][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.998594][ T444] [ 30.009777][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.010415][ T444] CPU: 1 PID: 444 Comm: syz.6.38 Tainted: G B syzkaller #0 [ 30.026070][ T445] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.030360][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.045024][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.047879][ T443] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.062118][ T435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.070075][ T445] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.091554][ T435] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.096021][ T443] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.111865][ T444] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.137697][ T435] RSP: 0018:ffffc900010b7d68 EFLAGS: 00010293 [ 30.143802][ T435] RAX: ffffffff842e9627 RBX: ffff8881154f4000 RCX: ffff888115358000 [ 30.149399][ T445] RSP: 0018:ffffc900010e7d68 EFLAGS: 00010293 [ 30.152593][ T444] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.162088][ T445] [ 30.185684][ T445] RAX: ffffffff842e9627 RBX: ffff888115ca7000 RCX: ffff8881154ea780 [ 30.188414][ T435] RDX: 0000000000000000 RSI: 0000000013872520 RDI: 000000000c04eb7d [ 30.202247][ T443] RSP: 0018:ffffc900010d7d68 EFLAGS: 00010293 [ 30.208909][ T445] RDX: 0000000000000000 RSI: 0000000014b1ff80 RDI: 000000000c04eb7d [ 30.217795][ T443] RAX: ffffffff842e9627 RBX: ffff888115ca1000 RCX: ffff8881153be2c0 [ 30.226055][ T445] RBP: ffffc900010e7d88 R08: ffff888115ca7083 R09: 1ffff11022b94e10 [ 30.227405][ T435] RBP: ffffc900010b7d88 R08: ffff8881154f4083 R09: 1ffff11022a9e810 [ 30.234224][ T443] RDX: 0000000000000000 RSI: 0000000013abaca0 RDI: 000000000c04eb7d [ 30.252049][ T445] R10: dffffc0000000000 R11: ffffed1022b94e11 R12: dffffc0000000000 [ 30.264396][ T444] RSP: 0018:ffffc900010a7d68 EFLAGS: 00010293 [ 30.266680][ T445] R13: dffffc0000000000 R14: 0000000014b1ff80 R15: ffff888115b1dc00 [ 30.281407][ T443] RBP: ffffc900010d7d88 R08: ffff888115ca1083 R09: 1ffff11022b94210 [ 30.288505][ T435] R10: dffffc0000000000 R11: ffffed1022a9e811 R12: dffffc0000000000 [ 30.291232][ T443] R10: dffffc0000000000 R11: ffffed1022b94211 R12: dffffc0000000000 [ 30.298377][ T444] RAX: ffffffff842e9627 RBX: ffff8881159b3800 RCX: ffff8881153bbb40 [ 30.305897][ T445] FS: 0000555572e08500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.314904][ T449] ------------[ cut here ]------------ [ 30.324270][ T443] R13: dffffc0000000000 R14: 0000000013abaca0 R15: ffff888115b1e000 [ 30.331143][ T435] R13: dffffc0000000000 R14: 0000000013872520 R15: ffff888115084400 [ 30.337356][ T445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.346027][ T444] RDX: 0000000000000000 RSI: 00000000156fce20 RDI: 000000000c04eb7d [ 30.352502][ T443] FS: 000055558634d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.360218][ T449] WARNING: CPU: 1 PID: 449 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 30.370654][ T445] CR2: 00007f2335f7d540 CR3: 0000000114ac2000 CR4: 00000000003506b0 [ 30.379617][ T435] FS: 00005555574b4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.387655][ T443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.396115][ T444] RBP: ffffc900010a7d88 R08: ffff8881159b3883 R09: 1ffff11022b36710 [ 30.403437][ T445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.411105][ T449] Modules linked in: [ 30.418873][ T444] R10: dffffc0000000000 R11: ffffed1022b36711 R12: dffffc0000000000 [ 30.419049][ T443] CR2: 00007f2335f7d540 CR3: 000000011567f000 CR4: 00000000003506b0 [ 30.422972][ T449] [ 30.432377][ T445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.439204][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.444918][ T443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.449356][ T444] R13: dffffc0000000000 R14: 00000000156fce20 R15: ffff888114b36800 [ 30.449368][ T444] FS: 000055556b8a2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.449375][ T444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.449382][ T444] CR2: 0000200000000740 CR3: 00000001139ab000 CR4: 00000000003506a0 [ 30.449394][ T444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.449401][ T444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.449413][ T444] Call Trace: [ 30.465306][ T445] Call Trace: [ 30.472990][ T435] CR2: 0000200000000740 CR3: 0000000114b18000 CR4: 00000000003506a0 [ 30.487302][ T443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.487943][ T449] CPU: 1 PID: 449 Comm: syz.1.42 Tainted: G B syzkaller #0 [ 30.503733][ T445] pppol2tp_release+0x150/0x2b0 [ 30.511740][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.511747][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.511759][ T435] Call Trace: [ 30.515850][ T443] Call Trace: [ 30.518629][ T444] pppol2tp_release+0x150/0x2b0 [ 30.528384][ T445] sock_close+0xb8/0x200 [ 30.535009][ T435] pppol2tp_release+0x150/0x2b0 [ 30.543775][ T443] pppol2tp_release+0x150/0x2b0 [ 30.548448][ T444] sock_close+0xb8/0x200 [ 30.557618][ T443] sock_close+0xb8/0x200 [ 30.564730][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.570976][ T445] ? sock_mmap+0xa0/0xa0 [ 30.571322][ T449] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 30.590172][ T445] __fput+0x2dc/0x730 [ 30.590616][ T435] sock_close+0xb8/0x200 [ 30.594682][ T445] ____fput+0x15/0x20 [ 30.598953][ T444] ? sock_mmap+0xa0/0xa0 [ 30.613891][ T443] ? sock_mmap+0xa0/0xa0 [ 30.613933][ T443] __fput+0x2dc/0x730 [ 30.621006][ T435] ? sock_mmap+0xa0/0xa0 [ 30.637304][ T443] ____fput+0x15/0x20 [ 30.641638][ T449] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 30.647565][ T445] task_work_run+0x127/0x190 [ 30.673238][ T449] RSP: 0018:ffffc90001087d68 EFLAGS: 00010293 [ 30.673251][ T449] RAX: ffffffff842e9627 RBX: ffff88811633d800 RCX: ffff888115ed4f00 [ 30.673258][ T449] RDX: 0000000000000000 RSI: 000000000dca3d20 RDI: 000000000c04eb7d [ 30.673266][ T449] RBP: ffffc90001087d88 R08: ffff88811633d883 R09: 1ffff11022c67b10 [ 30.673274][ T449] R10: dffffc0000000000 R11: ffffed1022c67b11 R12: dffffc0000000000 [ 30.673281][ T449] R13: dffffc0000000000 R14: 000000000dca3d20 R15: ffff888115c95400 [ 30.673292][ T449] FS: 000055558eed9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.673300][ T449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.673308][ T449] CR2: 0000200000000740 CR3: 0000000115ff1000 CR4: 00000000003506a0 [ 30.673320][ T449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.673327][ T449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.673331][ T449] Call Trace: [ 30.673346][ T449] pppol2tp_release+0x150/0x2b0 [ 30.673358][ T449] sock_close+0xb8/0x200 [ 30.673368][ T449] ? sock_mmap+0xa0/0xa0 [ 30.673378][ T449] __fput+0x2dc/0x730 [ 30.673390][ T449] ____fput+0x15/0x20 [ 30.673429][ T449] task_work_run+0x127/0x190 [ 30.680581][ T443] task_work_run+0x127/0x190 [ 30.684846][ T444] __fput+0x2dc/0x730 [ 30.692903][ T443] exit_to_user_mode_loop+0xcb/0xe0 [ 30.715414][ T449] exit_to_user_mode_loop+0xcb/0xe0 [ 30.734052][ T445] exit_to_user_mode_loop+0xcb/0xe0 [ 30.740885][ T435] __fput+0x2dc/0x730 [ 30.757037][ T443] exit_to_user_mode_prepare+0x76/0xa0 [ 30.757051][ T443] syscall_exit_to_user_mode+0x1d/0x40 [ 30.757060][ T443] do_syscall_64+0x3d/0x40 [ 30.757072][ T443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.757082][ T443] RIP: 0033:0x7f9926384e59 [ 30.757093][ T443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.757100][ T443] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.757114][ T443] RAX: 0000000000000000 RBX: 00007ffe0ca77c40 RCX: 00007f9926384e59 [ 30.757120][ T443] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.757145][ T443] RBP: 0000000000007489 R08: 0000000000000001 R09: 0000000000000000 [ 30.768410][ T444] ____fput+0x15/0x20 [ 30.770158][ T449] exit_to_user_mode_prepare+0x76/0xa0 [ 30.774655][ T444] task_work_run+0x127/0x190 [ 30.785268][ T445] exit_to_user_mode_prepare+0x76/0xa0 [ 30.787485][ T444] exit_to_user_mode_loop+0xcb/0xe0 [ 30.793138][ T445] syscall_exit_to_user_mode+0x1d/0x40 [ 30.795041][ T435] ____fput+0x15/0x20 [ 30.804433][ T449] syscall_exit_to_user_mode+0x1d/0x40 [ 30.809455][ T444] exit_to_user_mode_prepare+0x76/0xa0 [ 30.819448][ T445] do_syscall_64+0x3d/0x40 [ 30.819461][ T445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.819470][ T445] RIP: 0033:0x7f1f1db67e59 [ 30.819482][ T445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.819489][ T445] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 30.819503][ T445] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 30.819510][ T445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 30.819517][ T445] RBP: 0000000000007498 R08: 0000000000000001 R09: 0000000000000000 [ 30.819524][ T445] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 30.819532][ T445] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 30.819542][ T445] ---[ end trace 6a496eb8dba004f5 ]--- [ 30.822427][ T443] R10: 0000001b33520000 R11: 0000000000000246 R12: 0000000000000000 [ 30.827520][ T435] task_work_run+0x127/0x190 [ 30.838532][ T443] R13: 00007f99265fdfac R14: 00007f99265fdfa8 R15: 00007f99265fdfa0 [ 30.862110][ T444] syscall_exit_to_user_mode+0x1d/0x40 [ 30.879124][ T449] do_syscall_64+0x3d/0x40 [ 30.890994][ T435] exit_to_user_mode_loop+0xcb/0xe0 [ 30.896351][ T443] ---[ end trace 6a496eb8dba004f6 ]--- [ 30.907530][ T435] exit_to_user_mode_prepare+0x76/0xa0 [ 30.919670][ T449] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.935895][ T444] do_syscall_64+0x3d/0x40 [ 30.958709][ T449] RIP: 0033:0x7f2335f2fe59 [ 30.958754][ T449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.980473][ T435] syscall_exit_to_user_mode+0x1d/0x40 [ 31.024246][ T449] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 [ 31.032340][ T444] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.085342][ T449] ORIG_RAX: 00000000000001b4 [ 31.093978][ T435] do_syscall_64+0x3d/0x40 [ 31.142810][ T449] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 31.159181][ T458] ------------[ cut here ]------------ [ 31.169014][ T458] WARNING: CPU: 0 PID: 458 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.173204][ T444] RIP: 0033:0x7ffb818b7e59 [ 31.189930][ T449] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.198505][ T458] Modules linked in: [ 31.206752][ T444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.207442][ T458] CPU: 0 PID: 458 Comm: syz.3.51 Tainted: G B W syzkaller #0 [ 31.239917][ T449] RBP: 000000000000762c R08: 0000000000000001 R09: 0000000000000000 [ 31.241670][ T444] RSP: 002b:00007ffe775ae1e8 EFLAGS: 00000246 [ 31.249575][ T449] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 31.256180][ T435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.272529][ T449] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 31.274863][ T444] ORIG_RAX: 00000000000001b4 [ 31.285496][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.296008][ T449] ---[ end trace 6a496eb8dba004f7 ]--- [ 31.302569][ T458] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.309370][ T458] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.317706][ T444] RAX: 0000000000000000 RBX: 00007ffe775ae2d0 RCX: 00007ffb818b7e59 [ 31.338898][ T435] RIP: 0033:0x7fea97e4de59 [ 31.343372][ T435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.359680][ T458] RSP: 0018:ffffc90001117d68 EFLAGS: 00010293 [ 31.372259][ T444] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.382607][ T467] ------------[ cut here ]------------ [ 31.388166][ T435] RSP: 002b:00007ffe6348b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.398151][ T468] ------------[ cut here ]------------ [ 31.398583][ T467] WARNING: CPU: 1 PID: 467 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.403764][ T458] RAX: ffffffff842e9627 RBX: ffff888116951000 RCX: ffff888116a8a780 [ 31.422220][ T444] RBP: 0000000000007496 R08: 0000000000000001 R09: 0000000000000000 [ 31.423268][ T468] WARNING: CPU: 0 PID: 468 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.435581][ T435] RAX: 0000000000000000 RBX: 00007ffe6348b690 RCX: 00007fea97e4de59 [ 31.443997][ T468] Modules linked in: [ 31.448502][ T458] RDX: 0000000000000000 RSI: 0000000016486c00 RDI: 000000000c04eb7d [ 31.449499][ T444] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 31.452667][ T468] [ 31.460931][ T467] Modules linked in: [ 31.469552][ T458] RBP: ffffc90001117d88 R08: ffff888116951083 R09: 1ffff11022d2a210 [ 31.471330][ T435] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.474808][ T458] R10: dffffc0000000000 R11: ffffed1022d2a211 R12: dffffc0000000000 [ 31.482902][ T467] [ 31.493108][ T468] CPU: 0 PID: 468 Comm: syz.1.61 Tainted: G B W syzkaller #0 [ 31.499837][ T444] R13: 00007ffb81b30fac R14: 00007ffb81b30fa8 R15: 00007ffb81b30fa0 [ 31.501674][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.510345][ T435] RBP: 000000000000743d R08: 0000000000000001 R09: 0000000000000000 [ 31.518740][ T458] R13: dffffc0000000000 R14: 0000000016486c00 R15: ffff888116378000 [ 31.528411][ T444] ---[ end trace 6a496eb8dba004f8 ]--- [ 31.536650][ T468] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.544698][ T467] CPU: 1 PID: 467 Comm: syz.0.60 Tainted: G B W syzkaller #0 [ 31.550217][ T458] FS: 000055558634d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.559544][ T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.586203][ T435] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 31.594211][ T435] R13: 00007fea980c6fac R14: 00007fea980c6fa8 R15: 00007fea980c6fa0 [ 31.595358][ T468] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.602427][ T435] ---[ end trace 6a496eb8dba004f9 ]--- [ 31.627850][ T468] RSP: 0018:ffffc900010d7d68 EFLAGS: 00010293 [ 31.632992][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.640599][ T468] RAX: ffffffff842e9627 RBX: ffff8881123ed000 RCX: ffff888116a8bb40 [ 31.640609][ T468] RDX: 0000000000000000 RSI: 00000000164e2840 RDI: 000000000c04eb7d [ 31.652530][ T458] CR2: 000030b2f7f37000 CR3: 0000000116566000 CR4: 00000000003506b0 [ 31.658155][ T467] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.668178][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.680119][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.695863][ T458] Call Trace: [ 31.707945][ T467] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.708443][ T472] ------------[ cut here ]------------ [ 31.729043][ T468] RBP: ffffc900010d7d88 R08: ffff8881123ed083 R09: 1ffff1102247da10 [ 31.733525][ T472] WARNING: CPU: 0 PID: 472 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.745834][ T473] ------------[ cut here ]------------ [ 31.754781][ T472] Modules linked in: [ 31.759311][ T458] pppol2tp_release+0x150/0x2b0 [ 31.760794][ T472] CPU: 0 PID: 472 Comm: syz.6.66 Tainted: G B W syzkaller #0 [ 31.766063][ T468] R10: dffffc0000000000 R11: ffffed102247da11 R12: dffffc0000000000 [ 31.766072][ T468] R13: dffffc0000000000 R14: 00000000164e2840 R15: ffff888112a81800 [ 31.766082][ T468] FS: 000055558eed9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.766091][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.766098][ T468] CR2: 0000200000000740 CR3: 0000000115131000 CR4: 00000000003506a0 [ 31.766110][ T468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.766117][ T468] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.766121][ T468] Call Trace: [ 31.766135][ T468] pppol2tp_release+0x150/0x2b0 [ 31.766147][ T468] sock_close+0xb8/0x200 [ 31.766157][ T468] ? sock_mmap+0xa0/0xa0 [ 31.766169][ T468] __fput+0x2dc/0x730 [ 31.766181][ T468] ____fput+0x15/0x20 [ 31.766191][ T468] task_work_run+0x127/0x190 [ 31.766204][ T468] exit_to_user_mode_loop+0xcb/0xe0 [ 31.766214][ T468] exit_to_user_mode_prepare+0x76/0xa0 [ 31.766228][ T468] syscall_exit_to_user_mode+0x1d/0x40 [ 31.766238][ T468] do_syscall_64+0x3d/0x40 [ 31.766249][ T468] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.766258][ T468] RIP: 0033:0x7f2335f2fe59 2026/06/27 09:28:20 executed programs: 61 [ 31.766270][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.766277][ T468] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.766291][ T468] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 31.766297][ T468] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.766304][ T468] RBP: 0000000000007a82 R08: 0000000000000001 R09: 0000000000000000 [ 31.766311][ T468] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 31.766319][ T468] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 31.766328][ T468] ---[ end trace 6a496eb8dba004fa ]--- [ 31.796933][ T458] sock_close+0xb8/0x200 [ 31.800159][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.813592][ T473] WARNING: CPU: 1 PID: 473 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 31.830582][ T472] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 31.835673][ T467] RSP: 0018:ffffc900010f7d68 EFLAGS: 00010293 [ 31.845470][ T472] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 31.860615][ T458] ? sock_mmap+0xa0/0xa0 [ 31.896001][ T473] Modules linked in: [ 31.925742][ T467] [ 31.935916][ T472] RSP: 0018:ffffc900010a7d68 EFLAGS: 00010293 [ 31.938011][ T467] RAX: ffffffff842e9627 RBX: ffff8881170e8800 RCX: ffff888116cb93c0 [ 31.957113][ T472] [ 31.979682][ T458] __fput+0x2dc/0x730 [ 31.982218][ T472] RAX: ffffffff842e9627 RBX: ffff8881173b7800 RCX: ffff8881172ecf00 [ 31.992023][ T467] RDX: 0000000000000000 RSI: 00000000149d4ba0 RDI: 000000000c04eb7d [ 32.000314][ T473] [ 32.008195][ T458] ____fput+0x15/0x20 [ 32.034832][ T472] RDX: 0000000000000000 RSI: 00000000175e4400 RDI: 000000000c04eb7d [ 32.058005][ T467] RBP: ffffc900010f7d88 R08: ffff8881170e8883 R09: 1ffff11022e1d110 [ 32.064546][ T48] device bridge_slave_1 left promiscuous mode [ 32.072518][ T467] R10: dffffc0000000000 R11: ffffed1022e1d111 R12: dffffc0000000000 [ 32.073788][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.080619][ T467] R13: dffffc0000000000 R14: 00000000149d4ba0 R15: ffff88811295cc00 [ 32.096800][ T473] CPU: 0 PID: 473 Comm: syz.2.65 Tainted: G B W syzkaller #0 [ 32.116824][ T458] task_work_run+0x127/0x190 [ 32.124317][ T48] device bridge_slave_0 left promiscuous mode [ 32.132084][ T467] FS: 0000555572e08500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.138680][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.159187][ T458] exit_to_user_mode_loop+0xcb/0xe0 [ 32.164432][ T458] exit_to_user_mode_prepare+0x76/0xa0 [ 32.165254][ T472] RBP: ffffc900010a7d88 R08: ffff8881173b7883 R09: 1ffff11022e76f10 [ 32.179116][ T472] R10: dffffc0000000000 R11: ffffed1022e76f11 R12: dffffc0000000000 [ 32.179158][ T467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.187863][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.204044][ T458] syscall_exit_to_user_mode+0x1d/0x40 [ 32.206441][ T472] R13: dffffc0000000000 R14: 00000000175e4400 R15: ffff888112af1800 [ 32.217775][ T48] device veth1_macvtap left promiscuous mode [ 32.223833][ T48] device veth0_vlan left promiscuous mode [ 32.229701][ T472] FS: 000055556b8a2500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.239752][ T458] do_syscall_64+0x3d/0x40 [ 32.243444][ T473] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.244390][ T467] CR2: 0000200000000740 CR3: 0000000115083000 CR4: 00000000003506a0 [ 32.259897][ T458] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.266682][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.273342][ T472] CR2: 00007f2336cdb060 CR3: 0000000113a7a000 CR4: 00000000003506b0 [ 32.280720][ T458] RIP: 0033:0x7f9926384e59 [ 32.282082][ T473] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.297012][ T458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.317584][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.329130][ T467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.341775][ T483] ------------[ cut here ]------------ [ 32.347646][ T483] WARNING: CPU: 1 PID: 483 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.357959][ T467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.364324][ T473] RSP: 0018:ffffc900010b7d68 EFLAGS: 00010293 [ 32.366197][ T483] Modules linked in: [ 32.366798][ T473] [ 32.372501][ T467] Call Trace: [ 32.378866][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.382432][ T483] [ 32.392576][ T467] pppol2tp_release+0x150/0x2b0 [ 32.397536][ T458] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.404702][ T473] RAX: ffffffff842e9627 RBX: ffff8881173b0000 RCX: ffff8881172ee2c0 [ 32.406291][ T467] sock_close+0xb8/0x200 [ 32.414733][ T472] Call Trace: [ 32.418469][ T483] CPU: 1 PID: 483 Comm: syz.1.76 Tainted: G B W syzkaller #0 [ 32.430115][ T472] pppol2tp_release+0x150/0x2b0 [ 32.430525][ T458] RAX: 0000000000000000 RBX: 00007ffe0ca77c40 RCX: 00007f9926384e59 [ 32.443215][ T467] ? sock_mmap+0xa0/0xa0 [ 32.446792][ T473] RDX: 0000000000000000 RSI: 0000000020f93958 RDI: 000000000c04eb7d [ 32.447744][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.456688][ T472] sock_close+0xb8/0x200 [ 32.465831][ T467] __fput+0x2dc/0x730 [ 32.473941][ T467] ____fput+0x15/0x20 [ 32.475718][ T473] RBP: ffffc900010b7d88 R08: ffff8881173b0083 R09: 1ffff11022e76010 [ 32.478256][ T458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.494036][ T467] task_work_run+0x127/0x190 [ 32.495227][ T472] ? sock_mmap+0xa0/0xa0 [ 32.498852][ T483] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.503609][ T472] __fput+0x2dc/0x730 [ 32.509572][ T467] exit_to_user_mode_loop+0xcb/0xe0 [ 32.509583][ T467] exit_to_user_mode_prepare+0x76/0xa0 [ 32.509627][ T467] syscall_exit_to_user_mode+0x1d/0x40 [ 32.514449][ T473] R10: dffffc0000000000 R11: ffffed1022e76011 R12: dffffc0000000000 [ 32.518881][ T458] RBP: 0000000000007982 R08: 0000000000000001 R09: 0000000000000000 [ 32.534936][ T472] ____fput+0x15/0x20 [ 32.538022][ T483] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 32.555235][ T473] R13: dffffc0000000000 R14: 0000000020f93958 R15: ffff888112af0c00 [ 32.569756][ T467] do_syscall_64+0x3d/0x40 [ 32.582119][ T458] R10: 0000001b33520000 R11: 0000000000000246 R12: 0000000000000000 [ 32.585903][ T472] task_work_run+0x127/0x190 [ 32.590348][ T467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.600855][ T472] exit_to_user_mode_loop+0xcb/0xe0 [ 32.600935][ T458] R13: 00007f99265fdfac R14: 00007f99265fdfa8 R15: 00007f99265fdfa0 [ 32.614286][ T467] RIP: 0033:0x7f1f1db67e59 [ 32.614603][ T472] exit_to_user_mode_prepare+0x76/0xa0 [ 32.618834][ T467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.624987][ T473] FS: 00005555574b4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.644205][ T483] RSP: 0018:ffffc900010d7d68 EFLAGS: 00010293 [ 32.653182][ T458] ---[ end trace 6a496eb8dba004fb ]--- [ 32.655694][ T472] syscall_exit_to_user_mode+0x1d/0x40 [ 32.662828][ T483] [ 32.682428][ T472] do_syscall_64+0x3d/0x40 [ 32.692130][ T472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.693680][ T483] RAX: ffffffff842e9627 RBX: ffff88811817d000 RCX: ffff8881184393c0 [ 32.705213][ T472] RIP: 0033:0x7ffb818b7e59 [ 32.710893][ T472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.713764][ T467] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 [ 32.731143][ T473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.746105][ T483] RDX: 0000000000000000 RSI: 000000001842a400 RDI: 000000000c04eb7d [ 32.754125][ T483] RBP: ffffc900010d7d88 R08: ffff88811817d083 R09: 1ffff1102302fa10 [ 32.755205][ T473] CR2: 0000200000000740 CR3: 0000000113e23000 CR4: 00000000003506b0 [ 32.771904][ T467] ORIG_RAX: 00000000000001b4 [ 32.773255][ T472] RSP: 002b:00007ffe775ae1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.789880][ T473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.794830][ T467] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 32.803783][ T472] RAX: 0000000000000000 RBX: 00007ffe775ae2d0 RCX: 00007ffb818b7e59 [ 32.814489][ T473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.815994][ T483] R10: dffffc0000000000 R11: ffffed102302fa11 R12: dffffc0000000000 [ 32.830251][ T472] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.839371][ T473] Call Trace: [ 32.842704][ T473] pppol2tp_release+0x150/0x2b0 [ 32.847869][ T472] RBP: 0000000000007bb3 R08: 0000000000000001 R09: 0000000000000000 [ 32.856124][ T473] sock_close+0xb8/0x200 [ 32.860546][ T473] ? sock_mmap+0xa0/0xa0 [ 32.864810][ T473] __fput+0x2dc/0x730 [ 32.869161][ T472] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 32.870625][ T467] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.884838][ T473] ____fput+0x15/0x20 [ 32.887379][ T483] R13: dffffc0000000000 R14: 000000001842a400 R15: ffff88811842b000 [ 32.891640][ T473] task_work_run+0x127/0x190 [ 32.897877][ T467] RBP: 0000000000007a72 R08: 0000000000000001 R09: 0000000000000000 [ 32.905809][ T472] R13: 00007ffb81b30fac R14: 00007ffb81b30fa8 R15: 00007ffb81b30fa0 [ 32.920171][ T483] FS: 000055558eed9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 32.924724][ T473] exit_to_user_mode_loop+0xcb/0xe0 [ 32.930889][ T467] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 32.936953][ T490] ------------[ cut here ]------------ [ 32.943573][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.950068][ T472] ---[ end trace 6a496eb8dba004fc ]--- [ 32.957142][ T467] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 32.961742][ T473] exit_to_user_mode_prepare+0x76/0xa0 [ 32.968891][ T483] CR2: 00007f9927130060 CR3: 0000000116002000 CR4: 00000000003506a0 [ 32.977171][ T490] WARNING: CPU: 0 PID: 490 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.993297][ T467] ---[ end trace 6a496eb8dba004fd ]--- [ 32.999941][ T473] syscall_exit_to_user_mode+0x1d/0x40 [ 33.005653][ T473] do_syscall_64+0x3d/0x40 [ 33.019411][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.019758][ T492] ------------[ cut here ]------------ [ 33.033188][ T490] Modules linked in: [ 33.038215][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.049432][ T473] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.057516][ T490] CPU: 0 PID: 490 Comm: syz.3.82 Tainted: G B W syzkaller #0 [ 33.069048][ T494] ------------[ cut here ]------------ [ 33.074591][ T494] WARNING: CPU: 1 PID: 494 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.075195][ T473] RIP: 0033:0x7fea97e4de59 [ 33.085804][ T483] Call Trace: [ 33.092849][ T483] pppol2tp_release+0x150/0x2b0 [ 33.097866][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.099539][ T494] Modules linked in: [ 33.108216][ T483] sock_close+0xb8/0x200 [ 33.116574][ T492] WARNING: CPU: 1 PID: 492 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.120203][ T473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.127429][ T494] [ 33.148058][ T490] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.149063][ T483] ? sock_mmap+0xa0/0xa0 [ 33.159359][ T492] Modules linked in: [ 33.163277][ T492] CPU: 1 PID: 492 Comm: syz.6.85 Tainted: G B W syzkaller #0 [ 33.165927][ T490] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.172106][ T483] __fput+0x2dc/0x730 [ 33.195547][ T494] CPU: 1 PID: 494 Comm: syz.0.86 Tainted: G B W syzkaller #0 [ 33.204064][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.209883][ T473] RSP: 002b:00007ffe6348b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.214878][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.222707][ T490] RSP: 0018:ffffc90001257d68 EFLAGS: 00010293 [ 33.233018][ T473] RAX: 0000000000000000 RBX: 00007ffe6348b690 RCX: 00007fea97e4de59 [ 33.233582][ T494] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.239901][ T490] [ 33.248361][ T483] ____fput+0x15/0x20 [ 33.254291][ T473] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.256586][ T483] task_work_run+0x127/0x190 [ 33.256599][ T483] exit_to_user_mode_loop+0xcb/0xe0 [ 33.256610][ T483] exit_to_user_mode_prepare+0x76/0xa0 [ 33.256623][ T483] syscall_exit_to_user_mode+0x1d/0x40 [ 33.256632][ T483] do_syscall_64+0x3d/0x40 [ 33.256643][ T483] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.256652][ T483] RIP: 0033:0x7f2335f2fe59 [ 33.256663][ T483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.256671][ T483] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.256685][ T483] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 33.256701][ T483] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.256708][ T483] RBP: 0000000000007e05 R08: 0000000000000001 R09: 0000000000000000 [ 33.256715][ T483] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 33.256724][ T483] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 33.256733][ T483] ---[ end trace 6a496eb8dba004fe ]--- [ 33.258653][ T494] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.266201][ T473] RBP: 0000000000007bb5 R08: 0000000000000001 R09: 0000000000000000 [ 33.283434][ T492] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.291802][ T490] RAX: ffffffff842e9627 RBX: ffff8881186fc800 RCX: ffff8881178d93c0 [ 33.295804][ T494] RSP: 0018:ffffc900010f7d68 EFLAGS: 00010293 [ 33.301921][ T490] RDX: 0000000000000000 RSI: 0000000013aba0e0 RDI: 000000000c04eb7d [ 33.305401][ T492] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.327727][ T473] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 33.340801][ T494] [ 33.354930][ T473] R13: 00007fea980c6fac R14: 00007fea980c6fa8 R15: 00007fea980c6fa0 [ 33.371348][ T494] RAX: ffffffff842e9627 RBX: ffff88811981e800 RCX: ffff88811907a780 [ 33.374716][ T492] RSP: 0018:ffffc90000d67d68 EFLAGS: 00010293 [ 33.399960][ T494] RDX: 0000000000000000 RSI: 0000000015291940 RDI: 000000000c04eb7d [ 33.415155][ T490] RBP: ffffc90001257d88 R08: ffff8881186fc883 R09: 1ffff110230df910 [ 33.437182][ T494] RBP: ffffc900010f7d88 R08: ffff88811981e883 R09: 1ffff11023303d10 [ 33.467052][ T473] ---[ end trace 6a496eb8dba004ff ]--- [ 33.482919][ T494] R10: dffffc0000000000 R11: ffffed1023303d11 R12: dffffc0000000000 [ 33.522278][ T492] [ 33.530107][ T494] R13: dffffc0000000000 R14: 0000000015291940 R15: ffff888118660c00 [ 33.541711][ T492] RAX: ffffffff842e9627 RBX: ffff888118f68000 RCX: ffff88812daf62c0 [ 33.553154][ T490] R10: dffffc0000000000 R11: ffffed10230df911 R12: dffffc0000000000 [ 33.555818][ T499] ------------[ cut here ]------------ [ 33.569595][ T494] FS: 0000555572e08500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.575888][ T492] RDX: 0000000000000000 RSI: 0000000013abd1c0 RDI: 000000000c04eb7d [ 33.579833][ T490] R13: dffffc0000000000 R14: 0000000013aba0e0 R15: ffff888119062c00 [ 33.593827][ T499] WARNING: CPU: 0 PID: 499 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.605108][ T492] RBP: ffffc90000d67d88 R08: ffff888118f68083 R09: 1ffff110231ed010 [ 33.613177][ T494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.613779][ T499] Modules linked in: [ 33.620197][ T492] R10: dffffc0000000000 R11: ffffed10231ed011 R12: dffffc0000000000 [ 33.622319][ T494] CR2: 0000200000000740 CR3: 0000000118cee000 CR4: 00000000003506a0 [ 33.629803][ T492] R13: dffffc0000000000 R14: 0000000013abd1c0 R15: ffff888119222800 [ 33.644139][ T494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.649755][ T499] [ 33.658281][ T490] FS: 000055558634d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.666023][ T499] CPU: 0 PID: 499 Comm: syz.1.91 Tainted: G B W syzkaller #0 [ 33.677140][ T499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.687695][ T492] FS: 000055556b8a2500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.687947][ T494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.697529][ T492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.709204][ T490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.712381][ T499] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.724643][ T499] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 33.741003][ T494] Call Trace: [ 33.747689][ T494] pppol2tp_release+0x150/0x2b0 [ 33.749401][ T492] CR2: 0000200000000740 CR3: 0000000115732000 CR4: 00000000003506b0 [ 33.752903][ T494] sock_close+0xb8/0x200 [ 33.764629][ T492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.773371][ T499] RSP: 0018:ffffc900010b7d68 EFLAGS: 00010293 [ 33.779672][ T492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.787933][ T499] RAX: ffffffff842e9627 RBX: ffff888118c9f000 RCX: ffff888119cee2c0 [ 33.789230][ T490] CR2: 00007fea98bf9060 CR3: 0000000116540000 CR4: 00000000003506a0 [ 33.800262][ T492] Call Trace: [ 33.807183][ T494] ? sock_mmap+0xa0/0xa0 [ 33.811663][ T494] __fput+0x2dc/0x730 [ 33.815906][ T499] RDX: 0000000000000000 RSI: 00000000173ce600 RDI: 000000000c04eb7d [ 33.823923][ T499] RBP: ffffc900010b7d88 R08: ffff888118c9f083 R09: 1ffff11023193e10 [ 33.832152][ T494] ____fput+0x15/0x20 [ 33.836393][ T494] task_work_run+0x127/0x190 [ 33.841005][ T494] exit_to_user_mode_loop+0xcb/0xe0 [ 33.846565][ T492] pppol2tp_release+0x150/0x2b0 [ 33.851452][ T492] sock_close+0xb8/0x200 [ 33.852247][ T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.856424][ T494] exit_to_user_mode_prepare+0x76/0xa0 [ 33.869572][ T492] ? sock_mmap+0xa0/0xa0 [ 33.869948][ T507] ------------[ cut here ]------------ [ 33.873864][ T492] __fput+0x2dc/0x730 [ 33.880219][ T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.884196][ T499] R10: dffffc0000000000 R11: ffffed1023193e11 R12: dffffc0000000000 [ 33.893831][ T507] WARNING: CPU: 1 PID: 507 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.900816][ T494] syscall_exit_to_user_mode+0x1d/0x40 [ 33.909752][ T490] Call Trace: [ 33.915687][ T492] ____fput+0x15/0x20 [ 33.918537][ T507] Modules linked in: [ 33.922324][ T492] task_work_run+0x127/0x190 [ 33.922361][ T492] exit_to_user_mode_loop+0xcb/0xe0 [ 33.927230][ T490] pppol2tp_release+0x150/0x2b0 [ 33.931231][ T499] R13: dffffc0000000000 R14: 00000000173ce600 R15: ffff88811823f800 [ 33.936886][ T507] CPU: 1 PID: 507 Comm: syz.2.99 Tainted: G B W syzkaller #0 [ 33.941431][ T492] exit_to_user_mode_prepare+0x76/0xa0 [ 33.950013][ T490] sock_close+0xb8/0x200 [ 33.958678][ T494] do_syscall_64+0x3d/0x40 [ 33.964576][ T507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.969996][ T499] FS: 000055558eed9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.975325][ T490] ? sock_mmap+0xa0/0xa0 [ 33.984214][ T494] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.992980][ T507] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.996505][ T492] syscall_exit_to_user_mode+0x1d/0x40 [ 33.996516][ T492] do_syscall_64+0x3d/0x40 [ 33.996527][ T492] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.996536][ T492] RIP: 0033:0x7ffb818b7e59 [ 33.996547][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.996554][ T492] RSP: 002b:00007ffe775ae1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.996587][ T492] RAX: 0000000000000000 RBX: 00007ffe775ae2d0 RCX: 00007ffb818b7e59 [ 34.004001][ T507] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.009133][ T499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.015061][ T490] __fput+0x2dc/0x730 [ 34.019051][ T494] RIP: 0033:0x7f1f1db67e59 [ 34.029907][ T507] RSP: 0018:ffffc9000156fd68 EFLAGS: 00010293 [ 34.049253][ T499] CR2: 0000200000000740 CR3: 0000000113878000 CR4: 00000000003506b0 [ 34.049266][ T499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.049273][ T499] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.049277][ T499] Call Trace: [ 34.049293][ T499] pppol2tp_release+0x150/0x2b0 [ 34.049306][ T499] sock_close+0xb8/0x200 [ 34.049324][ T499] ? sock_mmap+0xa0/0xa0 [ 34.065783][ T490] ____fput+0x15/0x20 [ 34.065795][ T490] task_work_run+0x127/0x190 [ 34.065807][ T490] exit_to_user_mode_loop+0xcb/0xe0 [ 34.065817][ T490] exit_to_user_mode_prepare+0x76/0xa0 [ 34.065863][ T490] syscall_exit_to_user_mode+0x1d/0x40 [ 34.085581][ T492] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.096845][ T490] do_syscall_64+0x3d/0x40 [ 34.100770][ T492] RBP: 00000000000080d7 R08: 0000000000000001 R09: 0000000000000000 [ 34.107352][ T507] [ 34.115004][ T494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.123133][ T499] __fput+0x2dc/0x730 [ 34.131610][ T492] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 34.135228][ T490] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.139333][ T492] R13: 00007ffb81b30fac R14: 00007ffb81b30fa8 R15: 00007ffb81b30fa0 [ 34.143511][ T490] RIP: 0033:0x7f9926384e59 [ 34.143523][ T490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.143548][ T490] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 [ 34.148155][ T494] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 [ 34.152932][ T507] RAX: ffffffff842e9627 RBX: ffff888119f9b800 RCX: ffff88811217a780 [ 34.157086][ T492] ---[ end trace 6a496eb8dba00500 ]--- [ 34.161836][ T499] ____fput+0x15/0x20 [ 34.161882][ T499] task_work_run+0x127/0x190 [ 34.167944][ T494] ORIG_RAX: 00000000000001b4 [ 34.172860][ T507] RDX: 0000000000000000 RSI: 0000000015291780 RDI: 000000000c04eb7d [ 34.191089][ T494] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 34.205870][ T490] ORIG_RAX: 00000000000001b4 [ 34.216651][ T499] exit_to_user_mode_loop+0xcb/0xe0 [ 34.228282][ T490] RAX: 0000000000000000 RBX: 00007ffe0ca77c40 RCX: 00007f9926384e59 [ 34.228289][ T490] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.228297][ T490] RBP: 0000000000008078 R08: 0000000000000001 R09: 0000000000000000 [ 34.241630][ T499] exit_to_user_mode_prepare+0x76/0xa0 [ 34.244829][ T507] RBP: ffffc9000156fd88 R08: ffff888119f9b883 R09: 1ffff110233f3710 [ 34.250530][ T499] syscall_exit_to_user_mode+0x1d/0x40 [ 34.293618][ T490] R10: 0000001b33520000 R11: 0000000000000246 R12: 0000000000000000 [ 34.297240][ T494] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.334215][ T490] R13: 00007f99265fdfac R14: 00007f99265fdfa8 R15: 00007f99265fdfa0 [ 34.347255][ T499] do_syscall_64+0x3d/0x40 [ 34.371326][ T507] R10: dffffc0000000000 R11: ffffed10233f3711 R12: dffffc0000000000 [ 34.376737][ T494] RBP: 0000000000008109 R08: 0000000000000001 R09: 0000000000000000 [ 34.420285][ T499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.420474][ T490] ---[ end trace 6a496eb8dba00501 ]--- [ 34.426652][ T499] RIP: 0033:0x7f2335f2fe59 [ 34.434040][ T507] R13: dffffc0000000000 R14: 0000000015291780 R15: ffff888119e9bc00 [ 34.443733][ T499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.464564][ T494] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 34.472771][ T499] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.476008][ T507] FS: 00005555574b4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.482118][ T494] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 34.502985][ T499] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 34.516397][ T499] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.529571][ T494] ---[ end trace 6a496eb8dba00502 ]--- [ 34.535301][ T499] RBP: 00000000000082e2 R08: 0000000000000001 R09: 0000000000000000 [ 34.544391][ T499] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 34.554350][ T499] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 34.571788][ T507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.581827][ T499] ---[ end trace 6a496eb8dba00503 ]--- [ 34.590314][ T523] ------------[ cut here ]------------ [ 34.602938][ T523] WARNING: CPU: 0 PID: 523 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.614723][ T507] CR2: 00007ffb81b32dac CR3: 0000000118d18000 CR4: 00000000003506a0 [ 34.627955][ T523] Modules linked in: [ 34.631919][ T523] CPU: 0 PID: 523 Comm: syz.3.115 Tainted: G B W syzkaller #0 [ 34.661380][ T507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.673820][ T534] ------------[ cut here ]------------ [ 34.679522][ T507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.680932][ T533] ------------[ cut here ]------------ [ 34.696328][ T523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.708956][ T534] WARNING: CPU: 0 PID: 534 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.721659][ T533] WARNING: CPU: 0 PID: 533 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.727957][ T507] Call Trace: [ 34.732519][ T534] Modules linked in: [ 34.736799][ T536] ------------[ cut here ]------------ [ 34.739728][ T523] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.744371][ T536] WARNING: CPU: 1 PID: 536 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.744375][ T536] Modules linked in: [ 34.744416][ T536] CPU: 1 PID: 536 Comm: syz.1.128 Tainted: G B W syzkaller #0 [ 34.751523][ T534] CPU: 0 PID: 534 Comm: syz.6.126 Tainted: G B W syzkaller #0 [ 34.761427][ T507] pppol2tp_release+0x150/0x2b0 [ 34.765954][ T533] Modules linked in: [ 34.774881][ T507] sock_close+0xb8/0x200 [ 34.784885][ T523] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.787123][ T507] ? sock_mmap+0xa0/0xa0 [ 34.791318][ T523] RSP: 0018:ffffc900016ffd68 EFLAGS: 00010293 [ 34.795139][ T507] __fput+0x2dc/0x730 [ 34.814812][ T533] [ 34.819097][ T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.825713][ T523] [ 34.829755][ T536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.831818][ T533] CPU: 0 PID: 533 Comm: syz.0.125 Tainted: G B W syzkaller #0 [ 34.842118][ T507] ____fput+0x15/0x20 [ 34.844598][ T523] RAX: ffffffff842e9627 RBX: ffff88811ab6e800 RCX: ffff88811a61e2c0 [ 34.854777][ T534] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.866728][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.867512][ T536] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.875314][ T533] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.881763][ T507] task_work_run+0x127/0x190 [ 34.891876][ T523] RDX: 0000000000000000 RSI: 000000001a13dbc0 RDI: 000000000c04eb7d [ 34.898314][ T534] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.904606][ T523] RBP: ffffc900016ffd88 R08: ffff88811ab6e883 R09: 1ffff1102356dd10 [ 34.909212][ T536] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.917231][ T533] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 34.937826][ T534] RSP: 0018:ffffc900010b7d68 EFLAGS: 00010293 [ 34.946231][ T523] R10: dffffc0000000000 R11: ffffed102356dd11 R12: dffffc0000000000 [ 34.964932][ T507] exit_to_user_mode_loop+0xcb/0xe0 [ 34.984559][ T533] RSP: 0018:ffffc900014d7d68 EFLAGS: 00010293 [ 34.990377][ T536] RSP: 0018:ffffc90001817d68 EFLAGS: 00010293 [ 34.998374][ T533] [ 35.003841][ T507] exit_to_user_mode_prepare+0x76/0xa0 [ 35.011471][ T533] RAX: ffffffff842e9627 RBX: ffff88811ae7e000 RCX: ffff88811ae513c0 [ 35.017553][ T534] [ 35.018512][ T523] R13: dffffc0000000000 R14: 000000001a13dbc0 R15: ffff88811a81c800 [ 35.023690][ T534] RAX: ffffffff842e9627 RBX: ffff88811ae7b000 RCX: ffff88811ae54f00 [ 35.023699][ T534] RDX: 0000000000000000 RSI: 000000001737b300 RDI: 000000000c04eb7d [ 35.023707][ T534] RBP: ffffc900010b7d88 R08: ffff88811ae7b083 R09: 1ffff110235cf610 [ 35.023716][ T534] R10: dffffc0000000000 R11: ffffed10235cf611 R12: dffffc0000000000 [ 35.023742][ T534] R13: dffffc0000000000 R14: 000000001737b300 R15: ffff88811a1fe800 [ 35.031997][ T533] RDX: 0000000000000000 RSI: 000000001af14068 RDI: 000000000c04eb7d [ 35.034834][ T536] [ 35.042859][ T533] RBP: ffffc900014d7d88 R08: ffff88811ae7e083 R09: 1ffff110235cfc10 [ 35.050663][ T507] syscall_exit_to_user_mode+0x1d/0x40 [ 35.058717][ T523] FS: 000055558634d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.066675][ T534] FS: 000055556b8a2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.074709][ T533] R10: dffffc0000000000 R11: ffffed10235cfc11 R12: dffffc0000000000 [ 35.082663][ T536] RAX: ffffffff842e9627 RBX: ffff88811c4c2000 RCX: ffff88811ab1a780 [ 35.090419][ T523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.090429][ T523] CR2: 000030b2f7f78000 CR3: 000000011ac4b000 CR4: 00000000003506b0 [ 35.090442][ T523] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.090449][ T523] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.090453][ T523] Call Trace: [ 35.090469][ T523] pppol2tp_release+0x150/0x2b0 [ 35.090514][ T523] sock_close+0xb8/0x200 [ 35.094186][ T507] do_syscall_64+0x3d/0x40 [ 35.101645][ T523] ? sock_mmap+0xa0/0xa0 [ 35.106744][ T534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.132391][ T533] R13: dffffc0000000000 R14: 000000001af14068 R15: ffff88811a75c400 [ 35.141025][ T536] RDX: 0000000000000000 RSI: 0000000016e06d80 RDI: 000000000c04eb7d [ 35.163113][ T523] __fput+0x2dc/0x730 [ 35.171457][ T507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.175198][ T533] FS: 0000555572e08500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 35.179796][ T507] RIP: 0033:0x7fea97e4de59 [ 35.183528][ T533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.183536][ T533] CR2: 000030b2f7f78000 CR3: 00000001163e2000 CR4: 00000000003506b0 [ 35.183561][ T533] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.188623][ T507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.192519][ T523] ____fput+0x15/0x20 [ 35.199242][ T536] RBP: ffffc90001817d88 R08: ffff88811c4c2083 R09: 1ffff11023898410 [ 35.207167][ T533] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.215184][ T534] CR2: 0000200000000740 CR3: 000000011ad06000 CR4: 00000000003506a0 [ 35.219159][ T533] Call Trace: [ 35.224856][ T534] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.234125][ T523] task_work_run+0x127/0x190 [ 35.239356][ T507] RSP: 002b:00007ffe6348b5a8 EFLAGS: 00000246 [ 35.245212][ T523] exit_to_user_mode_loop+0xcb/0xe0 [ 35.253362][ T536] R10: dffffc0000000000 R11: ffffed1023898411 R12: dffffc0000000000 [ 35.261398][ T534] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.283949][ T507] ORIG_RAX: 00000000000001b4 [ 35.285241][ T533] pppol2tp_release+0x150/0x2b0 [ 35.293189][ T507] RAX: 0000000000000000 RBX: 00007ffe6348b690 RCX: 00007fea97e4de59 [ 35.300966][ T523] exit_to_user_mode_prepare+0x76/0xa0 [ 35.309254][ T536] R13: dffffc0000000000 R14: 0000000016e06d80 R15: ffff88811b061800 [ 35.312255][ T533] sock_close+0xb8/0x200 [ 35.320547][ T507] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.324878][ T534] Call Trace: [ 35.331033][ T536] FS: 000055558eed9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.336805][ T523] syscall_exit_to_user_mode+0x1d/0x40 [ 35.344857][ T507] RBP: 0000000000008429 R08: 0000000000000001 R09: 0000000000000000 [ 35.352331][ T533] ? sock_mmap+0xa0/0xa0 [ 35.357325][ T536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.361880][ T534] pppol2tp_release+0x150/0x2b0 [ 35.370284][ T507] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 35.375564][ T533] __fput+0x2dc/0x730 [ 35.383916][ T536] CR2: 0000200000000740 CR3: 000000011a3bf000 CR4: 00000000003506a0 [ 35.387867][ T523] do_syscall_64+0x3d/0x40 [ 35.396135][ T507] R13: 00007fea980c6fac R14: 00007fea980c6fa8 R15: 00007fea980c6fa0 [ 35.399106][ T534] sock_close+0xb8/0x200 [ 35.408121][ T507] ---[ end trace 6a496eb8dba00504 ]--- [ 35.414010][ T533] ____fput+0x15/0x20 [ 35.422060][ T536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.426015][ T523] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.432893][ T536] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.437431][ T523] RIP: 0033:0x7f9926384e59 [ 35.445690][ T533] task_work_run+0x127/0x190 [ 35.449540][ T534] ? sock_mmap+0xa0/0xa0 [ 35.460972][ T536] Call Trace: [ 35.466455][ T523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.482134][ T533] exit_to_user_mode_loop+0xcb/0xe0 [ 35.499367][ T534] __fput+0x2dc/0x730 [ 35.512212][ T536] pppol2tp_release+0x150/0x2b0 [ 35.524096][ T523] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 [ 35.556769][ T533] exit_to_user_mode_prepare+0x76/0xa0 [ 35.564203][ T536] sock_close+0xb8/0x200 [ 35.573013][ T536] ? sock_mmap+0xa0/0xa0 [ 35.574469][ T534] ____fput+0x15/0x20 [ 35.583342][ T533] syscall_exit_to_user_mode+0x1d/0x40 [ 35.588880][ T539] ------------[ cut here ]------------ [ 35.588905][ T539] WARNING: CPU: 1 PID: 539 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.588908][ T539] Modules linked in: [ 35.588926][ T539] CPU: 1 PID: 539 Comm: syz.2.131 Tainted: G B W syzkaller #0 [ 35.588933][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.588945][ T539] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.588957][ T539] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 35.588964][ T539] RSP: 0018:ffffc90001867d68 EFLAGS: 00010293 [ 35.595246][ T534] task_work_run+0x127/0x190 [ 35.608688][ T533] do_syscall_64+0x3d/0x40 [ 35.617947][ T536] __fput+0x2dc/0x730 [ 35.629468][ T523] ORIG_RAX: 00000000000001b4 [ 35.634253][ T539] RAX: ffffffff842e9627 RBX: ffff88811c517800 RCX: ffff88811ab1cf00 [ 35.653298][ T534] exit_to_user_mode_loop+0xcb/0xe0 [ 35.653310][ T534] exit_to_user_mode_prepare+0x76/0xa0 [ 35.653356][ T534] syscall_exit_to_user_mode+0x1d/0x40 [ 35.660678][ T536] ____fput+0x15/0x20 [ 35.664223][ T533] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.668917][ T536] task_work_run+0x127/0x190 [ 35.672476][ T533] RIP: 0033:0x7f1f1db67e59 [ 35.672489][ T533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.672497][ T533] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.696126][ T536] exit_to_user_mode_loop+0xcb/0xe0 [ 35.701615][ T534] do_syscall_64+0x3d/0x40 [ 35.716188][ T536] exit_to_user_mode_prepare+0x76/0xa0 [ 35.720595][ T523] RAX: 0000000000000000 RBX: 00007ffe0ca77c40 RCX: 00007f9926384e59 [ 35.748708][ T539] RDX: 0000000000000000 RSI: 00000000115e4800 RDI: 000000000c04eb7d [ 35.748744][ T539] RBP: ffffc90001867d88 R08: ffff88811c517883 R09: 1ffff110238a2f10 [ 35.754014][ T534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.759046][ T539] R10: dffffc0000000000 R11: ffffed10238a2f11 R12: dffffc0000000000 [ 35.764416][ T533] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 35.772951][ T536] syscall_exit_to_user_mode+0x1d/0x40 [ 35.780361][ T534] RIP: 0033:0x7ffb818b7e59 [ 35.789021][ T536] do_syscall_64+0x3d/0x40 [ 35.794358][ T533] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.802848][ T539] R13: dffffc0000000000 R14: 00000000115e4800 R15: ffff8881115dfc00 [ 35.810545][ T534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.816604][ T536] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.820371][ T534] RSP: 002b:00007ffe775ae1e8 EFLAGS: 00000246 [ 35.824770][ T536] RIP: 0033:0x7f2335f2fe59 [ 35.824782][ T536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.824805][ T536] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 [ 35.832866][ T523] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.841852][ T539] FS: 00005555574b4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.860717][ T533] RBP: 0000000000008748 R08: 0000000000000001 R09: 0000000000000000 [ 35.867320][ T536] ORIG_RAX: 00000000000001b4 [ 35.872831][ T534] ORIG_RAX: 00000000000001b4 [ 35.877926][ T536] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 35.900209][ T533] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 35.903765][ T539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.911022][ T523] RBP: 00000000000086fa R08: 0000000000000001 R09: 0000000000000000 [ 35.920659][ T536] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.928102][ T533] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 35.933693][ T539] CR2: 0000200000000740 CR3: 000000011a139000 CR4: 00000000003506a0 [ 35.937577][ T534] RAX: 0000000000000000 RBX: 00007ffe775ae2d0 RCX: 00007ffb818b7e59 [ 35.946241][ T536] RBP: 0000000000008780 R08: 0000000000000001 R09: 0000000000000000 [ 35.953662][ T533] ---[ end trace 6a496eb8dba00505 ]--- [ 35.960768][ T539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.968300][ T534] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.977468][ T536] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 35.984324][ T523] R10: 0000001b33520000 R11: 0000000000000246 R12: 0000000000000000 [ 35.993015][ T539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.005212][ T534] RBP: 000000000000874c R08: 0000000000000001 R09: 0000000000000000 [ 36.009332][ T536] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 36.014493][ T523] R13: 00007f99265fdfac R14: 00007f99265fdfa8 R15: 00007f99265fdfa0 [ 36.048302][ T539] Call Trace: [ 36.055201][ T536] ---[ end trace 6a496eb8dba00506 ]--- [ 36.087885][ T534] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 36.097211][ T534] R13: 00007ffb81b30fac R14: 00007ffb81b30fa8 R15: 00007ffb81b30fa0 [ 36.105350][ T534] ---[ end trace 6a496eb8dba00507 ]--- [ 36.111925][ T523] ---[ end trace 6a496eb8dba00508 ]--- [ 36.119708][ T539] pppol2tp_release+0x150/0x2b0 [ 36.124610][ T539] sock_close+0xb8/0x200 [ 36.133871][ T539] ? sock_mmap+0xa0/0xa0 [ 36.138287][ T539] __fput+0x2dc/0x730 [ 36.142363][ T539] ____fput+0x15/0x20 [ 36.157538][ T545] ------------[ cut here ]------------ [ 36.163197][ T539] task_work_run+0x127/0x190 [ 36.168340][ T547] ------------[ cut here ]------------ [ 36.173859][ T547] WARNING: CPU: 1 PID: 547 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.177236][ T548] ------------[ cut here ]------------ [ 36.189674][ T539] exit_to_user_mode_loop+0xcb/0xe0 [ 36.194914][ T539] exit_to_user_mode_prepare+0x76/0xa0 [ 36.197387][ T545] WARNING: CPU: 1 PID: 545 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.210812][ T548] WARNING: CPU: 0 PID: 548 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.221008][ T547] Modules linked in: [ 36.224960][ T547] CPU: 1 PID: 547 Comm: syz.3.137 Tainted: G B W syzkaller #0 [ 36.225380][ T539] syscall_exit_to_user_mode+0x1d/0x40 [ 36.234749][ T545] Modules linked in: [ 36.239513][ T550] ------------[ cut here ]------------ [ 36.245421][ T545] [ 36.251415][ T545] CPU: 1 PID: 545 Comm: syz.0.138 Tainted: G B W syzkaller #0 [ 36.251636][ T548] Modules linked in: [ 36.260088][ T550] WARNING: CPU: 0 PID: 550 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.274300][ T539] do_syscall_64+0x3d/0x40 [ 36.278838][ T548] [ 36.281197][ T548] CPU: 0 PID: 548 Comm: syz.1.141 Tainted: G B W syzkaller #0 [ 36.287826][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.290081][ T539] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.306058][ T550] Modules linked in: [ 36.310115][ T550] CPU: 0 PID: 550 Comm: syz.6.142 Tainted: G B W syzkaller #0 [ 36.318829][ T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.330234][ T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.331858][ T539] RIP: 0033:0x7fea97e4de59 [ 36.344988][ T548] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.351503][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.355225][ T547] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.361956][ T548] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.369072][ T545] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.387697][ T539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.394418][ T547] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.413708][ T550] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.433989][ T545] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.439860][ T548] RSP: 0018:ffffc900014d7d68 EFLAGS: 00010293 [ 36.459401][ T539] RSP: 002b:00007ffe6348b5a8 EFLAGS: 00000246 [ 36.459843][ T547] RSP: 0018:ffffc90001257d68 EFLAGS: 00010293 [ 36.465628][ T550] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 36.472234][ T545] RSP: 0018:ffffc9000190fd68 EFLAGS: 00010293 [ 36.477939][ T539] ORIG_RAX: 00000000000001b4 [ 36.498225][ T547] [ 36.503707][ T548] [ 36.508897][ T547] RAX: ffffffff842e9627 RBX: ffff88811b212800 RCX: ffff88811ce0e2c0 [ 36.510771][ T550] RSP: 0018:ffffc900017c7d68 EFLAGS: 00010293 [ 36.513123][ T547] RDX: 0000000000000000 RSI: 000000001202a300 RDI: 000000000c04eb7d [ 36.521244][ T548] RAX: ffffffff842e9627 RBX: ffff88811cc85800 RCX: ffff88811cf42780 [ 36.527960][ T545] [ 36.535368][ T550] [ 36.543931][ T547] RBP: ffffc90001257d88 R08: ffff88811b212883 R09: 1ffff11023642510 [ 36.545731][ T548] RDX: 0000000000000000 RSI: 00000000150fdd10 RDI: 000000000c04eb7d [ 36.548397][ T547] R10: dffffc0000000000 R11: ffffed1023642511 R12: dffffc0000000000 [ 36.556037][ T539] RAX: 0000000000000000 RBX: 00007ffe6348b690 RCX: 00007fea97e4de59 [ 36.564590][ T547] R13: dffffc0000000000 R14: 000000001202a300 R15: ffff88811ce60000 [ 36.572112][ T550] RAX: ffffffff842e9627 RBX: ffff88811cf4b000 RCX: ffff88811cd293c0 [ 36.580580][ T545] RAX: ffffffff842e9627 RBX: ffff88811b211000 RCX: ffff88811abfa780 [ 36.588164][ T548] RBP: ffffc900014d7d88 R08: ffff88811cc85883 R09: 1ffff11023990b10 [ 36.596639][ T547] FS: 000055558634d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.604904][ T550] RDX: 0000000000000000 RSI: 000000001a1cd060 RDI: 000000000c04eb7d [ 36.613321][ T545] RDX: 0000000000000000 RSI: 000000001ce53300 RDI: 000000000c04eb7d [ 36.621780][ T539] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 36.630290][ T547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.637847][ T548] R10: dffffc0000000000 R11: ffffed1023990b11 R12: dffffc0000000000 [ 36.647128][ T545] RBP: ffffc9000190fd88 R08: ffff88811b211083 R09: 1ffff11023642210 [ 36.652860][ T550] RBP: ffffc900017c7d88 R08: ffff88811cf4b083 R09: 1ffff110239e9610 [ 36.661047][ T545] R10: dffffc0000000000 R11: ffffed1023642211 R12: dffffc0000000000 [ 36.668540][ T539] RBP: 0000000000008ad6 R08: 0000000000000001 R09: 0000000000000000 [ 36.677136][ T547] CR2: 0000200000000740 CR3: 0000000112118000 CR4: 00000000003506a0 [ 36.684733][ T548] R13: dffffc0000000000 R14: 00000000150fdd10 R15: ffff88811c700000 [ 36.693169][ T545] R13: dffffc0000000000 R14: 000000001ce53300 R15: ffff88811ce62c00 [ 36.701388][ T550] R10: dffffc0000000000 R11: ffffed10239e9611 R12: dffffc0000000000 [ 36.709844][ T547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.717225][ T548] FS: 000055558eed9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.725763][ T545] FS: 0000555572e08500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.733184][ T539] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 36.742744][ T547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.751053][ T550] R13: dffffc0000000000 R14: 000000001a1cd060 R15: ffff88811c703800 [ 36.759591][ T545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.767129][ T548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.775816][ T547] Call Trace: [ 36.781746][ T539] R13: 00007fea980c6fac R14: 00007fea980c6fa8 R15: 00007fea980c6fa0 [ 36.788841][ T547] pppol2tp_release+0x150/0x2b0 [ 36.791748][ T548] CR2: 00007ffc534eced4 CR3: 0000000112045000 CR4: 00000000003506b0 [ 36.800368][ T545] CR2: 0000200000000740 CR3: 000000010f480000 CR4: 00000000003506a0 [ 36.804603][ T539] ---[ end trace 6a496eb8dba00509 ]--- [ 36.813231][ T547] sock_close+0xb8/0x200 [ 36.820586][ T550] FS: 000055556b8a2500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.826791][ T545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.830405][ T548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.839974][ T547] ? sock_mmap+0xa0/0xa0 [ 36.847358][ T550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.866300][ T545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.877039][ T551] ------------[ cut here ]------------ [ 36.883778][ T545] Call Trace: [ 36.887318][ T545] pppol2tp_release+0x150/0x2b0 [ 36.892215][ T545] sock_close+0xb8/0x200 [ 36.895379][ T551] WARNING: CPU: 0 PID: 551 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.897518][ T547] __fput+0x2dc/0x730 [ 36.907612][ T548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.911619][ T545] ? sock_mmap+0xa0/0xa0 [ 36.921139][ T550] CR2: 00007ffc534eced4 CR3: 000000011c553000 CR4: 00000000003506b0 [ 36.924445][ T547] ____fput+0x15/0x20 [ 36.934484][ T551] Modules linked in: [ 36.936164][ T545] __fput+0x2dc/0x730 [ 36.939317][ T551] CPU: 0 PID: 551 Comm: syz.2.143 Tainted: G B W syzkaller #0 [ 36.943321][ T545] ____fput+0x15/0x20 [ 36.952007][ T548] Call Trace: [ 36.956784][ T547] task_work_run+0x127/0x190 [ 36.959289][ T548] pppol2tp_release+0x150/0x2b0 [ 36.963838][ T547] exit_to_user_mode_loop+0xcb/0xe0 [ 36.963849][ T547] exit_to_user_mode_prepare+0x76/0xa0 [ 36.963891][ T547] syscall_exit_to_user_mode+0x1d/0x40 [ 36.968887][ T550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.975387][ T547] do_syscall_64+0x3d/0x40 [ 36.979636][ T548] sock_close+0xb8/0x200 [ 36.985799][ T545] task_work_run+0x127/0x190 [ 36.993066][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.998016][ T547] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.001945][ T550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.007331][ T545] exit_to_user_mode_loop+0xcb/0xe0 [ 37.016532][ T551] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.022910][ T547] RIP: 0033:0x7f9926384e59 [ 37.030475][ T548] ? sock_mmap+0xa0/0xa0 [ 37.036213][ T545] exit_to_user_mode_prepare+0x76/0xa0 [ 37.041991][ T550] Call Trace: [ 37.046944][ T547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.050731][ T548] __fput+0x2dc/0x730 [ 37.056673][ T545] syscall_exit_to_user_mode+0x1d/0x40 [ 37.059418][ T550] pppol2tp_release+0x150/0x2b0 [ 37.059456][ T550] sock_close+0xb8/0x200 [ 37.079831][ T547] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 [ 37.083172][ T551] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 37.089100][ T547] ORIG_RAX: 00000000000001b4 [ 37.093747][ T548] ____fput+0x15/0x20 [ 37.099262][ T547] RAX: 0000000000000000 RBX: 00007ffe0ca77c40 RCX: 00007f9926384e59 [ 37.104156][ T548] task_work_run+0x127/0x190 [ 37.124399][ T545] do_syscall_64+0x3d/0x40 [ 37.128430][ T551] RSP: 0018:ffffc900010b7d68 EFLAGS: 00010293 [ 37.132836][ T545] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.140416][ T550] ? sock_mmap+0xa0/0xa0 [ 37.140428][ T550] __fput+0x2dc/0x730 [ 37.140440][ T550] ____fput+0x15/0x20 [ 37.140491][ T550] task_work_run+0x127/0x190 [ 37.146033][ T545] RIP: 0033:0x7f1f1db67e59 [ 37.149526][ T551] [ 37.156291][ T547] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.161593][ T550] exit_to_user_mode_loop+0xcb/0xe0 [ 37.166663][ T545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.169962][ T550] exit_to_user_mode_prepare+0x76/0xa0 [ 37.174055][ T545] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 [ 37.178562][ T548] exit_to_user_mode_loop+0xcb/0xe0 [ 37.183843][ T547] RBP: 0000000000008d19 R08: 0000000000000001 R09: 0000000000000000 [ 37.185257][ T551] RAX: ffffffff842e9627 RBX: ffff88811ce8d000 RCX: ffff88811cd28000 [ 37.193588][ T547] R10: 0000001b33520000 R11: 0000000000000246 R12: 0000000000000000 [ 37.198484][ T550] syscall_exit_to_user_mode+0x1d/0x40 [ 37.198519][ T550] do_syscall_64+0x3d/0x40 [ 37.218352][ T545] ORIG_RAX: 00000000000001b4 [ 37.223670][ T548] exit_to_user_mode_prepare+0x76/0xa0 [ 37.231063][ T545] RAX: 0000000000000000 RBX: 00007ffc97ed4fe0 RCX: 00007f1f1db67e59 [ 37.235179][ T548] syscall_exit_to_user_mode+0x1d/0x40 [ 37.243611][ T547] R13: 00007f99265fdfac R14: 00007f99265fdfa8 R15: 00007f99265fdfa0 [ 37.251189][ T551] RDX: 0000000000000000 RSI: 000000001a1cd260 RDI: 000000000c04eb7d [ 37.259798][ T545] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.264821][ T550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.269550][ T545] RBP: 0000000000008d14 R08: 0000000000000001 R09: 0000000000000000 [ 37.273982][ T548] do_syscall_64+0x3d/0x40 [ 37.279852][ T547] ---[ end trace 6a496eb8dba0050a ]--- 2026/06/27 09:28:26 executed programs: 137 [ 37.287500][ T551] RBP: ffffc900010b7d88 R08: ffff88811ce8d083 R09: 1ffff110239d1a10 [ 37.293346][ T545] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 [ 37.300983][ T550] RIP: 0033:0x7ffb818b7e59 [ 37.342006][ T545] R13: 00007f1f1dde0fac R14: 00007f1f1dde0fa8 R15: 00007f1f1dde0fa0 [ 37.353053][ T548] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.357927][ T545] ---[ end trace 6a496eb8dba0050b ]--- [ 37.361605][ T551] R10: dffffc0000000000 R11: ffffed10239d1a11 R12: dffffc0000000000 [ 37.390390][ T548] RIP: 0033:0x7f2335f2fe59 [ 37.394861][ T548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.414679][ T551] R13: dffffc0000000000 R14: 000000001a1cd260 R15: ffff88811c702c00 [ 37.422887][ T551] FS: 00005555574b4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.424438][ T553] ------------[ cut here ]------------ [ 37.432042][ T550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.439173][ T554] ------------[ cut here ]------------ [ 37.457339][ T551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.457348][ T551] CR2: 0000200000000740 CR3: 000000011a3e0000 CR4: 00000000003506b0 [ 37.457360][ T551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.457368][ T551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.457372][ T551] Call Trace: [ 37.457389][ T551] pppol2tp_release+0x150/0x2b0 [ 37.457401][ T551] sock_close+0xb8/0x200 [ 37.457436][ T551] ? sock_mmap+0xa0/0xa0 [ 37.466073][ T553] WARNING: CPU: 1 PID: 553 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.469915][ T548] RSP: 002b:00007ffe0bce0178 EFLAGS: 00000246 [ 37.479047][ T553] Modules linked in: [ 37.485745][ T551] __fput+0x2dc/0x730 [ 37.485786][ T551] ____fput+0x15/0x20 [ 37.494716][ T554] WARNING: CPU: 1 PID: 554 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.497166][ T548] ORIG_RAX: 00000000000001b4 [ 37.502360][ T554] Modules linked in: [ 37.506247][ T551] task_work_run+0x127/0x190 [ 37.506261][ T551] exit_to_user_mode_loop+0xcb/0xe0 [ 37.506272][ T551] exit_to_user_mode_prepare+0x76/0xa0 [ 37.506284][ T551] syscall_exit_to_user_mode+0x1d/0x40 [ 37.506320][ T551] do_syscall_64+0x3d/0x40 [ 37.511572][ T553] [ 37.521546][ T550] RSP: 002b:00007ffe775ae1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.521560][ T550] RAX: 0000000000000000 RBX: 00007ffe775ae2d0 RCX: 00007ffb818b7e59 [ 37.521588][ T550] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.528842][ T554] [ 37.531975][ T548] RAX: 0000000000000000 RBX: 00007ffe0bce0260 RCX: 00007f2335f2fe59 [ 37.536235][ T554] CPU: 1 PID: 554 Comm: syz.3.146 Tainted: G B W syzkaller #0 [ 37.539862][ T548] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.539870][ T548] RBP: 0000000000008d1c R08: 0000000000000001 R09: 0000000000000000 [ 37.539895][ T548] R10: 0000001b33020000 R11: 0000000000000246 R12: 0000000000000000 [ 37.550539][ T553] CPU: 1 PID: 553 Comm: syz.0.145 Tainted: G B W syzkaller #0 [ 37.554732][ T550] RBP: 0000000000008d5d R08: 0000000000000001 R09: 0000000000000000 [ 37.558940][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.563124][ T550] R10: 0000001b33620000 R11: 0000000000000246 R12: 0000000000000000 [ 37.563132][ T550] R13: 00007ffb81b30fac R14: 00007ffb81b30fa8 R15: 00007ffb81b30fa0 [ 37.563169][ T550] ---[ end trace 6a496eb8dba0050c ]--- [ 37.569086][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.573891][ T551] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.573901][ T551] RIP: 0033:0x7fea97e4de59 [ 37.573913][ T551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.573920][ T551] RSP: 002b:00007ffe6348b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.573934][ T551] RAX: 0000000000000000 RBX: 00007ffe6348b690 RCX: 00007fea97e4de59 [ 37.573940][ T551] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.573946][ T551] RBP: 0000000000008fe9 R08: 0000000000000001 R09: 0000000000000000 [ 37.573954][ T551] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 37.573962][ T551] R13: 00007fea980c6fac R14: 00007fea980c6fa8 R15: 00007fea980c6fa0 [ 37.573971][ T551] ---[ end trace 6a496eb8dba0050d ]--- [ 37.575261][ T548] R13: 00007f23361a8fac R14: 00007f23361a8fa8 R15: 00007f23361a8fa0 [ 37.581163][ T554] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.583928][ T548] ---[ end trace 6a496eb8dba0050e ]--- [ 37.614207][ T553] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.787807][ T554] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 37.834669][ T553] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 37.867934][ T553] RSP: 0018:ffffc90001257d68 EFLAGS: 00010293 [ 37.890903][ T553] RAX: ffffffff842e9627 RBX: ffff88811c7e0000 RCX: ffff88811ce08000 [ 37.899570][ T572] ------------[ cut here ]------------ [ 37.910031][ T553] RDX: 0000000000000000 RSI: 0000000017868900 RDI: 000000000c04eb7d [ 37.920430][ T572] WARNING: CPU: 0 PID: 572 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.928548][ T553] RBP: ffffc90001257d88 R08: ffff88811c7e0083 R09: 1ffff110238fc010 [ 37.940103][ T572] Modules linked in: [ 37.950966][ T572] CPU: 0 PID: 572 Comm: syz.2.158 Tainted: G B W syzkaller #0 [ 37.962898][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.969242][ T553] R10: dffffc0000000000 R11: ffffed10238fc011 R12: dffffc0000000000 [ 37.988848][ T553] R13: dffffc0000000000 R14: 0000000017868900 R15: ffff88811b239400 [ 37.989353][ T554] RSP: 0018:ffffc90001ddfd68 EFLAGS: 00010293 [ 37.997030][ T553] FS: 0000555572e08500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.998742][ T572] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.018171][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.032375][ T554] [ 38.034765][ T554] RAX: ffffffff842e9627 RBX: ffff88811c7e4800 RCX: ffff88811ce0a780 [ 38.043522][ T582] ------------[ cut here ]------------ [ 38.051161][ T554] RDX: 0000000000000000 RSI: 000000001acf4500 RDI: 000000000c04eb7d [ 38.054111][ T553] CR2: 0000200000000740 CR3: 000000011bbf3000 CR4: 00000000003506a0 [ 38.059682][ T572] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 38.073033][ T583] ------------[ cut here ]------------ [ 38.087414][ T554] RBP: ffffc90001ddfd88 R08: ffff88811c7e4883 R09: 1ffff110238fc910 [ 38.092754][ T582] WARNING: CPU: 1 PID: 582 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.101534][ T554] R10: dffffc0000000000 R11: ffffed10238fc911 R12: dffffc0000000000 [ 38.111273][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.119216][ T572] RSP: 0018:ffffc900014d7d68 EFLAGS: 00010293 [ 38.126754][ T554] R13: dffffc0000000000 R14: 000000001acf4500 R15: ffff88811b23a000 [ 38.127910][ T583] WARNING: CPU: 1 PID: 583 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.133255][ T554] FS: 000055558634d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 38.141091][ T582] Modules linked in: [ 38.151695][ T572] [ 38.160018][ T583] Modules linked in: [ 38.164410][ T572] RAX: ffffffff842e9627 RBX: ffff88811dc47800 RCX: ffff88811b1ce2c0 [ 38.166300][ T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.166310][ T553] Call Trace: [ 38.170917][ T572] RDX: 0000000000000000 RSI: 000000000ddc2da0 RDI: 000000000c04eb7d [ 38.178353][ T583] [ 38.186853][ T554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.189764][ T582] [ 38.198227][ T554] CR2: 0000200000000740 CR3: 000000011db1d000 CR4: 00000000003506b0 [ 38.200223][ T583] CPU: 1 PID: 583 Comm: syz.6.175 Tainted: G B W syzkaller #0 [ 38.207158][ T572] RBP: ffffc900014d7d88 R08: ffff88811dc47883 R09: 1ffff11023b88f10 [ 38.209496][ T582] CPU: 1 PID: 582 Comm: syz.1.174 Tainted: G B W syzkaller #0 [ 38.217769][ T554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.225821][ T553] pppol2tp_release+0x150/0x2b0 [ 38.225862][ T553] sock_close+0xb8/0x200 [ 38.234452][ T572] R10: dffffc0000000000 R11: ffffed1023b88f11 R12: dffffc0000000000 [ 38.242795][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.251327][ T554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.255647][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.260481][ T572] R13: dffffc0000000000 R14: 000000000ddc2da0 R15: ffff88811ba5f400 [ 38.267958][ T583] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.278706][ T554] Call Trace: [ 38.286054][ T553] ? sock_mmap+0xa0/0xa0 [ 38.286112][ T553] __fput+0x2dc/0x730 [ 38.296875][ T572] FS: 00005555574b4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 38.304513][ T582] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.311435][ T554] pppol2tp_release+0x150/0x2b0 [ 38.314073][ T583] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 38.318687][ T554] sock_close+0xb8/0x200 [ 38.322346][ T582] Code: 5d c3 e8 fc 0b 36 fd be 02 00 00 00 eb 0a e8 f0 0b 36 fd be 01 00 00 00 4c 89 f7 e8 a3 76 0f fe e9 0f ff ff ff e8 d9 0b 36 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 c8 0b 36 fd 4c 89 f7 be 03 [ 38.331929][ T572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.337704][ T553] ____fput+0x15/0x20 [ 38.343159][ T554] ? sock_mmap+0xa0/0xa0 [ 38.362211][ T583] RSP: 0018:ffffc90001f3fd68 EFLAGS: 00010293 [ 38.362224][ T583] RAX: ffffffff842e9627 RBX: ffff88811b82d800 RCX: ffff88811c484f00 [ 38.362230][ T583] RDX: 0000000000000000 RSI: 000000001d43b000 RDI: 000000000c04eb7d [ 38.362263][ T583] RBP: ffffc90001f3fd88 R08: ffff88811b82d883 R09: 1ffff11023705b10 [ 38.367970][ T572] CR2: 0000200000000740 CR3: 000000011d445000 CR4: 00000000003506b0 [ 38.386223][ T582] RSP: 0018:ffffc90001da7d68 EFLAGS: 00010293 [ 38.393320][ T572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.396896][ T582] [ 38.401101][ T572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.407229][ T553] task_work_run+0x127/0x190 [ 38.416145][ T554] __fput+0x2dc/0x730 [ 38.431175][ T583] R10: dffffc0000000000 R11: ffffed1023705b11 R12: dffffc0000000000 [ 38.431183][ T583] R13: dffffc0000000000 R14: 000000001d43b000 R15: ffff88811d8f1800 [ 38.431195][ T583] FS: 000055556b8a2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.431202][ T583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.431237][ T583] CR2: 0000200000000740 CR3: 000000011d1fd000 CR4: 00000000003506a0 [ 38.440559][ T572] Call Trace: [ 38.445358][ T582] RAX: ffffffff842e9627 RBX: ffff88811b828000 RCX: ffff88811c4862c0 [ 38.454032][ T554] ____fput+0x15/0x20 [ 38.455733][ T553] exit_to_user_mode_loop+0xcb/0xe0 [ 38.464001][ T554] task_work_run+0x127/0x190 [ 38.480348][ T582] RDX: 0000000000000000 RSI: 000000001def1520 RDI: 000000000c04eb7d [ 38.480377][ T582] RBP: ffffc90001da7d88 R08: ffff88811b828083 R09: 1ffff11023705010 [ 38.489676][ T572] pppol2tp_release+0x150/0x2b0 [ 38.497398][ T583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.504738][ T572] sock_close+0xb8/0x200 [ 38.523460][ T582] R10: dffffc0000000000 R11: ffffed1023705011 R12: dffffc0000000000 [ 38.527796][ T553] exit_to_user_mode_prepare+0x76/0xa0 [ 38.532890][ T582] R13: dffffc0000000000 R14: 000000001def1520 R15: ffff88811d8f0c00 [ 38.538467][ T554] exit_to_user_mode_loop+0xcb/0xe0 [ 38.545673][ T572] ? sock_mmap+0xa0/0xa0 [ 38.554402][ T553] syscall_exit_to_user_mode+0x1d/0x40 [ 38.558537][ T583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.567262][ T554] exit_to_user_mode_prepare+0x76/0xa0 [ 38.570776][ T583] Call Trace: [ 38.579383][ T553] do_syscall_64+0x3d/0x40 [ 38.584475][ T572] __fput+0x2dc/0x730 [ 38.593172][ T554] syscall_exit_to_user_mode+0x1d/0x40 [ 38.597714][ T582] FS: 000055558eed9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.602618][ T553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.607595][ T583] pppol2tp_release+0x150/0x2b0 [ 38.616052][ T554] do_syscall_64+0x3d/0x40 [ 38.621112][ T582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.624272][ T554] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.628682][ T582] CR2: 0000200000000740 CR3: 000000011da3a000 CR4: 00000000003506a0 [ 38.628693][ T582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.628699][ T582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.628710][ T582] Call Trace: [ 38.634079][ T554] RIP: 0033:0x7f9926384e59 [ 38.638352][ T572] ____fput+0x15/0x20 [ 38.647772][ T553] RIP: 0033:0x7f1f1db67e59 [ 38.653251][ T583] sock_close+0xb8/0x200 [ 38.658609][ T554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.662551][ T582] pppol2tp_release+0x150/0x2b0 [ 38.669587][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.675174][ T583] ? sock_mmap+0xa0/0xa0 [ 38.683589][ T554] RSP: 002b:00007ffe0ca77b58 EFLAGS: 00000246 [ 38.691060][ T582] sock_close+0xb8/0x200 [ 38.699586][ T553] RSP: 002b:00007ffc97ed4ef8 EFLAGS: 00000246 [ 38.702466][ T572] task_work_run+0x127/0x190 [ 38.707169][ T554] ORIG_RAX: 00000000000001b4 [ 38.710806][ T582] ? sock_mmap+0xa0/0xa0 [ 38.715787][ T553] ORIG_RAX: 00000000000001b4