Extracting prog: 2m32.408075338s Minimizing prog: 22m17.160395216s Simplifying prog options: 0s Extracting C: 36.639918922s Simplifying C: 3m8.58345877s extracting reproducer from 51 programs testing a last program of every proc single: executing 11 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$ENABLE_STATS-socket$inet6-connect$inet6-socket$packet-setsockopt$SO_ATTACH_FILTER-ioctl$TCSETSW-sendmsg-openat$ptmx-bpf$BPF_BTF_LOAD-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-syz_mount_image$ext4-socket-pselect6-socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x2, 0xfc}]}, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cd43bc444a506cd4fb40ada91ac7660b3"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@orlov}, {@oldalloc}, {@orlov}, {@nogrpid}, {@resuid}, {@grpjquota}]}, 0x2, 0x57b, &(0x7f0000000800)="$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") socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x4, 0x7, 0x0, 0xfffffffffffffff8, 0x8, 0x5e, 0x5}, 0x0, &(0x7f0000000180)={0x9, 0x100000000, 0x4, 0x9, 0x0, 0x8000000000000, 0x8, 0x5}, &(0x7f0000000200), 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@empty, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x4, 0x0, 0x0, 0x0, 0x1dc964ebc2f8a1be, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x9, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x2014) program did not crash program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp-mmap-setresuid-ioprio_set$uid-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {r9}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001a40)={r11, r15, "f765a292f574d2200b282194cefcf8d7bbf0ce9970795640dcfe10f25c2a90999f248a8a96e3df0e65bb9c8d2e5d5301b585aac305bdfc34a90353e24b42eb69c965bd4caddc0d9d2761c85acb65af9b3019b8c190739d494ebf0b422e98341ec43d1026ed9503a65db28acff38d59c362972a0c4d5dc4c9110cd1641ea6dd3506a02d17939895d4eb255e9b702ead0f071d062ca148255bcfeec7b753e61d5d32dc627d29b8d6f4dcbacb1c379da935d9c3b6d8c109735941664a40b8cd82271bce7d772d26b19857c003aa4a6df40d9da81b44da4ce8f302ed9126130661f65bc4d13f6e89940ac7f2fffb60f83e49f98d556c524879912c3f0307d1b77380", "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"}) r17 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r17, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x6000) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000004000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r18, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp-mmap-setresuid-ioprio_set$uid-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {r9}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001a40)={r11, r15, "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", "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"}) r17 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r17, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000004000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp-mmap-setresuid-ioprio_set$uid detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "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", "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"}) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r16, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x6000) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp-mmap-setresuid detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "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", "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"}) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r16, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) setresuid(0xee00, 0x0, 0x0) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp-mmap detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "f765a292f574d2200b282194cefcf8d7bbf0ce9970795640dcfe10f25c2a90999f248a8a96e3df0e65bb9c8d2e5d5301b585aac305bdfc34a90353e24b42eb69c965bd4caddc0d9d2761c85acb65af9b3019b8c190739d494ebf0b422e98341ec43d1026ed9503a65db28acff38d59c362972a0c4d5dc4c9110cd1641ea6dd3506a02d17939895d4eb255e9b702ead0f071d062ca148255bcfeec7b753e61d5d32dc627d29b8d6f4dcbacb1c379da935d9c3b6d8c109735941664a40b8cd82271bce7d772d26b19857c003aa4a6df40d9da81b44da4ce8f302ed9126130661f65bc4d13f6e89940ac7f2fffb60f83e49f98d556c524879912c3f0307d1b77380", "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"}) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r16, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp-connect$pppl2tp detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "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", "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"}) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r16, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER-socket$pppl2tp detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "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", "14e007a907953d90ffcc25609a0e2f2c92743db10845519c17e9205def944aaecebe7cf4104c5b3917dedc33733b585257e3437cd93343fe8375a67706ceb03c941858e7b930a281205ffcb587000fc398d45db2b5f25f4482c2351a1218a148a60b6c3784a412aa46191a72db459498b2acde54259d7fc0212caca71bfcf37425483e2dcbbb7f4f80df2b2e48a75aa2d1afebad3ae579c74114146bcd6d0dbf0a5f1373970aca83811fad725a50dc9be9c3a12a719a31eeb0fef1761fcde7fd8fb99a81247e7d9b3d034a58a69b60c8be1b2f14f383d65010f444f6ea24736e01db28fe5c1638dfdc92bff5c38ae619a40fe443c7f7ce53a6958ec3ed8fbda59aaa90c8a8d7c0890ebd5db51cf346a3e0b54433741221ec86722f2a92bfd210ffc3e8d97dece978058e0a1ec036d7a5ca1ce30872783af59e12736529c047ec244da6f316d88b4a7871dbc3c649b5c1ef87b36a1271ba0e9a17d2ddaceda2a1b90ca77dbede14f3127fbb0dd502e63ab81f62ad1382b5040771a9b41100d01f2f958cecbae03a0cef7f7fae5da0a7b67ae24572d7ce0f629bc3ca95f7ae64a650aebd89d49baed392a7c4af9ce626ce507dfd5dc256150cb11953cc37986103887ec64788242500e13e57b5d8b6f8f34aed7e64933150e2b9e3e0805e47c8775b56b103ff18e272c03fa154fd082a9f10490084cd4addf032c3b01d27a0ed63435ce5d92082c3eb8a443fc39db0459667a41eea0a0f210141dc3f84d0eb70bed10667dd8b3515cb36f3663cc73ada17ea4cabdcdb6a7e108b0bf000798407161453b1eecf657736559650bd5fb715b43e6cc6382056db921c2fe45c1b2000c9a2f731bb004f01b9dac0786debdb1a3515f7bdb0c3107a2cdd33dcaaa120b1b5f9351372f96fbccde3e4a41def6953270372126520fedfbd8195f7867d0ddc3bcfd3caffa279502fc2977851950672fc7bad61737c33df3095c8c1d6c83d2eccdabdb48202d4015c26cb8b2f12cc3013b066d3ebe507e4472d8ee673b2cb2b1d3c891a49201381d1c1e5122927b9ea9a274704ebe978e02386d5aa6fc20bc835fe24bd988e98ce5e10e0360b6e043bd627e4865774517074e97cba5e9084aed5500126436887ab5e048c34e62030b32eda011b5b60618525bf7be951603aa9dcf2124a07f3144a5ba34a01b38b609eab26f89678e69eb91ecbe45a3e4c1d5cb05ecf356e0fe1dfea4f79e4004f62c4e17fe62aa6cd213c882c0aea0a2dbdec19f8fed03b9cad8880bbe7529de079c67cd1dd3e86eb34645bdf574acedd37557774aa66283dab49572f5d59bdd032ceccc3823ddc705d88eb479575243f38a82b09232a1f519027f2b050d597d9af78e7eb3c6ac804b8d909cdd07f9c2fe2eb5fa83c538ecc2013d3c6ad3c43135982a60082fcf11830751c948b7b09d78c603a48e5d0d986974c72cb4b854755e8da19b2fb817fefa4a57f7863ac6da3cf08c455ed2c0e7b995252b2403193158878f9c3ce65b975b96a6442e40c932de8a70f858b041a7343d4466461d0e75a8bd9b925f3971752d1057d1e5468295378c4e1070cd1b7faa98943630aa7f7ee92b4c3547db93f7e31e221c68ffeb4ebc02096e8e6c4b5dbe2ec737b9246b24508d4d665a3dbaca51bbe138cace8cb21e890dacf82cb0deb636abaf23015a985f3eb94e43ae2877e193e658713b974ded1fb71c4f43e3e2c721762abc0036000596dbd23c6d3ee2fccbd04258cfb77b78b64721cffaf6438c185bced71ee6f068209eed2baa2738cacde9569be33b950f0955179cb829e6b686038b40ddd10104989dce7a9584c0d66c8e23b8c214d8584b4b5d6677d8453f000cc4b0492be39d4e3b82a28d8121560e07fe198b3e35e41a6b582dd1786ccf68a2b4a540e344d1782cf568a77ee9353665b1c0fd092f323c0d7dde38b26b02130155d555fd72d8f4febc58e6445086b1d72c01e69387b9d6804c57ac022c72990e7adfb761ee59feffa97034125176108acee65e4a7eceee4c7e9afabcec0f076615e8d60732cbf94b6d266fbb2aba482369e4c6e61c7e2a34a6319a9f2685e048dde6c1408d6a3b27a57ee9a0b5f68fa436d96ca301ded7265bcf301709bb74c78eb7729dcf17d07364f5a859b989c1c65133740cba65bfa7e9939e3e01fd5030df3c27c04eb1fbd58d4b7a7f2fcf353a7ce29321d48b97592ff12c9aadc345878321124fbfdfd6ba0f14130823c2dface9ccba1c2a125348cf47eb6a5322934a72c1ddbc73de0e7a7377ecf2fb642121eb7c55ee5c1ad52cbb52663fd85dfc632a6a157267bcd3c73d35f627aca55a1a8780ac303a63653a4d8f29de0df5abed0b3f2b17fc0f4962bd22b3435db318ed3ccba8fa4068cae74869c1db568eca86d0dbe4d3e32c6a80aba81c7fe9fc66d95b5c7b6b3ecf0a19cc2a41df65b35e8e54146435df47ba6f8c71d5928234b7fca1ddd2100c9f7399a601ca476ee4cdb76d6b4480f38f2c4d709979fa78b59cbd825d4434bc58158d7b91b6871fe03570e9528e1c6bf91efdfb97bc061fa5d3b8b21ac375ad5e790814d12f5d4651356ff67d1893376b6779859d300f97699397e052e88db866270879fa1a66844c2e9e73f8a3aa745aa14064797f1435110bf9e6560d72cb8d2326172b91d3a98167bc72b95d66f2f4a8a39750d7271644dc102bec7efdcaa2f8213da51e4b66bcb21edac0bc9fcd88aee7ecdb104b240c0da9f6967d610c067a91809eab1002c655dd827daefdcbc895c04fffd8ab109cf47c47cde514061f29e86ed45a77720cfdbcbea159ee4433bdc672a26ea266279a7a903aa7ebffa5d806b73883f2051b4322dc693fb069fb8f1d09da241bcd7f7f8cadcba5b34fe1cbaad87b566609802bb2a6685486f0b59372b3eb5ce14168039f55b048aa8a863db53f9626d28bffeeb19f836b50dfd8761e870e81d553c5f57c3953202a720e81b338b5b439bb1c21224f52e0a79598e98c0e2253c3f056127fd1f8056e1023f29ad402a771019551eb261e164c34c752b061919ac192eebbd49f05db21f28a4dc8a4b3eb84ea6bcc6f413e3c3ecda15d074550bd320e36599beb84ecd6a220c16e2fc845736dc756707bd452f13f1a70ee097d91a67433f84149e86c0b08a0e54112a63fb0f90d001ed65d404cc0e9e6571e54fc071cdc17853d6ad19451a96e0b559c806ca81204a5b9bb5293fb390895396a7be1b51df87fee8553702934d2c776cbb58a9a87f64068929f88dfba627742f4eb30626059771f11c383460acf5facf5cab2a49ff667a3b9e617f244e5ca370528a91743fc908f61a367e043622c204155e0ca118d62d77dd423a9ae4c024cb2b02cff57c9b37f9397acffbb16552db4a973b425c70bc2600461673f21fe228008c716d54e1405e983c39aadcf778180eee112d84eb251a7a9028d59f3d365d4b372ee8df3acb239bbf494e4a9d6f16fb7418e3cd4cd949f3f5131536135d7aedc8a8479b13cc679471e7e52309809ab513b27dbe06afaa75f6f0fb1447ca1f9cd45f5d52d2c0b555b0aefc91b140c2c9052b3cefae255f9faaf1cf0914ae665d7b478a5bc0b3c372c5eaa65ca9923d47a8eb81aeb8afd9d731f38bf0522c75f66c6178ef43e1e4da6a5a80992c14bad6c6d4d501d182868f017c703c142021ba820da3f1a86925ba5d5cdca4b9cf2cb072dc45a66c8f9cf221d636f607c06545d135039ae2b2e7d2124057549247d9318c9bd1b0a601bc41a9852933dca307aa5fadbc7b52cbc1b1a9ee794f45184596294c6f596ed97614a639c10cc5676036642a71844780581c21b011f0d3c991a1e7e9f1fb0430fa2d1518d7e70a7f95533b79790aca6c59a0d4f7523ee45387f1fee1fd664d74aecc58be5d1129229a46ce429e3b07f70d5c941e95d89f9308d7eb7a1c2447e5a378418ac3cc06064c96eae890d6ae66732d0acdfde6ec1033bd9457bcf1627ef8f285b692b43d416c57aeec2a05c357359a87bc01e0017c8f7006fd3179dda9b5e8a779f8e50a12637a4794954e55a72fa0d41c1250f16de82884032eed4d441f4ff910ed66f75077eacbc4bccca554e5d4f4b424636e737bbdef7ab568a16cdce0600de77ec9c1968d37b3a16921981ef57509321e2dacffb3d4a9ad22f68e692231cd3dd5f2b66bd0289d8b396165f3ad93aa70e4ceca7dbf43064348b1bf5e9a57bb95d2159ef59371dc658d33fd6a74fd10ca3d39e6ca2c8e7dd6e9c7f16c9fb647ea72210d5414626c35dea6ac0cea06029b558942318858fcc6896122719e8569bed20efcdf4006d45a57ef6a8162c28fd4603c1c02c0afcdb5ddaff75a68402004114366fefb66dbf3cfbeca126ada6bda9b35d7f6800a2caa31b46ecc2b8a83d149aa211963cf6450033a92fe6596a30ba926cddc69a584834373b547da91a42627ff58cb63700e5feea010b7e4399f6d97f935971fd54c73747c7e2c17c87fa4768fe36ae81e676af9498547463ae0a7139283975c610db572eba8272072e546463f4f6782c0779a558c1b49c77f0e72f7a51e66deac6d43f8c8fe571484caa177a433104ff546a026fa999271dbaf102719efd0812f438d0c8ef03e13f92744a7e141902ada4af929b488a3168e30972f8b66a37d60d2c5a3b81dc1b224c70e60bcea7895b3c9800e0ab93f924f975a919b9f9ec629f8d05e87e998977b9976dfe0d16f3d3a28d8804908982f60935ee864cb57fcdc644241446c966b28387d04bed01dc5c2a868b228c2ca604a1f5b70dcb3f904deeb8897e8dd0b3ff05a6f11b07264c751365b31aae7e251a78f8a123832165fbb2c00c26d99023d9bcb54aad8658d460b005236ccb119b4d3c960a6f31f5371e64fe147a3fe6eeebf32c6b226f6fedff0f75c0a1a1b48fc3c843638b32878eb86ef65e79aab6a42d86c746a471c0932a2683ae94dadd24bc9a82d0feb20f0ffc9aaaf4292d679f37fc32dd9e8b07c0834d0acaea4ace6b41c2b467254e1f464d3876defb81eabd4e4cb0689e6f636cb1aeb0b2708acca545d94acdd2a3aaabb9bf71232ce6854974ee4696f3090330fa38f85035bf25e96a845d7b0c5aafefebb10129f72b6a74e764a0580f5b8dfba681242e8ed51579c6dc38d0746ef5876c18832c9d5996050ca08f2696cbbf3ffd9384378016a3fcdcfc4bbac2eb233149407140a29054f2371aba0cd78362d7c3baefcbf8c8003dda976678a81cfe59773b63107a598dda337a4130ac70c8223d536531bdaa1640591cadced80025fa464743bcfc061f6daa063ac35907e8be8fae5de06f85190a3e245036da0df3cdf7f15ddb66879c49acb6e1fbdf255080f6734a3f8c8d91db3d426d6c05d7f0cde16e9429857cbcc589a637285c1bb"}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001a40)={r10, r14, "