Extracting prog: 22.928946203s Minimizing prog: 17m10.212422836s Simplifying prog options: 0s Extracting C: 41.357753749s Simplifying C: 6m9.261070737s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet-timer_create-socket$inet_udp-setsockopt$sock_int-timer_settime-pwritev detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000040), 0x4) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pwritev(r3, &(0x7f0000002bc0)=[{0x0}, {&(0x7f0000000a00)="d6", 0x1}], 0x2, 0x1, 0x7fff) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session single: successfully extracted reproducer found reproducer with 24 syscalls minimizing guilty program testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet-timer_create-socket$inet_udp-setsockopt$sock_int-timer_settime detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000040), 0x4) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet-timer_create-socket$inet_udp-setsockopt$sock_int detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000040), 0x4) (async) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet-timer_create-socket$inet_udp detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) socket$inet_udp(0x2, 0x2, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet-timer_create detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="36c1da76b86db94048f55bd6f0a9500ad0dc11ec6381b9b04294f93ebb299610c05a3be2957e1505eba1852752eb87d5ab3db6da37b41eb55ea6426e897d4fdac0535ec2e75873686be56bde48919aca4c16f8d6d84c86f4aa53faa0f5160d0adc1cd0cd215cc2d6fdbf171502b8bbbed405d4f86f3e6d41d43a701ca290e26db5713eed5dc32d09f7c2b16bfd2c128a450711ca0b57eea7dfa3d2553b953ca47b7fc6db48ff0a747c774808c0b4e62318777b93a37bf5b1355f2bf4bbf4f3e2c4a59b5cda345acfe427c815e3a4ecf753ab78dc1a84bc431aceffe1e315fccee94dbdb4c5460728e55cf6ac54b7e57be49c50417af0257f559249e1eecc5ebda24f2fe4043c1c4589ad51e094cde16aaab57645bc8e850c35f409b1d20093683b2bac4e6ac06a3d720b3c91e5bb9f9927656958a4da3aa05c8e54011b1155a6cef353a5c897d4949a89efc119d08cc23ff1d4f26f0196019cdef5ab514ffbc08d9630e589b813fb1a8e95b0a264ee0c256886166a1d9d5cf65395086952fc2064133c30785a856f4e83df82f265e93da3794a6db1671132c50636d19114b9631c4e5d09ac79cc7eb7b5d4426c0fbfb429818e26c853be62b695d93ec98cd55bd2d5c11cfe90cfb7f8cb32df40839d0fb839dd0e3e31830a785073907d661407723c3921a56dfd2a79d984d994da31440f06d651a9a020cf627d68066005336501332bcb77df03560c7e512285360b0cea662ae8477f0a71f7ea18027dcbd013c331a6fb793fcde938fd3f7738894db1a7c2a978b9a5fbfd72f23537a34e926c84ee8b0fe1ca27e1dac2272641c52c9e3ab46d7805bc7c2596162b3ab2ecbec2841a678c5f2841def6f7b4e655a15acb9c9e8394664269569014cd51d93874ae66604a1c957f2288fe7b7be8f4f127a85d1aee74e59610e31591f168004240a990013c31c525cf7d1731e47f622bdf057914243556326e77d2b155c95979199cd1f94eaf838b29bb22cdabdbf6844ba961a6cd315a6bd1a3f269e8d56f23f05380f6273ad26c3b7bcd29bb71bc8ff0590f840644799414ddcd4c2ebf6fd17facc3d6e21f51b4149d47aa8528ba47284cdd7cc7ce466d9138b538720d177918cfb186c2041da24fee98c000fca769c224bf3c0dc0803583e7b738de238d345736ff64766ebfc0cee059689e8aee89c97708d5300600064a7d7424a316f29f83cfee6a9872b4210206d3e8f6c00893566978fb5f231ae53577d3ffa987e7e80995f748ecee54d180db61cda5b20c78d29c14d0b8eff6d0207e17537d97f94a97f69bb1c0b70bba2bab6d04520b388c047f9a64f4ac325c266b5b0ddc36cf5deb6c9caaf9aeee692e89056862f82e47863f045710b9cc20e81f0fb7d6142df3a4afbd9dd7458cdfda2027d1ecda3b586094cdca63d9a2e39e018103fa4c8576f20ca76d8eb3be4613cb92a18e9bcf2f85a82e52fcab720f16cb3221e84eb490a2fb219e98c55f16258904e818b391b488d0098f940136a0acc73e0c507d63bb713560f85eb32e7d5ffdc03c1173febe78673dd6b6200edf90305ec16fff8f22eecbab34a0a8e6035d56fbc546294cfdac6d351952e0f1bf92f9f0ecea748bd9a61a9a1ef6d863e8cf6d751277e111349ab057a0c0a5934fcef2cd970448019fe5578ba0e09ab91db1fa413f79bf5d26e9d2aa0929c57487dfc1c1983f04f7f74f899a01f154d5743b1d6310f331d72929870a1f3e60f057bfbf9dd2b93c31a3f6eda04f73a538efa9e69a8a9fcb05559b02c9ab12bddc9cc3f0b21839ec1c7b02f19609fc29fe7261b63266825d77657b6c21cba2e4e52cbde57de86be815e9cc56a17c0180369bca3899ddfcdfd2ff3a03a1efcff33031ba17f2ecbd87d6820