Extracting prog: 6m7.137195962s Minimizing prog: 21m4.767061058s Simplifying prog options: 0s Extracting C: 21.195870554s Simplifying C: 3m9.100384998s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-socket$nl_xfrm-sendmsg$nl_xfrm-socket-sendmsg$SMC_PNETID_GET-getsockname$packet-sendmsg$nl_route-sendmmsg$inet-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3801000010003306feffffff00000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000370429bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="8d0c010000000000580012800b00010069703667726500004800028004001200", @ANYRES32=r6, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000001c40)=[{{&(0x7f0000000b40)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000400)="6df0ecd298a757c419158132732034ff63e8d4a2ec07c35ef60e81fca655471ec639f9ffa4a732b1501afdeceac7356a5a86168e93680bf1555f081f42583cbfd7a8feb1a5a8ffb5f7df035fafd2da1a5d7ba14a9370cb9c2afb3f7b854bee20c731f4a094345a2dbd3941d8997992ee3510157a352a49bc38f06ad3d1136f1b93a28ee31c37cc27eac6dc788495fb66452a15981f4f910c37ba7ef11d61fe56d070a48483d43968d520120380797ba62e19103d10620a0403f15c663003b72111a71b4cac0aded2ec1ed6d3d20380", 0xcf}, {&(0x7f0000000540)="99a3", 0x2}, {&(0x7f0000001d80)="ef5595a41ad5f243d2a4bebda3a6a1954cd10ea606e85032d6940996c0f1243de18819e68f85bb6dab5d7ef9c3a412c8c839ab4a1b7b8469ad3faeb5e286bbabc7744fa7ea4b1fdcdb7b29bfc0729bfb0a216b87f2aabbf909e50e22c3cc0a51a72beff78075d8b02b2646f9b37def9b791fb6efe6e10a266f5714a1502e936f0b81bd1e3d2b9e57ea997f0375e1ba7f1aea77616ac040477238c075d2d1d33046", 0xa1}, {&(0x7f0000000640)="3036fce87afed373ab1f67629853bbabdf62ca3075ee46c8cf43c9593566bbda6c74003c5d0273fea9cfee99d34f576af780258bb8340defda8d4bd430637b9aeb61e7a044b01cce6682c5f2e5f8bd15fc4120a3506e62fca995e0780d32d4af5172be1a2a0e3da0a56e8ae8a84592f119db08ec5b104f5835ade120dfa94ebd9b18b739c01d66a4c68e13d311ecb7d77b1591d4d66b2d168a9a739d2d46b0d07cd6898b824bd261b3b9ac8f47b9db41abf9798754c0b0832543e5679476f27f6bb30a6be5165d582eaf9250787782b823cb9e175dcdd7", 0xd7}, {&(0x7f0000000740)="d892fccb74b19dfc70da936043e73af88557882103f0925e5f9dbad36e21f07ca51875296b7408bf075f0dac32bf1a7a0385806195d8c1f76b664300146206132a58b7f75bdbed389f89071eecf86e77427e50146a1b893e4e1b9ad8a3be911a9b8bc4cf8ed3f0426e4652e9", 0x6c}, {&(0x7f00000007c0)="0fe878926aa4533365f4d5d655c6970490cc812ad56391e60fb13b36f2fd4518e1620763d40e4c34e76e24605424d6bff400962063c3840e7ada5ebccbb5d3db0ae749f6ffbb523e14935e67d92da3b5289918d702491e077ecdb2e57e867ac3957945894b1c83a28056287f85e57515de5a9be5dd5ef6179d3d4b2b137e542ac6d832", 0x83}, {&(0x7f0000000880)="f868bce6e0ffefac1e4a53ec74d8915d113ddf384974dbc79a10c435", 0x1c}], 0x7, &(0x7f0000001d00)=[@ip_retopts={{0x54, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x2f, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @loopback, @remote, @local, @loopback, @broadcast, @empty, @local, @remote]}, @timestamp={0x44, 0x4, 0x12}, @noop, @generic={0x89, 0x8, "279639b519dc"}]}}}, @ip_ttl={{0x14}}], 0x70}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a00)="4d6ed3aac872b66bf364d4e68043f4b04026297dbbcc88e23a976d1fae7ac13524cb27d453cea6ae8dd3e677cebb04", 0x2f}], 0x1, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000c00)="cd0cbac76a14480d84b71fbc7e5c62a26fade3f2230d79a7360a545e6a6b470584e6cbcfbe7542c0f81dc14b11da1c9d36500ae9df1e6f1c34c330b2c7c0c5d8e6cb6a06345f68dd95ba48449b487a8e1a29f764a1e303f86f9d72e462227026cf9d5b0a19e0ecdaab09ad2b62eebbaf369771554fb7a709ed363d52a11725169c8e19c58a4ec96b9d141bf4d0e2f6abd9bd34defc362379c9accaa8a962535954c701aa95bd18ac0a19409e7e33474418b94317fc62a12a1b32a61d91b35dcfc6919486a4076a512f72af9bdb0732eb8bcccbf642fca2ef15d6e4cff3b04d5da33028f37bfc16e36eb82282cb77fd24ada4df67d91847d863060f8d5724489fed0b470fb6bde2e97c202f27abb31bbc226cec9b153da3af2db7c9526ee7279adadd911cda77a55b1ce797357217858fef5b6175fa98cabc81fb1a8252f0ca73d674a908823f158fc732fb002a57564a9cfd0c6a10ffe872f1fd3cec5ef9f26a92d2ed007c5583b0ba3e4b5229abcf4d64b76eae6970d1a9be8b7b22faeb124f1941194aed62c11298947b2e27d5237b2ea5c9c31ea15adf116bdd466acdcf3ee7d2720cf717ad0542c589232e4d8b4a9cebaea66d3457765d7debdd0e15f68da36f91266e01022a950c5e0d419b82592bfe3a39