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", "14e007a907953d90ffcc25609a0e2f2c92743db10845519c17e9205def944aaecebe7cf4104c5b3917dedc33733b585257e3437cd93343fe8375a67706ceb03c941858e7b930a281205ffcb587000fc398d45db2b5f25f4482c2351a1218a148a60b6c3784a412aa46191a72db459498b2acde54259d7fc0212caca71bfcf37425483e2dcbbb7f4f80df2b2e48a75aa2d1afebad3ae579c74114146bcd6d0dbf0a5f1373970aca83811fad725a50dc9be9c3a12a719a31eeb0fef1761fcde7fd8fb99a81247e7d9b3d034a58a69b60c8be1b2f14f383d65010f444f6ea24736e01db28fe5c1638dfdc92bff5c38ae619a40fe443c7f7ce53a6958ec3ed8fbda59aaa90c8a8d7c0890ebd5db51cf346a3e0b54433741221ec86722f2a92bfd210ffc3e8d97dece978058e0a1ec036d7a5ca1ce30872783af59e12736529c047ec244da6f316d88b4a7871dbc3c649b5c1ef87b36a1271ba0e9a17d2ddaceda2a1b90ca77dbede14f3127fbb0dd502e63ab81f62ad1382b5040771a9b41100d01f2f958cecbae03a0cef7f7fae5da0a7b67ae24572d7ce0f629bc3ca95f7ae64a650aebd89d49baed392a7c4af9ce626ce507dfd5dc256150cb11953cc37986103887ec64788242500e13e57b5d8b6f8f34aed7e64933150e2b9e3e0805e47c8775b56b103ff18e272c03fa154fd082a9f10490084cd4addf032c3b01d27a0ed63435ce5d92082c3eb8a443fc39db0459667a41eea0a0f210141dc3f84d0eb70bed10667dd8b3515cb36f3663cc73ada17ea4cabdcdb6a7e108b0bf000798407161453b1eecf657736559650bd5fb715b43e6cc6382056db921c2fe45c1b2000c9a2f731bb004f01b9dac0786debdb1a3515f7bdb0c3107a2cdd33dcaaa120b1b5f9351372f96fbccde3e4a41def6953270372126520fedfbd8195f7867d0ddc3bcfd3caffa279502fc2977851950672fc7bad61737c33df3095c8c1d6c83d2eccdabdb48202d4015c26cb8b2f12cc3013b066d3ebe507e4472d8ee673b2cb2b1d3c891a49201381d1c1e5122927b9ea9a274704ebe978e02386d5aa6fc20bc835fe24bd988e98ce5e10e0360b6e043bd627e4865774517074e97cba5e9084aed5500126436887ab5e048c34e62030b32eda011b5b60618525bf7be951603aa9dcf2124a07f3144a5ba34a01b38b609eab26f89678e69eb91ecbe45a3e4c1d5cb05ecf356e0fe1dfea4f79e4004f62c4e17fe62aa6cd213c882c0aea0a2dbdec19f8fed03b9cad8880bbe7529de079c67cd1dd3e86eb34645bdf574acedd37557774aa66283dab49572f5d59bdd032ceccc3823ddc705d88eb479575243f38a82b09232a1f519027f2b050d597d9af78e7eb3c6ac804b8d909cdd07f9c2fe2eb5fa83c538ecc2013d3c6ad3c43135982a60082fcf11830751c948b7b09d78c603a48e5d0d986974c72cb4b854755e8da19b2fb817fefa4a57f7863ac6da3cf08c455ed2c0e7b995252b2403193158878f9c3ce65b975b96a6442e40c932de8a70f858b041a7343d4466461d0e75a8bd9b925f3971752d1057d1e5468295378c4e1070cd1b7faa98943630aa7f7ee92b4c3547db93f7e31e221c68ffeb4ebc02096e8e6c4b5dbe2ec737b9246b24508d4d665a3dbaca51bbe138cace8cb21e890dacf82cb0deb636abaf23015a985f3eb94e43ae2877e193e658713b974ded1fb71c4f43e3e2c721762abc0036000596dbd23c6d3ee2fccbd04258cfb77b78b64721cffaf6438c185bced71ee6f068209eed2baa2738cacde9569be33b950f0955179cb829e6b686038b40ddd10104989dce7a9584c0d66c8e23b8c214d8584b4b5d6677d8453f000cc4b0492be39d4e3b82a28d8121560e07fe198b3e35e41a6b582dd1786ccf68a2b4a540e344d1782cf568a77ee9353665b1c0fd092f323c0d7dde38b26b02130155d555fd72d8f4febc58e6445086b1d72c01e69387b9d6804c57ac022c72990e7adfb761ee59feffa97034125176108acee65e4a7eceee4c7e9afabcec0f076615e8d60732cbf94b6d266fbb2aba482369e4c6e61c7e2a34a6319a9f2685e048dde6c1408d6a3b27a57ee9a0b5f68fa436d96ca301ded7265bcf301709bb74c78eb7729dcf17d07364f5a859b989c1c65133740cba65bfa7e9939e3e01fd5030df3c27c04eb1fbd58d4b7a7f2fcf353a7ce29321d48b97592ff12c9aadc345878321124fbfdfd6ba0f14130823c2dface9ccba1c2a125348cf47eb6a5322934a72c1ddbc73de0e7a7377ecf2fb642121eb7c55ee5c1ad52cbb52663fd85dfc632a6a157267bcd3c73d35f627aca55a1a8780ac303a63653a4d8f29de0df5abed0b3f2b17fc0f4962bd22b3435db318ed3ccba8fa4068cae74869c1db568eca86d0dbe4d3e32c6a80aba81c7fe9fc66d95b5c7b6b3ecf0a19cc2a41df65b35e8e54146435df47ba6f8c71d5928234b7fca1ddd2100c9f7399a601ca476ee4cdb76d6b4480f38f2c4d709979fa78b59cbd825d4434bc58158d7b91b6871fe03570e9528e1c6bf91efdfb97bc061fa5d3b8b21ac375ad5e790814d12f5d4651356ff67d1893376b6779859d300f97699397e052e88db866270879fa1a66844c2e9e73f8a3aa745aa14064797f1435110bf9e6560d72cb8d2326172b91d3a98167bc72b95d66f2f4a8a39750d7271644dc102bec7efdcaa2f8213da51e4b66bcb21edac0bc9fcd88aee7ecdb104b240c0da9f6967d610c067a91809eab1002c655dd827daefdcbc895c04fffd8ab109cf47c47cde514061f29e86ed45a77720cfdbcbea159ee4433bdc672a26ea266279a7a903aa7ebffa5d806b73883f2051b4322dc693fb069fb8f1d09da241bcd7f7f8cadcba5b34fe1cbaad87b566609802bb2a6685486f0b59372b3eb5ce14168039f55