709c730ca676d721c79f1fa7d0c0c541481b9673dd847425b2d49eefc80447d6b3c3d20f507d4237cd7dbe3e92a46b86ecc487203e715773c128f6ed35da264cd5ef3f81e6f8241ad2bb9f0e891dd4efd6656a7de760ee6cf86a554360516696b9a15ce0f80666230275b6c21f3d2cb16ee2cbca6e0a1039b261ee5556c5ee0f6d73c437bdee7768db3aab85948984e60c784fa250c3a0aec0e1c0d98db1ae1bf21d0f60d92317133218c4285c6b5033f0abd583e6975586dc03a182298159d4b37b389621d77074730f50424727921fb9d568ab62e8625ddbcc40f9c51bb62d117161b7a914e14b6c24de0e1992f9b28d0aeb135cea01ebbd9ef6ff22ad277aff7a179355bd30a52e1e8dec7f8e03716d4d32b096d4b0b739d7dec460383ff61bbee471afb1e5b0eedced88acbb0ca26998f3acb6716ebefaff9c4319ebae9b3906be13763fe3a0140faa72264122a35d7ed88f955102f08ec370a6d4b4d4f835e5eb55a0df46de38fc3b7c734c38ed0a970cbee1e5ff7928ee9ca6bb115c096c222cd648ce3fe5a97ec650ea16a0b4d2bf18f246c9d796f7e9f942ce5213f68fae67ad388f40978612194eea910b59216c2919ca1e1006400b8908b86669a5bcbab9df3f8872753ae00b3d77fbffe70f640dd4fd6a557c909c934091c6ac8aa959e47de8ba3c14241cdb841747be5eadc37547c6be90ed35394071c123c2588c82022576ebd4a0456648f3bf8806e7978a3b33611f897fb04fa22cbe474e328acded05408dfacc2a504ff49be68fe6b8287912c0028db408cd63ac09fb57c21c71690ba0103e123888df5a3049df5ec557f3bd46794b851f32db82ef8e71934fc07b8ef66c72ca9f9e6b4177a9f61d03cc69b8da2504f9a2d7ebf380cb22fcb0ec965d3c242dccf6d71d2f5b269848dde3426b579042011e906bfc2b106386941240fffa7ad4ba4296e87260a331fa5bfa2c5f1e16fc3901db5589905137b4fa8e5d11103031228bf6dda845d517d888787517d95fc234d7293551f365fb5d6ad39bbbb364c330a74c2227ca26acb902f90c45419958fd05f4e65935b563a06bad345e6aedc1c30609619ced1167c3046215f8cccc72b0b3f6e86285096cba52d0206d1ad193fc7f0091e95440670807e3694ffdb2dbd6987b5a15105203a16829e01237a14de9e8e6cb7d3ef3bde4dd0794c5f5b1fbfbb13f87f20757b4cec8eceb496a872e7993ad2f5b00f30fdee082811253a723aca26e62cb89a7a001cbf84e096abfd5e3c6905088be8d7d8c95a4994cde9ad318bc831a370af9b1d14f8bf6b89b3b405610b902824d4dc3b0f57ca1d6410d6b637dc33dcd3735ab67d0474fdd2e54e535254d57d8c5d93e325bf73d3ef70fa95a0118ad98b991ee83fab54ebde619356bb39d7a2f78a41ade1c73c5e2859b0bcb1a909ef079ee2d3c676a9634c48220ef0f1f33d0ea310e851c84b6fe6c8ae401de8f122a0356b7147dbe3155714f41bda0bf24605e74f06c1e50a52dc7604e3499125123aff0cb1061ec61520a29c70fe363ff615cceb0a164ed61a6c0c89e832329689ca0f15c3a76df2d1bb1da524151fa23377a0e4f5c5904204c68f3f6eeb935c9dd925f258aacdd87d1904e735e0cf262fea2098e683a451b0e0bf873eeb13a3c5a84165f8a0e0eb0496d0cbd1b918bed5a70ea48872933394d31e6b06f88ec4bf210bee1038160fb9842b3d7fb01d914a5773d52bf3439f029f2234e980d0130d8a3f8c5ff2ee254796314dc90311e47f8cf51dacc673d20a65e281a540c1f99a53fdc2abee05d63b05d6a455e520312ff93bbd8893683c9a44bc0cb32ba6498d42211f6091369a5d73e9dad7ff8ac3757ff1b2f4f9ce2d61aa5437418e6e60127c659c25b3fba1c58829aa0e570bb3a2b5a5ca9de096e31a2fb6326ccf4d9bd2526b06f1c5e993bdc84828b948c84c645ae08b4609c8cd7f9e8348b06384a6ca840e6c8922c89613b1e0cf065ef4b2f1e2df9572d7e162d75846c150bc967077350b5aaf6822a5742bf59d25cc58ca77b5e31fb2c9192c4b5fb59086e4b298de4b235b91174048ca3c46050540cb8375cf5108dd18602735f4f66607a5964a49e4d274f1ea772436ad9d81715285d99ff6611756ba3b83f2304462d89135b5552f281232a486df5cbd19e7e2b1d0ea1d6f2f39d102b9233b4cdb8ddc3118fc04a354f13a8c08660e7f930f5f070123d6ebd605441f050989ce6d7f7ae88a644e0e9ed9f2a04eba0cc23eaaf27b6510589cbd127dedf059ca1f38e65bb760fabb409778911489f9306352c4235ec38baa76635457ba11597986778945a23aeaec9ac652d322edde2593929e22bb56caacb1d4142e6f2d1a738ab6c318978407edf1ef909b919df68279f4b6c086fb8c8644201671fd3f3c1280b5ddd05862e29486cba6c620bbebe86804daa5a687e50f7f2f19212159450f597bb4f1999d695c9ac1aab2abf0dd4139db2b47d7ccc6346a7db8f8963c2805f535db6d84f64b81e05b5ab736a53f19c3fc151cf14f0a5d63d4b084c6d81ab37a291fe07175900b285e3f71e81273a766895b3df9c2635478787fe57e2b0a0631b47c8f301b0ead157736f833454ca0bb1b36838ccd09f0442c4aa06672581fef44e3eab4740063555f690183c32b5fa1c48dcb7ce890f4f6fd1f0bf950243eec6f05f0c9a851cecc95c3e58e556ecc63604e88d065af6ade4cbb4ba2504e8879cad42c901c6946124ef9c82a10f2a39c34c41b244b26bd92bc8c703274b82639ac61860d21cedef14b12dc5a91fc055ba96e2698a5c73d751211b08