c75b86fc10567ceba894dc77fe753b0ae3c7a0dbb89f7bf3590fdbf6ba8544ca7b17bbedc361febdbaf48886bbffdc59f7742ad1533c4e3d739e5c49db7d950c9c49613815b109bf22f89eb5c89ecd3a80cb3ea6fc446e085b380cd04ca9ec18eae8365ed445a42c9084d1fdbb84593070982871e46b79927aa2f564ba67550385a75f2219f580a4f9590b235657c5767e590c6d2a11b9bb48c19c621776c4110df6fdbabb0e9cb5be70b053332f862c24ac31cac77fd68dfd168849a0242af8695c7ef6d5c94743eeecae0a4798abfd22867ef09959af798fe55cea67de3613effa101da2b5a9eb459f735ae8f7f6c787590f02800ba94ecbcac42c2414c5e0de150bef61d35eff2566b11ee744c4c48891c623102c4b4dcd9e3fb634325337410641698783472555ac6930bdbb2fd98794c3c60603007cf10139a040ff17d8bb989f4604fa59dff1d16e22da70033a13079a90aac54de4c754e42a8193940f3722ba537ce11362b9a895b000749d671500cba517f7c86fa38ea87ea19aec3248b8718c77f4f9d1b6c341e27002770bc06791db43491c2b5714162e8f43f3dbb422083a25f36327a3705b7740a9939f89b35219a253430fcd44ff9faf94a581c5ee68b3c5e102297dc78a5fbd4a2cad377fec4628d1c9719a44364b085302bcfd0bf970edd6460e72824fefbd55deb36973abca5ced07d29715ecd81256a560385803cd8dfb2da339de1ade6e3d5fb2439f27a384dd0185d448e2e0c3b108e366e370d78eee73b61a9ddd2788a73f4a4fef0b842e10a77672e0f7051c6b629c0dde0a2144f2e10f91e78edc10d12585d9bdc3355262089b7b732a9a2114aacb959a03aae727b0f578a4cbe29fbd9e77d7d7fe73f3f8d46c71949e5035443e187ed1ed8e0715b482642b15647e7df3e3a7738ac5c8c6326c6f130c1d5f060e1355229fa78c4c093f24f6c9decc5d7d73a6f2c8057e93fbbe60af40a7202cc17d87bf11275f467fd4939e41bb2408c5161aee604d1e3f737ccb722c44c7134db15596a1053ba876c3cba6678ca2cdca80160a782381a7918fcf0fe467658267ecaa662d66d8f9a3c642476920089883c90c6922ca4d64882abac227bb029836c80fc295fd6ccb20f072835329786faf2b69e4d30a313e67029b76884505bfbb2f45600dae39d8fced15e63be0fd1233eaf61ce08a2cee40acda5614b3f0d5b2039ae5ad2508b1612d012c9112dee6d9325c5cbe13d732747e94b85a0015f3f5df7e184185f63a1e2919dbc45c0c641ec6ad4297f4920791a6849dcc56639556af7c46ba8ebf22a6233edd36e68d6340221aefb24a6cd930d09308204b72616db596604645e691f5b567f55f411cbe93d67d5365281e28b523623c1de355113b0ece8b7ad84217102a400d549c473e1f0e18e672e44f58d4ced8e1d5f7cf95a87fa31f449d16e4cf35ff2b862410f821f0a0fc80d0b91c08700a42e718b5ae1a48b8741de8ac4f8d05f14422e5052e456d47fb08becf363dbb35a8ce5b7d7a2cac366255c1e1784cda85eb65459ae47324a2f02a699c41aa930202bf4d36a3726c42f9ea6e855992798af53482f04f88f6a3c28831020a373676e30d55c3e7c94016cc344c014ae88f1c72e0e3a7543e45cf8a9d70969db1900911e1e1c86f012ca5b763dce67317228d1379dc27881a306c3f7b0cf0c8be2197687757fb382ed5bc1d9999711dcfa9745febc00811d9448d94d3393ebafe6749064694855bd712a86be26c3dd3aa194e78a19b6149f4e2815850439e7484803d4c2ab4a256527430b78dfe315897f8c4a2c0a2544d094f716c24c23112a32fe440d2a750d276a8b0b123df1639f09c0f4cfd0b207ac4343719c23b2820cc59771d89e9f853df9a04e901446645f908619d35702948fb43b6af85d66873071ce96953cbc701d11d8bd05703623f07eddb6b22c8e6b96d7ed665c438d20d844c3cb1b0371a261897b839c0f5fd22faa9b9c90d85c572123225e9d7658b684d8406a4b7e6a3628483a5dc38d648938ac77745f1def3fc59f848864190ca2720f178a1c66ab1da8cb515196484be52f5bf4e287b563ed56b8b317a3171cce69c6462cf6001b4fdf0575dce1aca745ce318430e6252f9a42284553f607474ce792fb71bce0431b7f870293be710664498c25e7333b818e2786c63e301fad861282b01e5ed3203c2039fafb7b10b5427c70b254481ef65e4a9f4fc15d94207cc5c53d92d2f531c5b8892c0b1f10453384a0c66ccbad0281761f88177ce509c3a13d1e937940506d2c79f62fa4c9cbb38a806476f8e64c4e8f2721a0ca010206ab0122fc284d776010226f3f34e70875f1376905e96b66560946092c1f78f2b3add2f5287258bfff21e48957aabb8ddd743d26f6cea52cb16872774d045d517f3278dc93793278266689cf233f4c7ea5ca1aae6ac23b6ba3ad02f789e4b678ef5896ba35b7e3e3e0715815866c732bbb576b9d642b20756f343c0e1fa3fb16725eded2924f02bc1fbd0c73bb91c47e88bf0064230f7f58d4be765b0a448d8d824652f2bd6cb2ef147b8358afd7d7317a70b9d8beda6f543dd07903483f1f0c5538e11116bd9074a3cf75160de811715b2e5abcb7ac9909d113e0aeb10f58f78d8b9885891815d277a8b92af0f75ffa93333d873a9d9e9531021390b87bd7eaf5f678c471a17df373a91a2233decb7491107c05e2ccea4523a35393fb52e769154b98b941a488f0945fb994a94055dd525423fcc87f84fd3fb35d4f81b50142be5f42c3cc338b1549c3313f8cbd4a7151fe002f8ecff79e1efe53e02b66bc6d46ea8dd5c97e33eddd3d189683894488a889e4235b1e043b1503a3a6b2fcb529b09397c5d8d28566ada77e89c1ad18744f1ed64331a03e3271af4194d7d49e66