b048aa8a863db53f9626d28bffeeb19f836b50dfd8761e870e81d553c5f57c3953202a720e81b338b5b439bb1c21224f52e0a79598e98c0e2253c3f056127fd1f8056e1023f29ad402a771019551eb261e164c34c752b061919ac192eebbd49f05db21f28a4dc8a4b3eb84ea6bcc6f413e3c3ecda15d074550bd320e36599beb84ecd6a220c16e2fc845736dc756707bd452f13f1a70ee097d91a67433f84149e86c0b08a0e54112a63fb0f90d001ed65d404cc0e9e6571e54fc071cdc17853d6ad19451a96e0b559c806ca81204a5b9bb5293fb390895396a7be1b51df87fee8553702934d2c776cbb58a9a87f64068929f88dfba627742f4eb30626059771f11c383460acf5facf5cab2a49ff667a3b9e617f244e5ca370528a91743fc908f61a367e043622c204155e0ca118d62d77dd423a9ae4c024cb2b02cff57c9b37f9397acffbb16552db4a973b425c70bc2600461673f21fe228008c716d54e1405e983c39aadcf778180eee112d84eb251a7a9028d59f3d365d4b372ee8df3acb239bbf494e4a9d6f16fb7418e3cd4cd949f3f5131536135d7aedc8a8479b13cc679471e7e52309809ab513b27dbe06afaa75f6f0fb1447ca1f9cd45f5d52d2c0b555b0aefc91b140c2c9052b3cefae255f9faaf1cf0914ae665d7b478a5bc0b3c372c5eaa65ca9923d47a8eb81aeb8afd9d731f38bf0522c75f66c6178ef43e1e4da6a5a80992c14bad6c6d4d501d182868f017c703c142021ba820da3f1a86925ba5d5cdca4b9cf2cb072dc45a66c8f9cf221d636f607c06545d135039ae2b2e7d2124057549247d9318c9bd1b0a601bc41a9852933dca307aa5fadbc7b52cbc1b1a9ee794f45184596294c6f596ed97614a639c10cc5676036642a71844780581c21b011f0d3c991a1e7e9f1fb0430fa2d1518d7e70a7f95533b79790aca6c59a0d4f7523ee45387f1fee1fd664d74aecc58be5d1129229a46ce429e3b07f70d5c941e95d89f9308d7eb7a1c2447e5a378418ac3cc06064c96eae890d6ae66732d0acdfde6ec1033bd9457bcf1627ef8f285b692b43d416c57aeec2a05c357359a87bc01e0017c8f7006fd3179dda9b5e8a779f8e50a12637a4794954e55a72fa0d41c1250f16de82884032eed4d441f4ff910ed66f75077eacbc4bccca554e5d4f4b424636e737bbdef7ab568a16cdce0600de77ec9c1968d37b3a16921981ef57509321e2dacffb3d4a9ad22f68e692231cd3dd5f2b66bd0289d8b396165f3ad93aa70e4ceca7dbf43064348b1bf5e9a57bb95d2159ef59371dc658d33fd6a74fd10ca3d39e6ca2c8e7dd6e9c7f16c9fb647ea72210d5414626c35dea6ac0cea06029b558942318858fcc6896122719e8569bed20efcdf4006d45a57ef6a8162c28fd4603c1c02c0afcdb5ddaff75a68402004114366fefb66dbf3cfbeca126ada6bda9b35d7f6800a2caa31b46ecc2b8a83d149aa211963cf6450033a92fe6596a30ba926cddc69a584834373b547da91a42627ff58cb63700e5feea010b7e4399f6d97f935971fd54c73747c7e2c17c87fa4768fe36ae81e676af9498547463ae0a7139283975c610db572eba8272072e546463f4f6782c0779a558c1b49c77f0e72f7a51e66deac6d43f8c8fe571484caa177a433104ff546a026fa999271dbaf102719efd0812f438d0c8ef03e13f92744a7e141902ada4af929b488a3168e30972f8b66a37d60d2c5a3b81dc1b224c70e60bcea7895b3c9800e0ab93f924f975a919b9f9ec629f8d05e87e998977b9976dfe0d16f3d3a28d8804908982f60935ee864cb57fcdc644241446c966b28387d04bed01dc5c2a868b228c2ca604a1f5b70dcb3f904deeb8897e8dd0b3ff05a6f11b07264c751365b31aae7e251a78f8a123832165fbb2c00c26d99023d9bcb54aad8658d460b005236ccb119b4d3c960a6f31f5371e64fe147a3fe6eeebf32c6b226f6fedff0f75c0a1a1b48fc3c843638b32878eb86ef65e79aab6a42d86c746a471c0932a2683ae94dadd24bc9a82d0feb20f0ffc9aaaf4292d679f37fc32dd9e8b07c0834d0acaea4ace6b41c2b467254e1f464d3876defb81eabd4e4cb0689e6f636cb1aeb0b2708acca545d94acdd2a3aaabb9bf71232ce6854974ee4696f3090330fa38f85035bf25e96a845d7b0c5aafefebb10129f72b6a74e764a0580f5b8dfba681242e8ed51579c6dc38d0746ef5876c18832c9d5996050ca08f2696cbbf3ffd9384378016a3fcdcfc4bbac2eb233149407140a29054f2371aba0cd78362d7c3baefcbf8c8003dda976678a81cfe59773b63107a598dda337a4130ac70c8223d536531bdaa1640591cadced80025fa464743bcfc061f6daa063ac35907e8be8fae5de06f85190a3e245036da0df3cdf7f15ddb66879c49acb6e1fbdf255080f6734a3f8c8d91db3d426d6c05d7f0cde16e9429857cbcc589a637285c1bb"}) program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {r8}], 0x0, "9c6f08f70c2ff7"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_INFO detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000002d00)) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix-bpf$PROG_LOAD detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-socketpair$unix detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) program crashed: KASAN: use-after-free Write in rcu_segcblist_enqueue testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c40)={0x5, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9c6f08f70c2ff7"}) program did not crash testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-getsockopt$IP6T_SO_GET_REVISION_TARGET-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_TREE_SEARCH-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001d00)={{0x0, 0x0, 0x2, 0x3, 0x9, 0xffffffff, 0xffffffffffffffff, 0xf, 0x2, 0xd, 0x100, 0x80000001, 0xfffffffffffffffc, 0x9, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-bpf$PROG_LOAD-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-socketpair$unix-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-sendmsg$inet6-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x2, 0x0, [@mcast2]}}}], 0x28}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_int-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-setsockopt$inet6_IPV6_FLOWLABEL_MGR-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-socket$inet6-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-connect$inet6-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-openat$vcs-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program did not crash testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$pppl2tp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program did not crash testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program did not crash testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program crashed: KASAN: use-after-free Write in pppol2tp_release testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x9, [], 0x8b, "cc8520100d4978"}) program did not crash testing program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue extracting C reproducer testing compiled C program (duration=34.344763729s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Write in pppol2tp_release simplifying C reproducer testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program crashed: KASAN: use-after-free Write in pppol2tp_release testing compiled C program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF program did not crash testing program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true testing program (duration=34.344763729s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) program crashed: KASAN: use-after-free Write in pppol2tp_release validation run: crashed=true reproducing took 29m57.076169398s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:102 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1779 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:176 [inline] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 kernel/locking/mutex.c:295 Write of size 8 at addr ffff8881222e3550 by task syz.2.17/376 CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x71/0x200 mm/kasan/report.c:316 print_report+0x4a/0x60 mm/kasan/report.c:420 kasan_report+0x122/0x150 mm/kasan/report.c:524 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:102 [inline] atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1779 [inline] __mutex_trylock_fast kernel/locking/mutex.c:176 [inline] mutex_lock+0x86/0x1b0 kernel/locking/mutex.c:295 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:441 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x9b/0xb0 kernel/entry/common.c:177 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f6ec9b9de59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc5b1544f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffc5b1545e0 RCX: 00007f6ec9b9de59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000000678f R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6ec9e25fac R14: 00007f6ec9e25fa8 R15: 00007f6ec9e25fa0 Allocated by task 376: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_alloc_info+0x1f/0x30 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:380 [inline] __kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389 kasan_kmalloc include/linux/kasan.h:212 [inline] __do_kmalloc_node mm/slab_common.c:938 [inline] __kmalloc+0xb4/0x1e0 mm/slab_common.c:951 kmalloc include/linux/slab.h:568 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_session_create+0x38/0xbd0 net/l2tp/l2tp_core.c:1609 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:771 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 Freed by task 376: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3df/0x4d0 