fed3b896bb1b53e2a4c516a1eecb83ceab86cf7ef298212e54c8f4b3c303482930ec83687fb2ce7dd4743fb40c52c211a3bb054fa935aa8c64f6d0064000d23d163f19fcf5382face892e5581bf65c7c50ea256f9802f60acf4ea5f5d313c58d21047679dcd9100d3430c4726ec6a6a5da362b8a3b225cf1409bb050f2dcdf033b6377de41ef4c8b841223818565eef2646ce1639d62694bb9e9170938f316bbaa6fe783a2ea0bfe479ed3448e738ac14605ea3d1fbce0df1ed7f3ca4d1dae3ea97df3d3ae3db371334b4be08b83f5b995c5c11c723bd4f92a174050425cce6b884db12db82907c7c1e0666540b4da0fa2ba51b78fdcfc04999cb444146a3cdedb40a827ce4ef106183916103c7e5349d6d12ce1b0ad37195f5f9033e321a2869052bf7adb3421a96ed39803acdccc61f8a91422b3ebbb2e369cd881c57362a60574e3109d863b30ba8e4f4cc0bc72ddfbc4b59a4a9f92982b499ae859ae187210a1efcd2ad71c9fd1551842107e4e848b0518143c91468cc997876c4dfe401a686a858ed7f20a9c65f8a9c6069e4049673cffb79fa3be517c39e850dc9db25c741f9494059b7980a4caabacfd300197e2d4d6501956b998247cd65adc8cdb7d81e6690574e8bfe29009a95b3dbca0d2837379a58716668041c25f8eb5358a5cef17c4b55aa0e72c49304ca656e264faae4e37cd6694e0c650c13fc64741747f01e6a918a7eed99699b6797da052c31225c816ee3cb6cbf7610ed70aebf128884ecf68b99ef36648dfe3c0b5238fa45385ca8c82b72ce6665bdaacb3dc73dfe3bd8b1caee8dc5c9d3b148bfd32e3391bb5c5ca9da77fffc58d2e55906ddbb561b1a45b70a59e82376d41fb79a3dd6cb408d020d2654c057158c618eb5568978f611e6d97d6fb1f1b01095b93bf100ff3c57daa3ec4827e6f93360ef9c6e8db66787129e4efcf40a6f46191f457391a0346a98f2c96fb9638cf4ab07ec0b2bd32ac695eb3292963fdd8e8ff45218322a5a3ad709437d1d9f07e405aac281cbfec360b41cb94d391faa26553d4f4a427feb9c", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH-write$FUSE_BMAP detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd15}}, 0x18) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$MAP_LOOKUP_BATCH detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="36c1da76b86db94048f55bd6f0a9500ad0dc11ec6381b9b04294f93ebb299610c05a3be2957e1505eba1852752eb87d5ab3db6da37b41eb55ea6426e897d4fdac0535ec2e75873686be56bde48919aca4c16f8d6d84c86f4aa53faa0f5160d0adc1cd0cd215cc2d6fdbf171502b8bbbed405d4f86f3e6d41d43a701ca290e26db5713eed5dc32d09f7c2b16bfd2c128a450711ca0b57eea7dfa3d2553b953ca47b7fc6db48ff0a747c774808c0b4e62318777b93a37bf5b1355f2bf4bbf4f3e2c4a59b5cda345acfe427c815e3a4ecf753ab78dc1a84bc431aceffe1e315fccee94dbdb4c5460728e55cf6ac54b7e57be49c50417af0257f559249e1eecc5ebda24f2fe4043c1c4589ad51e094cde16aaab57645bc8e850c35f409b1d20093683b2bac4e6ac06a3d720b3c91e5bb9f9927656958a4da3aa05c8e54011b1155a6cef353a5c897d4949a89efc119d08cc23ff1d4f26f0196019cdef5ab514ffbc08d9630e589b813fb1a8e95b0a264ee0c256886166a1d9d5cf65395086952fc2064133c30785a856f4e83df82f265e93da3794a6db1671132c50636d19114b9631c4e5d09ac79cc7eb7b5d4426c0fbfb429818e26c853be62b695d93ec98cd55bd2d5c11cfe90cfb7f8cb32df40839d0fb839dd0e3e31830a785073907d661407723c3921a56dfd2a79d984d994da31440f06d651a9a020cf627d68066005336501332bcb77df03560c7e512285360b0cea662ae8477f0a71f7ea18027dcbd013c331a6fb793fcde938fd3f7738894db1a7c2a978b9a5fbfd72f23537a34e926c84ee8b0fe1ca27e1dac2272641c52c9e3ab46d7805bc7c2596162b3ab2ecbec2841a678c5f2841def6f7b4e655a15acb9c9e8394664269569014cd51d93874ae66604a1c957f2288fe7b7be8f4f127a85d1aee74e59610e31591f168004240a990013c31c525cf7d1731e47f622bdf057914243556326e77d2b155c95979199cd1f94eaf838b29bb22cdabdbf6844ba961a6cd315a6bd1a3f269e8d56f23f05380f6273ad26c3b7bcd29bb71bc8ff0590f840644799414ddcd4c2ebf6fd17facc3d6e21f51b4149d47aa8528ba47284cdd7cc7ce466d9138b538720d177918cfb186c2041da24fee98c000fca769c224bf3c0dc0803583e7b738de238d345736ff64766ebfc0cee059689e8aee89c97708d5300600064a7d7424a316f29f83cfee6a9872b4210206d3e8f6c00893566978fb5f231ae53577d3ffa987e7e80995f748ecee54d180db61cda5b20c78d29c14d0b8eff6d0207e17537d97f94a97f69bb1c0b70bba2bab6d04520b388c047f9a64f4ac325c266b5b0ddc36cf5deb6c9caaf9aeee692e89056862f82e47863f045710b9cc20e81f0fb7d6142df3a4afbd9dd7458cdfda2027d1ecda3b586094cdca63d9a2e39e018103fa4c8576f20ca76d8eb3be4613cb92a18e9bcf2f85a82e52fcab720f16cb3221e84eb490a2fb219e98c55f16258904e818b391b488d0098f940136a0acc73e0c507d63bb713560f85eb32e7d5ffdc03c1173febe78673dd6b6200edf90305