e087d69a7089ba9d01a01fd7f1528062acee3b357a62d09045cd2eaafbb6e4a5ab40b6e6cebef5bf33434645f4f4d654ca96bd12074bdd3ab6cc14c91c053f5e58ee19dc6997ffa4896826746d3215bd4119a17fb8b4a993f9fe7ee76b1094d61d25f35be61dcddab56b0d1f1bd9212a5776a8cd1c8097cc4e02f8db7fd7ff483a664e0ed8e7fea00dacdf5eb30ba82afdb611f574eeb70a66b3d7c1018e5a198e9f72c77618dff219b9a97cf45b80c4cd3ec3b9cca27fc9a460e4e1f99dcf412c53110c47dc3757ae315d8315027f326e7e4393bf34d499e7234644b5fc8c08368b8f0ca5b3ce035d099cfb416e8a92adedba9e947dff36cf101ebb8e1efe87a6c7fb79bc642854a8fb6e64c424433420fb36416cbbf55e3a149799bca7cb7fcb339870ed6e56b1019dd2a5077ee2affd06de2b11ff3454e36f4165f9f00b58b399795f6109f7fce7c34fc05ad073b81d69524cdbd8f0d4630fb320c8eabfa7f3940c6edc7ba3be0f8d472ecf32421f56d6fea22655720bab2e7e454e2ad586634887cf8aad054b9bb328f6c391495a66951305bb71f1dfc3fe4b906e0c0335a6864b9b1d9ab12ea31fded8c86188ed5ccc26bd6504ae00f43d4a61f8dc3676bb3603355b3aa5e372be8328b0b5026051a86903c932215afb01d558e60c7b847df7279538382578e990b7ef850bd9ee5c6a88478c3aa10dc6aa592eb052a138f1e0b186c21f93390a005f9b78c8904085b6e77a39b4023752fcdb99cb80819a2ebec0ffbf9099c28b42bb2b23013073f9af66f38ef1996bc4a54495a1cc98a33384dcb6fd9755e20c51f9130312645a7789ecbb0f9f4c699c295817a4f947544fe3f3d2c69675f27472d7a483595d6c862ed986d1ad0be97b2e2842d5a3d7ed601dbdbd612c04a54ef174734a247f901d206a9f0b67d7bc17a08c450bf2ffa23880618c9dab167b37fa62a8c283b9444f5806045fb72ebb2d220739e96d47960350180ccb32ef536bf14c663b19f69ded54031fc5f306e3f67b99f2f0bffd4cc6afb741ebc7e22f07da6098549e27794a8ffcac73ef428c2cc161c97ddf25687ddf21fe505c2ccab760274d7a31176e77b5aa7e3941e93799fee249293819cca396b33f46710bb078b07fe0ac4ab2f01862528034943a80e5c1976127bf0976ff78bc1cb74cf4f66561a095f43c5f4680ee236124fcde15022b1d873201aa1b126303a91f27f3e5650a9e2c3bf82d785f8635508ebbe4a0171c1c945c4ec928902eafc6e5285e1d875dd32fc1c843d4f43e38cfac9570e81490577e63457d3339967fcb990354cf7f5770e7157fab0d0b9acd4d559e7f897aeb1b2b93722bace84bc6d27003653e387440c67c2b8cae7d01f24e523d3e9a81ea469a81109069d675238dbccb3e92a72f625d844a1a63d1e9a562b3dda7a62d536ace9467c3de0f862b1a47351df5ac0b9a2a2af6cc8224948c97030e5d20f801c21019a0a7d2a47aeaf5b8df356bf61d27a30e3b986b750c9a8c6167dc06b24e0965ed17cf30f740079ac86a0d2421adb11c7cf19d55d177c04847684abba0be8050e8a57551273274e580b825e82551c6865fc2422fd209ed3d5d215f56d2309459accd824c272085e4f1288e7ff2c2374f959cb2c2d807122eb88e9422c2cbe384ec5a6b7759c0e53666f2778d4a1da36a80d7aff4bd26417f6ae57ce0f8d77f25d06cd3faf10f6d93d3db90e3fc529f9e84f0dea1dbb1c2988f8bfce05c60b7267a5418ecbc3abf536a66e28d9bf65d80bf00b0bd8a31042ef59487464323646e4073ec52f44366430dda48df90800c2d525dbc0336058a8ac165f03b17b3357397729ccfd24ca157c9e261c92244680d3a103e9526b79aa0f8bfb32bd7801018630b786f1b2c5e76544396e3d122d66df4148119c0f3fc7b8a0ae639e583772efba26a1b35036620947433022bd80bfa820003ed06d1b0ae2769ffcfe7079affce699ee5b6953933be58d1d807521130946fcd9abe79a0ba793ba974418a236efe9f03b24b8413d97bbd74f9847351e7b14ba0ec657d321a23451779b85794d56c3af2b257c0cf50975ecad1fb86f3ab1dfdd53371266ffc5fc87ba80018e6fbed4e297ec08b88b7b0ed99744e3f8088eebe291d1af4fa6bf8eb4f071df374c0d63c33ea43f9fcad324a54069dc40a89edfb80f7edc180cbd18d53c", 0x1000}], 0x1}}], 0x3, 0x20000890) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x15, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x0, 0x1, 0x3, 0x4, 0x2, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x3c, &(0x7f0000000180)=""/60, 0x41000, 0x64, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x13, 0xaa}, 0x10}, 0xffffffffffffffef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_generic-socket$netlink-writev detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}]}, 0x5, 