net/l2tp/l2tp_core.c:1582 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:438 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x9b/0xb0 kernel/entry/common.c:177 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 The buggy address belongs to the object at ffff8881222e3400 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881222e3400, ffff8881222e3600) The buggy address belongs to the physical page: page:ffffea000488b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1222e0 head:ffffea000488b800 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 376, tgid 376 (syz.2.17), ts 26531642616, free_ts 25935672937 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2672 prep_new_page+0x1c/0x110 mm/page_alloc.c:2679 get_page_from_freelist+0x2ca9/0x2d20 mm/page_alloc.c:4586 __alloc_pages+0x1fa/0x610 mm/page_alloc.c:5930 alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1 allocate_slab mm/slub.c:1967 [inline] new_slab+0x98/0x3e0 mm/slub.c:2020 ___slab_alloc+0x70f/0xb70 mm/slub.c:3177 __slab_alloc+0x5e/0xa0 mm/slub.c:3263 slab_alloc_node mm/slub.c:3348 [inline] __kmem_cache_alloc_node+0x204/0x2d0 mm/slub.c:3423 kmalloc_trace+0x29/0xb0 mm/slab_common.c:1028 kmalloc include/linux/slab.h:563 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_tunnel_create+0x97/0x430 net/l2tp/l2tp_core.c:1421 pppol2tp_tunnel_get net/l2tp/l2tp_ppp.c:670 [inline] pppol2tp_connect+0x7ef/0x1640 net/l2tp/l2tp_ppp.c:727 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1580 [inline] free_pcp_prepare mm/page_alloc.c:1654 [inline] free_unref_page_prepare+0x80c/0x820 mm/page_alloc.c:3621 free_unref_page+0x93/0x530 mm/page_alloc.c:3719 free_the_page mm/page_alloc.c:863 [inline] __free_pages+0x67/0x100 mm/page_alloc.c:6020 __vunmap+0xa3c/0xc00 mm/vmalloc.c:2739 __vfree mm/vmalloc.c:2788 [inline] vfree+0x61/0x90 mm/vmalloc.c:2819 kcov_put kernel/kcov.c:437 [inline] kcov_close+0x2b/0x50 kernel/kcov.c:533 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 Memory state around the buggy address: ffff8881222e3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881222e3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881222e3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881222e3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881222e3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:102 [inline] BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1779 [inline] BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:176 [inline] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 kernel/locking/mutex.c:295 Write of size 8 at addr ffff8881222e3550 by task syz.2.17/376 CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:88 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106 print_address_description+0x71/0x200 mm/kasan/report.c:316 print_report+0x4a/0x60 mm/kasan/report.c:420 kasan_report+0x122/0x150 mm/kasan/report.c:524 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:102 [inline] atomic_long_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1779 [inline] __mutex_trylock_fast kernel/locking/mutex.c:176 [inline] mutex_lock+0x86/0x1b0 kernel/locking/mutex.c:295 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:441 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x9b/0xb0 kernel/entry/common.c:177 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f6ec9b9de59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc5b1544f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007ffc5b1545e0 RCX: 00007f6ec9b9de59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 000000000000678f R08: 0000000000000001 R09: 0000000000000000 R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6ec9e25fac R14: 00007f6ec9e25fa8 R15: 00007f6ec9e25fa0 Allocated by task 376: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_alloc_info+0x1f/0x30 mm/kasan/generic.c:505 ____kasan_kmalloc mm/kasan/common.c:380 [inline] __kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389 kasan_kmalloc include/linux/kasan.h:212 [inline] __do_kmalloc_node mm/slab_common.c:938 [inline] __kmalloc+0xb4/0x1e0 mm/slab_common.c:951 kmalloc include/linux/slab.h:568 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_session_create+0x38/0xbd0 