ec16fff8f22eecbab34a0a8e6035d56fbc546294cfdac6d351952e0f1bf92f9f0ecea748bd9a61a9a1ef6d863e8cf6d751277e111349ab057a0c0a5934fcef2cd970448019fe5578ba0e09ab91db1fa413f79bf5d26e9d2aa0929c57487dfc1c1983f04f7f74f899a01f154d5743b1d6310f331d72929870a1f3e60f057bfbf9dd2b93c31a3f6eda04f73a538efa9e69a8a9fcb05559b02c9ab12bddc9cc3f0b21839ec1c7b02f19609fc29fe7261b63266825d77657b6c21cba2e4e52cbde57de86be815e9cc56a17c0180369bca3899ddfcdfd2ff3a03a1efcff33031ba17f2ecbd87d6820709c730ca676d721c79f1fa7d0c0c541481b9673dd847425b2d49eefc80447d6b3c3d20f507d4237cd7dbe3e92a46b86ecc487203e715773c128f6ed35da264cd5ef3f81e6f8241ad2bb9f0e891dd4efd6656a7de760ee6cf86a554360516696b9a15ce0f80666230275b6c21f3d2cb16ee2cbca6e0a1039b261ee5556c5ee0f6d73c437bdee7768db3aab85948984e60c784fa250c3a0aec0e1c0d98db1ae1bf21d0f60d92317133218c4285c6b5033f0abd583e6975586dc03a182298159d4b37b389621d77074730f50424727921fb9d568ab62e8625ddbcc40f9c51bb62d117161b7a914e14b6c24de0e1992f9b28d0aeb135cea01ebbd9ef6ff22ad277aff7a179355bd30a52e1e8dec7f8e03716d4d32b096d4b0b739d7dec460383ff61bbee471afb1e5b0eedced88acbb0ca26998f3acb6716ebefaff9c4319ebae9b3906be13763fe3a0140faa72264122a35d7ed88f955102f08ec370a6d4b4d4f835e5eb55a0df46de38fc3b7c734c38ed0a970cbee1e5ff7928ee9ca6bb115c096c222cd648ce3fe5a97ec650ea16a0b4d2bf18f246c9d796f7e9f942ce5213f68fae67ad388f40978612194eea910b59216c2919ca1e1006400b8908b86669a5bcbab9df3f8872753ae00b3d77fbffe70f640dd4fd6a557c909c934091c6ac8aa959e47de8ba3c14241cdb841747be5eadc37547c6be90ed35394071c123c2588c82022576ebd4a0456648f3bf8806e7978a3b33611f897fb04fa22cbe474e328acded05408dfacc2a504ff49be68fe6b8287912c0028db408cd63ac09fb57c21c71690ba0103e123888df5a3049df5ec557f3bd46794b851f32db82ef8e71934fc07b8ef66c72ca9f9e6b4177a9f61d03cc69b8da2504f9a2d7ebf380cb22fcb0ec965d3c242dccf6d71d2f5b269848dde3426b579042011e906bfc2b106386941240fffa7ad4ba4296e87260a331fa5bfa2c5f1e16fc3901db5589905137b4fa8e5d11103031228bf6dda845d517d888787517d95fc234d7293551f365fb5d6ad39bbbb364c330a74c2227ca26acb902f90c45419958fd05f4e65935b563a06bad345e6aedc1c30609619ced1167c3046215f8cccc72b0b3f6e86285096cba52d0206d1ad193fc7f0091e95440670807e3694ffdb2dbd6987b5a15105203a16829e01237a14de9e8e6cb7d3ef3bde4dd0794c5f5b1fbfbb13f87f20757b4cec8eceb496a872e7993ad2f5b00f30fdee082811253a723aca26e62cb89a7a001cbf84e096abfd5e3c6905088be8d7d8c95a4994cde9ad318bc831a370af9b1d14f8bf6b89b3b405610b902824d4dc3b0f57ca1d6410d6b637dc33dcd3735ab67d0474fdd2e54e535254d57d8c5d93e325bf73d3ef70fa95a0118ad98b991ee83fab54ebde619356bb39d7a2f78a41ade1c73c5e2859b0bcb1a909ef079ee2d3c676a9634c48220ef0f1f33d0ea310e851c84b6fe6c8ae401de8f122a0356b7147dbe3155714f41bda0bf24605e74f06c1e50a52dc7604e3499125123aff0cb1061ec61520a29c70fe363ff615cceb0a164ed61a6c0c89e832329689ca0f15c3a76df2d1bb1da524151fa23377a0e4f5c5904204c68f3f6eeb935c9dd925f258aacdd87d1904e735e0cf262fea2098e683a451b0e0bf873eeb13a3c5a84165f8a0e0eb0496d0cbd1b918bed5a70ea48872933394d31e6b06f88ec4bf210bee1038160fb9842b3d7fb01d914a5773d52bf3439f029f2234e980d0130d8a3f8c5ff2ee254796314dc90311e47f8cf51dacc673d20a65e281a540c1f99a53fdc2abee05d63b05d6a455e520312ff93bbd8893683c9a44bc0cb32ba6498d42211f6091369a5d73e9dad7ff8ac3757ff1b2f4f9ce2d61aa5437418e6e60127c659c25b3fba1c58829aa0e570bb3a2b5a5ca9de096e31a2fb6326ccf4d9bd2526b06f1c5e993bdc84828b948c84c645ae08b4609c8cd7f9e8348b06384a6ca840e6c8922c89613b1e0cf065ef4b2f1e2df9572d7e162d75846c150bc967077350b5aaf6822a5742bf59d25cc58ca77b5e31fb2c9192c4b5fb59086e4b298de4b235b91174048ca3c46050540cb8375cf5108dd18602735f4f66607a5964a49e4d274f1ea772436ad9d81715285d99ff6611756ba3b83f2304462d89135b5552f281232a486df5cbd19e7e2b1d0ea1d6f2f39d102b9233b4cdb8ddc3118fc04a354f13a8c08660e7f930f5f070123d6ebd605441f050989ce6d7f7ae88a644e0e9ed9f2a04eba0cc23eaaf27b6510589cbd127dedf059ca1f38e65bb760fabb409778911489f9306352c4235ec38baa76635457ba11597986778945a23aeaec9ac652d322edde2593929e22bb56caacb1d4142e6f2d1a738ab6c318978407edf1ef909b919df68279f4b6c086fb8c8644201671fd3f3c1280b5ddd05862e29486cba6c620bbebe86804daa5a687e50f7f2f19212159450f597bb4f1999d695c9ac1aab2abf0dd4139db2b47d7ccc