Extracting prog: 3m38.377481961s
Minimizing prog: 30m45.230944816s
Simplifying prog options: 0s
Extracting C: 37.481743405s
Simplifying C: 2m44.741433417s


extracting reproducer from 66 programs
testing a last program of every proc
single: executing 16 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$msdos-syz_open_dev$usbfs-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-fsconfig$FSCONFIG_SET_FLAG-ioctl$USBDEVFS_GET_SPEED-mkdirat-syz_usb_connect-socket$inet6-sendto$inet6-rename
detailed listing:
executing program 0:
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0xee00, @ANYRES8, @ANYRES8=0x0, @ANYRES8=0x0], 0xf6, 0x204, &(0x7f0000000300)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301)
r1 = fsopen(&(0x7f00000000c0)='pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0xb)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="13010000bd460e10490d1070900e0106030109021200010300000009040000001003", @ANYBLOB="9213a4c8"], 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0xffffffd1, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x14, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00')

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac2
detailed listing:
executing program 0:
syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x80, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x1, 0x15, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0xfc, 0x2, 0x3, 0x7, 0xf7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf1, 0x1, 0x3, 0x3, 0x7e2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xff, 0x2f, {0x8, 0x25, 0x1, 0x80, 0x0, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x40, 0x80, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x46})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-sendmmsg$inet-io_setup-openat$ttyS3-ioctl$TIOCSSOFTCAR-io_submit-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_connect-sendmsg$nl_route-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ncm-openat$vhost_vsock-openat$vhost_vsock-ioctl$VHOST_VSOCK_SET_GUEST_CID-ioctl$VHOST_VSOCK_SET_GUEST_CID-syz_usb_control_io$uac1-syz_usb_control_io$lan78xx-syz_usb_control_io
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast, 0x401}, {@multicast1}]}, @rr={0x7, 0xf, 0xc, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x38}}], 0x1, 0x4000080)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
io_submit(r1, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r2, 0x0, 0x0, 0x6}])
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008ef17ee60000000000001090224000100009008090400fedf0300020009218100030122280009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42180}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x259, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20054000}, 0x4)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x40, 0x5, 0x56, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x0})
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="241704"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2008280000002861c263188526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a010000000000000044"], 0x0, 0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$inet_udp-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-setsockopt$inet_int-socket$inet_udp-setsockopt$ARPT_SO_SET_REPLACE-socket$key-socket$inet_udp-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-io_setup-timer_create-fcntl$lock-mprotect-timer_create-timer_settime-io_setup-io_getevents-io_submit-io_destroy-io_setup-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-bpf$PROG_LOAD-mprotect-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-sendmsg$key-sendmsg$nl_route_sched-syz_usb_connect$printer-syz_usb_control_io$printer-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, 0x0)
setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
io_setup(0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_create(0x1, 0x0, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r6=>0x0)
io_getevents(r6, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0)
io_submit(r6, 0x0, 0x0)
io_destroy(r6)
io_setup(0x10000, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
sendmsg$key(r3, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRES32=0x0, @ANYRESDEC=r3], 0x80}, 0x1, 0x7}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r7 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff010009050102"], 0x0)
syz_usb_control_io$printer(r7, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_SREGS-ioctl$KVM_RUN-ioctl$KVM_RUN-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0xd}, {0xeeee0000, 0x2000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_usb_connect(0x0, 0x138, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001dc8b5008b82225643208010203010902260101060350080904f00108020a0009052406000105240000000d240f0108000000030009000506241a0900180724140100010008241c010007e7b90905070410008081e907250100ff0500090501024000fc020a0725010c0c09000f318e4c6fb31e14de5b0041d4eae30905070000040440d550c1a91f311dfbe5fe54bca013d11f608c9743f0c6840ce7f27b567e32639bde1a9d3750bc9237307ad27bd507bbea64fa0905030c20000401704122503bd915fb1814d771ebdb8621480c0c295c215efb4f533f79f9d19d8f2ff6dfbde274ff1507c37cff52e901aeaed28d1f540c92e001ead896df4709662e3e0725010000240b09050f20800408030a072501080783020725010c62060009050e0240007f03080905011010000600e809050902ff"], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff, 0x8}, 0x21, &(0x7f0000000e80)={0x5, 0xf, 0x21, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x8, 0xf, 0x6}]}, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_connect(0x0, 0x138, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff, 0x8}, 0x21, &(0x7f0000000e80)={0x5, 0xf, 0x21, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x8, 0xf, 0x6}]}, 0x1, [{0x0, 0x0}]})

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_SREGS-ioctl$KVM_RUN-ioctl$KVM_RUN-syz_usb_connect
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0xd}, {0xeeee0000, 0x2000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_usb_connect(0x0, 0x138, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff, 0x8}, 0x21, &(0x7f0000000e80)={0x5, 0xf, 0x21, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x8, 0xf, 0x6}]}, 0x1, [{0x0, 0x0}]}) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_SREGS-ioctl$KVM_RUN-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0xd}, {0xeeee0000, 0x2000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_SREGS-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0xd}, {0xeeee0000, 0x2000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_SET_SREGS
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3, 0xd}, {0xeeee0000, 0x2000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_SET_VCPU_EVENTS
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0xcc, 0x9, 0x8, '\x00', 0x100000000000000})