net/l2tp/l2tp_core.c:1609 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:771 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 Freed by task 376: kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:53 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516 ____kasan_slab_free+0x132/0x180 mm/kasan/common.c:242 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:250 kasan_slab_free include/linux/kasan.h:178 [inline] slab_free_hook mm/slub.c:1750 [inline] slab_free_freelist_hook+0xc2/0x190 mm/slub.c:1776 slab_free mm/slub.c:3712 [inline] __kmem_cache_free+0xb7/0x1b0 mm/slub.c:3728 kfree+0x6f/0xf0 mm/slab_common.c:990 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline] l2tp_session_put+0xaf/0x1a0 net/l2tp/l2tp_core.c:193 l2tp_session_delete+0x3df/0x4d0 net/l2tp/l2tp_core.c:1582 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:438 __sock_release net/socket.c:652 [inline] sock_close+0xc9/0x220 net/socket.c:1389 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x9b/0xb0 kernel/entry/common.c:177 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 The buggy address belongs to the object at ffff8881222e3400 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 336 bytes inside of 512-byte region [ffff8881222e3400, ffff8881222e3600) The buggy address belongs to the physical page: page:ffffea000488b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1222e0 head:ffffea000488b800 order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=1) raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 376, tgid 376 (syz.2.17), ts 26531642616, free_ts 25935672937 set_page_owner include/linux/page_owner.h:33 [inline] post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2672 prep_new_page+0x1c/0x110 mm/page_alloc.c:2679 get_page_from_freelist+0x2ca9/0x2d20 mm/page_alloc.c:4586 __alloc_pages+0x1fa/0x610 mm/page_alloc.c:5930 alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1 allocate_slab mm/slub.c:1967 [inline] new_slab+0x98/0x3e0 mm/slub.c:2020 ___slab_alloc+0x70f/0xb70 mm/slub.c:3177 __slab_alloc+0x5e/0xa0 mm/slub.c:3263 slab_alloc_node mm/slub.c:3348 [inline] __kmem_cache_alloc_node+0x204/0x2d0 mm/slub.c:3423 kmalloc_trace+0x29/0xb0 mm/slab_common.c:1028 kmalloc include/linux/slab.h:563 [inline] kzalloc include/linux/slab.h:699 [inline] l2tp_tunnel_create+0x97/0x430 net/l2tp/l2tp_core.c:1421 pppol2tp_tunnel_get net/l2tp/l2tp_ppp.c:670 [inline] pppol2tp_connect+0x7ef/0x1640 net/l2tp/l2tp_ppp.c:727 __sys_connect_file net/socket.c:2000 [inline] __sys_connect+0x3da/0x460 net/socket.c:2017 __do_sys_connect net/socket.c:2027 [inline] __se_sys_connect net/socket.c:2024 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2024 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 page last free stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] free_pages_prepare mm/page_alloc.c:1580 [inline] free_pcp_prepare mm/page_alloc.c:1654 [inline] free_unref_page_prepare+0x80c/0x820 mm/page_alloc.c:3621 free_unref_page+0x93/0x530 mm/page_alloc.c:3719 free_the_page mm/page_alloc.c:863 [inline] __free_pages+0x67/0x100 mm/page_alloc.c:6020 __vunmap+0xa3c/0xc00 mm/vmalloc.c:2739 __vfree mm/vmalloc.c:2788 [inline] vfree+0x61/0x90 mm/vmalloc.c:2819 kcov_put kernel/kcov.c:437 [inline] kcov_close+0x2b/0x50 kernel/kcov.c:533 __fput+0x1fd/0x8f0 fs/file_table.c:320 ____fput+0x15/0x20 fs/file_table.c:348 task_work_run+0x1e1/0x250 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0xaf2/0x2850 kernel/exit.c:887 do_group_exit+0x21b/0x2e0 kernel/exit.c:1030 get_signal+0x1382/0x14f0 kernel/signal.c:2891 arch_do_signal_or_restart+0xd1/0x11c0 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x7a/0xb0 kernel/entry/common.c:174 exit_to_user_mode_prepare+0x87/0xd0 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x1a/0x30 kernel/entry/common.c:303 Memory state around the buggy address: ffff8881222e3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881222e3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8881222e3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881222e3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881222e3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================