0x4da, &(0x7f0000000e80)="$eJzs3c9vI1cdAPDvTJJNmqZNCpX4TZfSsqBV7cTbRlVPywWEqkqIihOHbZp4QxQ7jmKnNGEPyX/AAYlKnOBP4IDEAakn7txAXBBSOSAVWIEaJA5GM56k2STORovj2cafjzSaefNsf7/Pu/Pe+CXxC2BkXY+IvYi4FhFvRcRscT4ptrjd27LHfXT/3vLB/XvLSXS7b/4jyeuzc3HsOZkni9eciojvfTvi7eR03PbO7vpSo1HfKsrVTnOz2t7Z/ctac2m1vlrfqNUWFxbnX731Sm1gbX2u+asPv7X2+vd/+5svffD7vW/8OEtrpqg73o5B6jV94ihOZjwiXr+MYCUYK9pzrexEeCRpRHwqIp7Prv9u2dkAAMPQ7c5Gd/Z4GQC46tJ8DixJK8VcwEykaaXSm8N7NqbTRqvduXm3tb2x0psrm4uJ9O5aoz5fzBXOxUSSlRfy44/LtRPlWxHxTET8dPKJvFxZbjVWyrzxAYAR9uSJ8f/fk73xHwC44qbKTgAAGDrjPwCMHuM/AIwe4z8AjB7jPwCMnkcb/78w8DwAgOHx+R8ARsp333gj27oHxfdfr7yzs73eeuellXp7vdLcXq4st7Y2K6ut1mr+nT3Nh71eo9XaXHg5tt+tdurtTrW9s3un2dre6NzJv9f7Tn1iKK0CAM7zzHPv/zGJiL3Xnsi3OLaWg7Earra07ASA0oyVnQBQmvGyEwBK4zM+cMYSvQ/o+ytC7/V9iq4FHnM3Pmf+H0aV+X8YXeb/YXSZ/4fR1e0m1vwHgBFjjh+4hJ//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU3k29JWinWAp+JNK1UIp6KiLmYSO6uNerzEfF0RPxhcmIyKy+UnTQA8H9K/5YU63/dmH1h5mTtteQ/k/k+In708zd/9u5Sp7O1kJ3/59H5znvF+dq5gSw1CAAlORynD8fxQx/dv7d8uA0znw+/2VtcNIt7UGy9mvEYz/dT+Y3D9L+SotyT3a+MDSD+3n5EfPas9if53MhcsfLpyfhZ7KeGGj99IH6a1/X22Xvx6QHkAqPm/az/uX3W9ZfG9Xx/6vp/8U8/fDs/Oz6A+If938Gp/i896v/G+vR/1y8a4+Xffadv3X7E58fPip8cxU/6xH/hgvH//MUvP9+vrvuLiBtxdvzjsaqd5ma1vbP70lpzabW+Wt+o1RYXFudfvfVKrZrPUVcPZ6pP+/trN58+r/3TfeJPPaT9L16w/b/871s/+Mo58b/+1bP//Z89J342Jn7tgvGXpn/dd/nun+xHrJzd/uI5/dt/84LxP/jr7kp+MIgBGwAYhNtLjUZ9q72zu+5gKAfZvdtjkMaVO9j/xLyr2f+A8x+TRsTDX+czl5hq2d0ScNk+vujLzgQAAAAAAAAAAAAAAOhnGH/wVHYbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA//9qutVe") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-fchmodat-close-syz_clone-socket$inet-sendmsg$inet-sched_setscheduler-socket$packet-sendmsg$TIPC_NL_LINK_SET-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_VCPU_EVENTS-setsockopt$packet_tx_ring-epoll_create1-userfaultfd-ioctl$UFFDIO_API-close_range-socket$xdp-socketpair$unix-pselect6-epoll_ctl$EPOLL_CTL_ADD detailed listing: executing program 0: r0 = socket(0x1, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) close(r0) r1 = syz_clone(0x20000600, &(0x7f0000000080)="d735aff7ca70096f502ebd9117efde909cfdb93de3095a1ce1cab573d1d01231f3de5f43fb179ec339ea6869babe79093a46af2cac332962800578957678b32acaf0cddb912510765a5f3cc5fb28a69d7be2bbe633aa9bdc5827e04d68da3999753a9f4c78c2ef492a1c58353e9615d741c4abd472fc923e451ea38585bd6668de1180dde808fcf6a48f027c31b644610817aa91a548945e6315561e73ad80", 0x9f, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000002c0)="a3081341f6dd2d4fe47e566900b83e0dc491246c909563996e1f666d0be57e7fbdd534697efdc25c0f2908c68bb95edb8d1c8606ad07d07ca33ea17751cd986cada3e62dfededb67e328d93ce7ae12b7057049e86d97732a16861641b34807eee39a3a894340e706e9371f2abfcf4135f6d3e9611b3331bd78dafad88687e9aa5a9de0e0daf64eb65ab0cc662cb96d671020bcad844e396743e95493289bbcfd3da860") r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000008180)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027ff9ff0100008000001c00000000000000000000000800000081680f9d43"], 0x40}, 0x20000000) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x3) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)={0xec, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe99}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "dbd25f94f2863d53b2fc9fb88a1c12e90158e4a625"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x9, 0x3, "d9e9283dc1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x56, 0x3, "0abeb330df2a465acd4873acebf8b6333c1477eb25e7255ecf4e0bb2d2802aadebb60ca3ca4318703cd9c6ed2109d36ad4c3a3fd55458f075a57cf2658b842740190579dc4c9843b7f6f65788d9c8b184e57"}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x34, 0x0, 0x48, '\x00', 0x9}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r7 = epoll_create1(0x80000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000500)={0x6000000d}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-ioctl$BTRFS_IOC_ENCODED_WRITE-fsconfig$FSCONFIG_CMD_CREATE-openat$selinux_load-bpf$PROG_LOAD_XDP detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002500)={&(0x7f00000024c0)=[{&(0x7f0000000300)="96b5b37bd3c12b008195af32a0f089375ead04a061c4b609969cb6c5673fd93b0c5bff1fc7ad9416c5f58566ffcb37aca3c16890b3ace941efa899b51ac1aa0001cf1ae2233042807fa90d9367c99c9c4941373228d4370522a18ebb7f555ba1dffe6a7d929df389db0f71fb762ae37a1561fdfd4862bb3ab0048738e601315b97a521d9c035d7ddc07ffb961240144b7c5fb1970f968d144795711f2bdeb28d0b428381a70da122a7a8ef2b50225b1ed4f40665341804c0dd224513", 0xbc}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, 0xc, 0x0, 0x5, 0xfffffffffffffff8, 0x4, 0x8, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040000000000000000004000000ffd00000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-ioctl$BTRFS_IOC_ENCODED_WRITE-fsconfig$FSCONFIG_CMD_CREATE-openat$selinux_load detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002500)={&(0x7f00000024c0)=[{&(0x7f0000000300)="96b5b37bd3c12b008195af32a0f089375ead04a061c4b609969cb6c5673fd93b0c5bff1fc7ad9416c5f58566ffcb37aca3c16890b3ace941efa899b51ac1aa0001cf1ae2233042807fa90d9367c99c9c4941373228d4370522a18ebb7f555ba1dffe6a7d929df389db0f71fb762ae37a1561fdfd4862bb3ab0048738e601315b97a521d9c035d7ddc07ffb961240144b7c5fb1970f968d144795711f2bdeb28d0b428381a70da122a7a8ef2b50225b1ed4f40665341804c0dd224513", 0xbc}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, 0xc, 0x0, 0x5, 0xfffffffffffffff8, 0x4, 0x8, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-ioctl$BTRFS_IOC_ENCODED_WRITE-fsconfig$FSCONFIG_CMD_CREATE detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002500)={&(0x7f00000024c0)=[{&(0x7f0000000300)="96b5b37bd3c12b008195af32a0f089375ead04a061c4b609969cb6c5673fd93b0c5bff1fc7ad9416c5f58566ffcb37aca3c16890b3ace941efa899b51ac1aa0001cf1ae2233042807fa90d9367c99c9c4941373228d4370522a18ebb7f555ba1dffe6a7d929df389db0f71fb762ae37a1561fdfd4862bb3ab0048738e601315b97a521d9c035d7ddc07ffb961240144b7c5fb1970f968d144795711f2bdeb28d0b428381a70da122a7a8ef2b50225b1ed4f40665341804c0dd224513", 0xbc}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, 0xc, 0x0, 0x5, 0xfffffffffffffff8, 0x4, 0x8, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-ioctl$BTRFS_IOC_ENCODED_WRITE detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002500)={&(0x7f00000024c0)=[{&(0x7f0000000300)="96b5b37bd3c12b008195af32a0f089375ead04a061c4b609969cb6c5673fd93b0c5bff1fc7ad9416c5f58566ffcb37aca3c16890b3ace941efa899b51ac1aa0001cf1ae2233042807fa90d9367c99c9c4941373228d4370522a18ebb7f555ba1dffe6a7d929df389db0f71fb762ae37a1561fdfd4862bb3ab0048738e601315b97a521d9c035d7ddc07ffb961240144b7c5fb1970f968d144795711f2bdeb28d0b428381a70da122a7a8ef2b50225b1ed4f40665341804c0dd224513", 0xbc}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, 0xc, 0x0, 0x5, 0xfffffffffffffff8, 0x4, 0x8, 0x2}) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1-epoll_ctl$EPOLL_CTL_ADD detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket-epoll_create1 detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x1e, 0x802, 0x0) epoll_create1(0x80000) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix-socket detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x1e, 0x802, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-connect$unix detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid-sched_setaffinity detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler-getpid detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) getpid() program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int-sched_setscheduler detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x2, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix-getsockopt$inet6_udp_int detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL-socketpair$unix detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-connect$pppl2tp detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x0, 0x1}}, 0x26) program did not crash testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-ioctl$USBDEVFS_SUBMITURB-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program did not crash testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-ioctl$USBDEVFS_ALLOW_SUSPEND-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-syz_open_dev$usbfs-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program did not crash testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) program did not crash testing program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program did not crash extracting C reproducer testing compiled C program (duration=31.951044945s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Write in pppol2tp_release simplifying C reproducer testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=31.951044945s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$XFS_IOC_ERROR_CLEARALL detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x208, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2000000}}}, 0x32) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true reproducing took 32m40.603244043s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: use-after-free in atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:173 [inline] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298 Write of size 8 at addr ffff8881114e9950 by task syz.2.17/381 CPU: 0 PID: 381 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:77 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:435 [inline] kasan_report+0x100/0x140 mm/kasan/report.c:452 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline] atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline] __mutex_trylock_fast kernel/locking/mutex.c:173 [inline] mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442 __sock_release net/socket.c:597 [inline] sock_close+0xb8/0x200 net/socket.c:1286 __fput+0x2dc/0x730 fs/file_table.c:281 ____fput+0x15/0x20 fs/file_table.c:314 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f5626023e59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffde31f75c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffde31f76b0 RCX: 00007f5626023e59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000000720a R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b32b20000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f562629cfac R14: 00007f562629cfa8 R15: 00007f562629cfa0 Allocated by task 381: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:430 [inline] ____kasan_kmalloc mm/kasan/common.c:509 [inline] __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518 kasan_kmalloc include/linux/kasan.h:254 [inline] __kmalloc+0x19f/0x330 mm/slub.c:4038 kmalloc include/linux/slab.h:560 [inline] kzalloc include/linux/slab.h:667 [inline] l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772 __sys_connect_file net/socket.c:1866 [inline] __sys_connect+0x3ce/0x450 net/socket.c:1883 __do_sys_connect net/socket.c:1893 [inline] __se_sys_connect net/socket.c:1890 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:1890 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xcb Freed by task 381: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4a/0x70 mm/kasan/common.c:45 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370 kasan_slab_free include/linux/kasan.h:220 [inline] slab_free_hook mm/slub.c:1600 [inline] slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626 slab_free mm/slub.c:3208 [inline] kfree+0xc0/0x270 mm/slub.c:4196 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439 __sock_release net/socket.c:597 [inline] sock_close+0xb8/0x200 net/socket.c:1286 __fput+0x2dc/0x730 fs/file_table.c:281 ____fput+0x15/0x20 fs/file_table.c:314 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb The buggy address belongs to the object at ffff8881114e9800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881114e9800, ffff8881114e9a00) The buggy address belongs to the page: page:ffffea0004453a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1114e8 head:ffffea0004453a00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head) raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 364, ts 29218510557, free_ts 29215616181 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook mm/page_alloc.c:2456 [inline] prep_new_page+0x176/0x190 mm/page_alloc.c:2462 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384 alloc_slab_page mm/slub.c:-1 [inline] allocate_slab mm/slub.c:1813 [inline] new_slab+0x84/0x3f0 mm/slub.c:1874 new_slab_objects mm/slub.c:2632 [inline] ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796 __slab_alloc+0x63/0xa0 mm/slub.c:2836 slab_alloc_node mm/slub.c:2918 [inline] slab_alloc mm/slub.c:2960 [inline] __kmalloc+0x1f9/0x330 mm/slub.c:4034 __kmalloc_node include/linux/slab.h:421 [inline] kmalloc_node include/linux/slab.h:578 [inline] kzalloc_node include/linux/slab.h:678 [inline] qdisc_alloc+0x79/0x720 net/sched/sch_generic.c:864 qdisc_create_dflt+0x6b/0x390 net/sched/sch_generic.c:927 attach_one_default_qdisc net/sched/sch_generic.c:1090 [inline] netdev_for_each_tx_queue