6346a7db8f8963c2805f535db6d84f64b81e05b5ab736a53f19c3fc151cf14f0a5d63d4b084c6d81ab37a291fe07175900b285e3f71e81273a766895b3df9c2635478787fe57e2b0a0631b47c8f301b0ead157736f833454ca0bb1b36838ccd09f0442c4aa06672581fef44e3eab4740063555f690183c32b5fa1c48dcb7ce890f4f6fd1f0bf950243eec6f05f0c9a851cecc95c3e58e556ecc63604e88d065af6ade4cbb4ba2504e8879cad42c901c6946124ef9c82a10f2a39c34c41b244b26bd92bc8c703274b82639ac61860d21cedef14b12dc5a91fc055ba96e2698a5c73d751211b08fed3b896bb1b53e2a4c516a1eecb83ceab86cf7ef298212e54c8f4b3c303482930ec83687fb2ce7dd4743fb40c52c211a3bb054fa935aa8c64f6d0064000d23d163f19fcf5382face892e5581bf65c7c50ea256f9802f60acf4ea5f5d313c58d21047679dcd9100d3430c4726ec6a6a5da362b8a3b225cf1409bb050f2dcdf033b6377de41ef4c8b841223818565eef2646ce1639d62694bb9e9170938f316bbaa6fe783a2ea0bfe479ed3448e738ac14605ea3d1fbce0df1ed7f3ca4d1dae3ea97df3d3ae3db371334b4be08b83f5b995c5c11c723bd4f92a174050425cce6b884db12db82907c7c1e0666540b4da0fa2ba51b78fdcfc04999cb444146a3cdedb40a827ce4ef106183916103c7e5349d6d12ce1b0ad37195f5f9033e321a2869052bf7adb3421a96ed39803acdccc61f8a91422b3ebbb2e369cd881c57362a60574e3109d863b30ba8e4f4cc0bc72ddfbc4b59a4a9f92982b499ae859ae187210a1efcd2ad71c9fd1551842107e4e848b0518143c91468cc997876c4dfe401a686a858ed7f20a9c65f8a9c6069e4049673cffb79fa3be517c39e850dc9db25c741f9494059b7980a4caabacfd300197e2d4d6501956b998247cd65adc8cdb7d81e6690574e8bfe29009a95b3dbca0d2837379a58716668041c25f8eb5358a5cef17c4b55aa0e72c49304ca656e264faae4e37cd6694e0c650c13fc64741747f01e6a918a7eed99699b6797da052c31225c816ee3cb6cbf7610ed70aebf128884ecf68b99ef36648dfe3c0b5238fa45385ca8c82b72ce6665bdaacb3dc73dfe3bd8b1caee8dc5c9d3b148bfd32e3391bb5c5ca9da77fffc58d2e55906ddbb561b1a45b70a59e82376d41fb79a3dd6cb408d020d2654c057158c618eb5568978f611e6d97d6fb1f1b01095b93bf100ff3c57daa3ec4827e6f93360ef9c6e8db66787129e4efcf40a6f46191f457391a0346a98f2c96fb9638cf4ab07ec0b2bd32ac695eb3292963fdd8e8ff45218322a5a3ad709437d1d9f07e405aac281cbfec360b41cb94d391faa26553d4f4a427feb9c", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r7}, 0x38) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2-bpf$MAP_CREATE detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000004000000090000000300000040010000", @ANYRES32=r6, @ANYBLOB="172397a7000000000000000000000000000000de00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-dup2 detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r4, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002300)={{r4, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) dup2(r6, r3) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002300)={{r3, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x80, 0xfffffffd, 0x2}}, 0x5, &(0x7f00000002c0), &(0x7f0000000380)=0x800}, 0x5, &(0x7f0000002240)=[{0x1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="e2574fafa86c4cc767826f1b7be88da9c953786e36beb6d9b3f61b48411d8993f5dad9c839970b10b4b07c80854e8f7a356512308c28bed8a4473eae2cc3dab9637acd54b2606bb09c3603315986f08433833e632cc74b6e86b64c1e3f867dcb6b3a3a9234802afb1168d7cdeac625a58925", 0x72, 0x10}, {0x2, 0x0, &(0x7f0000000480)='Q\\\x00', &(0x7f00000010c0)="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", 0x1000, 0x2}, {0x3, 0x2, &(0x7f00000020c0)='batadv_slave_0\x00', &(0x7f0000002100)}, {0x2, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="8d598bde86e8d70b69b5e817c80199bb51be0380f42acff628ee1babe4e0fdbdaf573fc905020441301f1fb3c9146e844bbcee4b856c23ffd68a67", 0x3b}, {0x2, 0x7f, &(0x7f00000021c0)='\x00', &(0x7f0000002200)="45c6dfd98dc988607fea34e921ec1159c42ee961c1deca7d196fd75deab5653f", 0x20, 0x20}]}) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-getsockopt$sock_buf detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-rt_sigqueueinfo-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000300)={0x21, 0xe, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$pppl2tp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-openat-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-sendmsg$nl_xfrm-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@allocspi={0x100, 