include/linux/netdevice.h:2321 [inline] attach_default_qdiscs net/sched/sch_generic.c:1108 [inline] dev_activate+0x292/0x11c0 net/sched/sch_generic.c:1167 __dev_open+0x3e9/0x500 net/core/dev.c:1551 __dev_change_flags+0x1e4/0x6a0 net/core/dev.c:8547 dev_change_flags+0x80/0x1a0 net/core/dev.c:8618 do_setlink+0xb19/0x29a0 net/core/rtnetlink.c:2736 __rtnl_newlink net/core/rtnetlink.c:3414 [inline] rtnl_newlink+0x13e6/0x1830 net/core/rtnetlink.c:3534 rtnetlink_rcv_msg+0x9e9/0xca0 net/core/rtnetlink.c:5614 page last free stack trace: reset_page_owner include/linux/page_owner.h:28 [inline] free_pages_prepare mm/page_alloc.c:1349 [inline] __free_pages_ok+0x80b/0x830 mm/page_alloc.c:1629 free_the_page mm/page_alloc.c:5445 [inline] __free_pages+0xd8/0x390 mm/page_alloc.c:5454 __free_slab+0xcf/0x190 mm/slub.c:1899 free_slab mm/slub.c:1914 [inline] discard_slab mm/slub.c:1920 [inline] unfreeze_partials+0x150/0x180 mm/slub.c:2415 put_cpu_partial+0xc1/0x180 mm/slub.c:2451 __slab_free+0x2c9/0x3a0 mm/slub.c:3100 do_slab_free mm/slub.c:3196 [inline] ___cache_free+0x10e/0x130 mm/slub.c:3215 qlink_free+0x50/0x90 mm/kasan/quarantine.c:157 qlist_free_all+0x5f/0xb0 mm/kasan/quarantine.c:176 kasan_quarantine_reduce+0x14a/0x160 mm/kasan/quarantine.c:283 __kasan_slab_alloc+0x2f/0xe0 mm/kasan/common.c:440 kasan_slab_alloc include/linux/kasan.h:244 [inline] slab_post_alloc_hook+0x5d/0x2f0 mm/slab.h:580 slab_alloc_node mm/slub.c:2952 [inline] slab_alloc mm/slub.c:2960 [inline] kmem_cache_alloc+0x15a/0x2d0 mm/slub.c:2965 kmem_cache_alloc_node include/linux/slab.h:426 [inline] __alloc_skb+0x9e/0x520 net/core/skbuff.c:200 alloc_skb include/linux/skbuff.h:1126 [inline] nlmsg_new include/net/netlink.h:953 [inline] netlink_ack+0x35c/0xb30 net/netlink/af_netlink.c:2438 netlink_rcv_skb+0x267/0x430 net/netlink/af_netlink.c:2509 Memory state around the buggy address: ffff8881114e9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881114e9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881114e9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881114e9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881114e9a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: use-after-free in atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:173 [inline] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298 Write of size 8 at addr ffff8881114e9950 by task syz.2.17/381 CPU: 0 PID: 381 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:77 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:435 [inline] kasan_report+0x100/0x140 mm/kasan/report.c:452 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline] atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline] __mutex_trylock_fast kernel/locking/mutex.c:173 [inline] mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442 __sock_release net/socket.c:597 [inline] sock_close+0xb8/0x200 net/socket.c:1286 __fput+0x2dc/0x730 fs/file_table.c:281 ____fput+0x15/0x20 fs/file_table.c:314 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f5626023e59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffde31f75c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffde31f76b0 RCX: 00007f5626023e59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000000720a R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b32b20000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f562629cfac R14: 00007f562629cfa8 R15: 00007f562629cfa0 Allocated by task 381: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:430 [inline] ____kasan_kmalloc mm/kasan/common.c:509 [inline] __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518 kasan_kmalloc include/linux/kasan.h:254 [inline] __kmalloc+0x19f/0x330 mm/slub.c:4038 kmalloc include/linux/slab.h:560 [inline] kzalloc include/linux/slab.h:667 [inline] l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772 __sys_connect_file net/socket.c:1866 [inline] __sys_connect+0x3ce/0x450 net/socket.c:1883 __do_sys_connect net/socket.c:1893 [inline] __se_sys_connect net/socket.c:1890 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:1890 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xcb Freed by task 