0x16, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x8, 0x4e24, 0x7f, 0xa, 0x0, 0x0, 0x2a, r1, r2}, {@in6=@private0, 0x4d4, 0x33}, @in=@rand_addr=0x64010101, {0x8, 0x401, 0x1, 0x3, 0x7, 0xd5ef, 0xb5f, 0x3}, {0xd, 0x2, 0x8, 0xba}, {0x6, 0x8, 0xe7}, 0x70bd28, 0x3504, 0x2, 0x0, 0x5, 0x4}, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x800}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-getsockopt$inet6_IPV6_IPSEC_POLICY-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private0, @in=@remote}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-getsockopt$inet_mreqn-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @private}, &(0x7f0000000540)=0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x80}}, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) program did not crash testing program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release extracting C reproducer testing compiled C program (duration=30.883651239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release simplifying C reproducer testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program did not crash testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=30.883651239s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendmsg$IPCTNL_MSG_CT_NEW-connect$pppl2tp-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true reproducing took 26m32.776210227s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1667 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:169 [inline] BUG: KASAN: use-after-free in mutex_lock+0x8e/0x1c0 kernel/locking/mutex.c:288 Write of size 8 at addr ffff8881228acd50 by task syz.2.17/372 CPU: 0 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:427 [inline] kasan_report+0x10f/0x150 mm/kasan/report.c:444 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1667 [inline] __mutex_trylock_fast kernel/locking/mutex.c:169 [inline] mutex_lock+0x8e/0x1c0 kernel/locking/mutex.c:288 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442 __sock_release net/socket.c:649 [inline] sock_close+0xb8/0x200 net/socket.c:1336 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fed753d2e99 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe4e5d6278 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffe4e5d6360 RCX: 00007fed753d2e99 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000005ec2 R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fed7565afac R14: 00007fed7565afa8 R15: 00007fed7565afa0 Allocated by task 372: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:433 [inline] ____kasan_kmalloc mm/kasan/common.c:512 [inline] __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:521 kasan_kmalloc include/linux/kasan.h:227 [inline] __kmalloc+0x13d/0x2c0 mm/slub.c:4436 kmalloc include/linux/slab.h:624 [inline] kzalloc include/linux/slab.h:750 [inline] l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772 __sys_connect_file net/socket.c:1923 [inline] __sys_connect+0x3cb/0x450 net/socket.c:1940 __do_sys_connect net/socket.c:1950 [inline] __se_sys_connect net/socket.c:1947 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:1947 x64_sys_call+0x7c/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 Freed by task 372: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4a/0x70 mm/kasan/common.c:45 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:365 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:373 kasan_slab_free include/linux/kasan.h:193 [inline] slab_free_hook mm/slub.c:1728 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1754 slab_free mm/slub.c:3526 [inline] kfree+0xc4/0x270 mm/slub.c:4588 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439 __sock_release net/socket.c:649 [inline] sock_close+0xb8/0x200 net/socket.c:1336 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 The buggy address belongs to the object at ffff8881228acc00 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881228acc00, ffff8881228ace00) The buggy address belongs to the page: page:ffffea00048a2b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1228ac head:ffffea00048a2b00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 368, ts 24273436033, free_ts 23468962952 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x192/0x1b0 mm/page_alloc.c:2607 prep_new_page+0x1c/0x110 mm/page_alloc.c:2613 get_page_from_freelist+0x2c3a/0x2cd0 mm/page_alloc.c:4487 __alloc_pages+0x1a2/0x460 mm/page_alloc.c:5824 alloc_slab_page mm/slub.c:-1 [inline] allocate_slab mm/slub.c:1937 [inline] new_slab+0xa0/0x4d0 mm/slub.c:2000 ___slab_alloc+0x3ac/0x840 mm/slub.c:3033 __slab_alloc+0x49/0x90 mm/slub.c:3120 slab_alloc_node mm/slub.c:3211 [inline] slab_alloc mm/slub.c:3255 [inline] kmem_cache_alloc_trace+0x146/0x270 mm/slub.c:3272 kmalloc include/linux/slab.h:619 [inline] kzalloc include/linux/slab.h:750 [inline] find_css_set+0x91d/0x1560 kernel/cgroup/cgroup.c:1251 cgroup_migrate_prepare_dst+0xc4/0xa00 kernel/cgroup/cgroup.c:2820 cgroup_attach_task+0x298/0x520 kernel/cgroup/cgroup.c:2926 __cgroup_procs_write+0x2b1/0x2e0 kernel/cgroup/cgroup.c:5090 cgroup_procs_write+0x27/0x50 kernel/cgroup/cgroup.c:5103 cgroup_file_write+0x294/0x560 kernel/cgroup/cgroup.c:4011 kernfs_fop_write_iter+0x2bd/0x400 fs/kernfs/file.c:296 call_write_iter include/linux/fs.h:2212 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x831/0xfd0 fs/read_write.c:594 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1474 [inline] free_pcp_prepare mm/page_alloc.c:1546 [inline] free_unref_page_prepare+0x5fa/0x600 mm/page_alloc.c:3536 free_unref_page+0xae/0x540 mm/page_alloc.c:3618 free_the_page mm/page_alloc.c:805 [inline] __free_pages+0x6c/0x100 mm/page_alloc.c:5900 __vunmap+0x801/0x980 mm/vmalloc.c:2660 __vfree mm/vmalloc.c:2709 [inline] vfree+0x8b/0xc0 mm/vmalloc.c:2740 kcov_put kernel/kcov.c:417 [inline] kcov_close+0x2b/0x50 kernel/kcov.c:519 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 exit_task_work include/linux/task_work.h:33 [inline] do_exit+0xb70/0x29a0 kernel/exit.c:890 do_group_exit+0x149/0x310 kernel/exit.c:1004 get_signal+0x64f/0x1430 kernel/signal.c:2908 arch_do_signal_or_restart+0xe2/0x1100 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:154 [inline] exit_to_user_mode_loop+0xa7/0xe0 kernel/entry/common.c:178 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 Memory state around the buggy address: ffff8881228acc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881228acc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881228acd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881228acd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881228ace00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1667 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:169 [inline] BUG: KASAN: use-after-free in mutex_lock+0x8e/0x1c0 kernel/locking/mutex.c:288 Write of size 8 at addr ffff8881228acd50 by task syz.2.17/372 CPU: 0 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:427 [inline] kasan_report+0x10f/0x150 mm/kasan/report.c:444 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1667 [inline] __mutex_trylock_fast kernel/locking/mutex.c:169 [inline] mutex_lock+0x8e/0x1c0 kernel/locking/mutex.c:288 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442 __sock_release net/socket.c:649 [inline] sock_close+0xb8/0x200 net/socket.c:1336 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fed753d2e99 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe4e5d6278 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffe4e5d6360 RCX: 00007fed753d2e99 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000005ec2 R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fed7565afac R14: 00007fed7565afa8 R15: 00007fed7565afa0 Allocated by task 372: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:433 [inline] ____kasan_kmalloc mm/kasan/common.c:512 [inline] __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:521 kasan_kmalloc include/linux/kasan.h:227 [inline] __kmalloc+0x13d/0x2c0 mm/slub.c:4436 