381: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4a/0x70 mm/kasan/common.c:45 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370 kasan_slab_free include/linux/kasan.h:220 [inline] slab_free_hook mm/slub.c:1600 [inline] slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626 slab_free mm/slub.c:3208 [inline] kfree+0xc0/0x270 mm/slub.c:4196 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439 __sock_release net/socket.c:597 [inline] sock_close+0xb8/0x200 net/socket.c:1286 __fput+0x2dc/0x730 fs/file_table.c:281 ____fput+0x15/0x20 fs/file_table.c:314 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb The buggy address belongs to the object at ffff8881114e9800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881114e9800, ffff8881114e9a00) The buggy address belongs to the page: page:ffffea0004453a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1114e8 head:ffffea0004453a00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head) raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 364, ts 29218510557, free_ts 29215616181 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook mm/page_alloc.c:2456 [inline] prep_new_page+0x176/0x190 mm/page_alloc.c:2462 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384 alloc_slab_page mm/slub.c:-1 [inline] allocate_slab mm/slub.c:1813 [inline] new_slab+0x84/0x3f0 mm/slub.c:1874 new_slab_objects mm/slub.c:2632 [inline] ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796 __slab_alloc+0x63/0xa0 mm/slub.c:2836 slab_alloc_node mm/slub.c:2918 [inline] slab_alloc mm/slub.c:2960 [inline] __kmalloc+0x1f9/0x330 mm/slub.c:4034 __kmalloc_node include/linux/slab.h:421 [inline] kmalloc_node include/linux/slab.h:578 [inline] kzalloc_node include/linux/slab.h:678 [inline] qdisc_alloc+0x79/0x720 net/sched/sch_generic.c:864 qdisc_create_dflt+0x6b/0x390 net/sched/sch_generic.c:927 attach_one_default_qdisc net/sched/sch_generic.c:1090 [inline] netdev_for_each_tx_queue include/linux/netdevice.h:2321 [inline] attach_default_qdiscs net/sched/sch_generic.c:1108 [inline] dev_activate+0x292/0x11c0 net/sched/sch_generic.c:1167 __dev_open+0x3e9/0x500 net/core/dev.c:1551 __dev_change_flags+0x1e4/0x6a0 net/core/dev.c:8547 dev_change_flags+0x80/0x1a0 net/core/dev.c:8618 do_setlink+0xb19/0x29a0 net/core/rtnetlink.c:2736 __rtnl_newlink net/core/rtnetlink.c:3414 [inline] rtnl_newlink+0x13e6/0x1830 net/core/rtnetlink.c:3534 rtnetlink_rcv_msg+0x9e9/0xca0 net/core/rtnetlink.c:5614 page last free stack trace: reset_page_owner include/linux/page_owner.h:28 [inline] free_pages_prepare mm/page_alloc.c:1349 [inline] __free_pages_ok+0x80b/0x830 mm/page_alloc.c:1629 free_the_page mm/page_alloc.c:5445 [inline] __free_pages+0xd8/0x390 mm/page_alloc.c:5454 __free_slab+0xcf/0x190 mm/slub.c:1899 free_slab mm/slub.c:1914 [inline] discard_slab mm/slub.c:1920 [inline] unfreeze_partials+0x150/0x180 mm/slub.c:2415 put_cpu_partial+0xc1/0x180 mm/slub.c:2451 __slab_free+0x2c9/0x3a0 mm/slub.c:3100 do_slab_free mm/slub.c:3196 [inline] ___cache_free+0x10e/0x130 mm/slub.c:3215 qlink_free+0x50/0x90 mm/kasan/quarantine.c:157 qlist_free_all+0x5f/0xb0 mm/kasan/quarantine.c:176 kasan_quarantine_reduce+0x14a/0x160 mm/kasan/quarantine.c:283 __kasan_slab_alloc+0x2f/0xe0 mm/kasan/common.c:440 kasan_slab_alloc include/linux/kasan.h:244 [inline] slab_post_alloc_hook+0x5d/0x2f0 mm/slab.h:580 slab_alloc_node mm/slub.c:2952 [inline] slab_alloc mm/slub.c:2960 [inline] kmem_cache_alloc+0x15a/0x2d0 mm/slub.c:2965 kmem_cache_alloc_node include/linux/slab.h:426 [inline] __alloc_skb+0x9e/0x520 net/core/skbuff.c:200 alloc_skb include/linux/skbuff.h:1126 [inline] nlmsg_new include/net/netlink.h:953 [inline] netlink_ack+0x35c/0xb30 net/netlink/af_netlink.c:2438 netlink_rcv_skb+0x267/0x430 net/netlink/af_netlink.c:2509 Memory state around the buggy address: ffff8881114e9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881114e9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881114e9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881114e9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881114e9a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================