kmalloc include/linux/slab.h:624 [inline] kzalloc include/linux/slab.h:750 [inline] l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772 __sys_connect_file net/socket.c:1923 [inline] __sys_connect+0x3cb/0x450 net/socket.c:1940 __do_sys_connect net/socket.c:1950 [inline] __se_sys_connect net/socket.c:1947 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:1947 x64_sys_call+0x7c/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 Freed by task 372: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4a/0x70 mm/kasan/common.c:45 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:365 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:373 kasan_slab_free include/linux/kasan.h:193 [inline] slab_free_hook mm/slub.c:1728 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1754 slab_free mm/slub.c:3526 [inline] kfree+0xc4/0x270 mm/slub.c:4588 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439 __sock_release net/socket.c:649 [inline] sock_close+0xb8/0x200 net/socket.c:1336 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 The buggy address belongs to the object at ffff8881228acc00 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881228acc00, ffff8881228ace00) The buggy address belongs to the page: page:ffffea00048a2b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1228ac head:ffffea00048a2b00 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 368, ts 24273436033, free_ts 23468962952 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x192/0x1b0 mm/page_alloc.c:2607 prep_new_page+0x1c/0x110 mm/page_alloc.c:2613 get_page_from_freelist+0x2c3a/0x2cd0 mm/page_alloc.c:4487 __alloc_pages+0x1a2/0x460 mm/page_alloc.c:5824 alloc_slab_page mm/slub.c:-1 [inline] allocate_slab mm/slub.c:1937 [inline] new_slab+0xa0/0x4d0 mm/slub.c:2000 ___slab_alloc+0x3ac/0x840 mm/slub.c:3033 __slab_alloc+0x49/0x90 mm/slub.c:3120 slab_alloc_node mm/slub.c:3211 [inline] slab_alloc mm/slub.c:3255 [inline] kmem_cache_alloc_trace+0x146/0x270 mm/slub.c:3272 kmalloc include/linux/slab.h:619 [inline] kzalloc include/linux/slab.h:750 [inline] find_css_set+0x91d/0x1560 kernel/cgroup/cgroup.c:1251 cgroup_migrate_prepare_dst+0xc4/0xa00 kernel/cgroup/cgroup.c:2820 cgroup_attach_task+0x298/0x520 kernel/cgroup/cgroup.c:2926 __cgroup_procs_write+0x2b1/0x2e0 kernel/cgroup/cgroup.c:5090 cgroup_procs_write+0x27/0x50 kernel/cgroup/cgroup.c:5103 cgroup_file_write+0x294/0x560 kernel/cgroup/cgroup.c:4011 kernfs_fop_write_iter+0x2bd/0x400 fs/kernfs/file.c:296 call_write_iter include/linux/fs.h:2212 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x831/0xfd0 fs/read_write.c:594 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1474 [inline] free_pcp_prepare mm/page_alloc.c:1546 [inline] free_unref_page_prepare+0x5fa/0x600 mm/page_alloc.c:3536 free_unref_page+0xae/0x540 mm/page_alloc.c:3618 free_the_page mm/page_alloc.c:805 [inline] __free_pages+0x6c/0x100 mm/page_alloc.c:5900 __vunmap+0x801/0x980 mm/vmalloc.c:2660 __vfree mm/vmalloc.c:2709 [inline] vfree+0x8b/0xc0 mm/vmalloc.c:2740 kcov_put kernel/kcov.c:417 [inline] kcov_close+0x2b/0x50 kernel/kcov.c:519 __fput+0x22b/0x900 fs/file_table.c:311 ____fput+0x15/0x20 fs/file_table.c:339 task_work_run+0x127/0x190 kernel/task_work.c:188 exit_task_work include/linux/task_work.h:33 [inline] do_exit+0xb70/0x29a0 kernel/exit.c:890 do_group_exit+0x149/0x310 kernel/exit.c:1004 get_signal+0x64f/0x1430 kernel/signal.c:2908 arch_do_signal_or_restart+0xe2/0x1100 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:154 [inline] exit_to_user_mode_loop+0xa7/0xe0 kernel/entry/common.c:178 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:307 Memory state around the buggy address: ffff8881228acc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881228acc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881228acd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881228acd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881228ace00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================