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm-getdents64
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
getdents64(r5, &(0x7f0000001180)=""/143, 0x8f)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind-openat$kvm
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro-mount$bind
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect-openat$cgroup_ro
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect-mprotect
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos-mprotect
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT-syz_mount_image$msdos
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$eJzs3ctqJFUYAOC/OtWdjgrphSsRLNCFqzAzvkCCRBjMSqmFbnRwMiDpZiANDV6wMyv3givfwZ0P4AMI4hu4cDnizlmIJV2XvqWTSUs6I+P3LVJ/16n/1DknJxcS6u+PXx2c3H84fPDoy1+j202itR/78SSJXrSicVZ+TJIAAJ4LT4oi/igqT7u2s/AqbW1yXADA5lz55//WXNzZ+LAAgA16/4MP3z04Ojp8L8u6EYOvR3kS1bFqP3gQn0Y/juNW7MZfEcVU2Vy8dPfoMNIsa/4YMNqJPGLw0U/164PHEWX+7diN7mJ+UTS/SGSleGMwHuWTO0+O7XghiTgo6n873IndeDmiaEfdSXV45+7R4Z3sfH7knXjz9e/q8f99HHuxG798Eg+jH/fLLmb5X93OsreLb//8oppBHpGMR/l2ed1MsXUDnw4AAAAAAAAAAAAAAAAAAAAAAP4n9rKp3nz9nKYa4N7ecnuaR/w+aPJn9YH2o6wPVFf4Gc/V17mVZVlTxmeUt6Oq75PGK2mkz2reAAAAAAAAAAAAAAAAAAAA8F8y/Ozzk3v9/vHpQvBjMQl2Lr1mOUjnzjSP9T89a3Vw8n3E+llXCWKrHlo/OXeLpGlao8MfLmjaroK6x7PL+9lZddNoXbSGaT+qwX+z/iK8tu4Erx70ZkNtdtfJvSSmK39Wr+5iVnf1Jpnbdc02PB0ma2zIYsXSbV2Y1bmmRei8+G/Td2JV02TG7eliLmZ1lxazPQl+vr6vlCXJ9X3TAQAAAAAAAAAAAAAAAAAAVpo99Bu/nWt89EyGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bvb+/9MgestnloNxnVyeaV1+8fbpcMVte/FWeXx8o5MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgufVPAAAA//+I20v7")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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")

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat-write$UHID_INPUT
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET-syz_mount_image$vfat
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002f00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d6d6163726f6d616e69616e2cb2aa5e37f637b2e25eb83f6e6f6e756d7461696c3d302c636f6465706167653d3836362c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c64656275672c73686f72746e616d653d6c6f7765722c6e6f636173652c756e695f786c6174653d302c756e695f786c61"], 0x7f, 0x2cd, &(0x7f0000001940)="$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")

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET-sendmsg$ETHTOOL_MSG_LINKMODES_SET
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500170d0000adda9e4b9d5987192d523c7a5bf51b1df928bcd9514230922a4fc03aef03a52eddee6753af7e548402d0c10771cebdeb67e664c47bfa7e5b1d33c884b827b21de2a9ca6d724e9da7e93d4df99c57667778ea6203954bfb3eda9a6a95d382f8942b244edee905f513a8b75a72e416e751d23ddd0086ac0dcf774258d1b673589a8ee444521395753869659fade71bf65720eae87e3bcde3764e124587694a1bfc8031c10fa7d202d86aa5f5449aa6e88e17a9d1e6d66beeb8b0c349272f34355ec519df2f1ec99cb416d077e4a4d621d096c9e420752d2cc23b6bb2b05521536f35aa1eeec47ccde95b0a29db5672581952bd3f2d7be979e3469d31605a86a396d3bee7e8045b88664b117bef5e7816f9b1404d603f34e85455d2e88ccb8e13aafb4e5e77724a0a5cab5b7f78bb"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND-sendmsg$ETHTOOL_MSG_LINKMODES_SET
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000002d80)=0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x5f0684d28bc77b35}, 0x1) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-connect$pppl2tp
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80101}}}, 0x3a)

program did not crash
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-socket$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-recvmmsg-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001500)=""/76, 0x4c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/147, 0x93}], 0x4, &(0x7f0000001700)=""/81, 0x51}, 0x8}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/68, 0x44}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}], 0x5, &(0x7f0000001e40)=""/181, 0xb5}, 0x1}, {{&(0x7f0000001f00), 0x80, &(0x7f0000002600)=[{&(0x7f0000001f80)=""/57, 0x39}, {&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/255, 0xff}, {&(0x7f00000021c0)=""/61, 0x3d}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/146, 0x92}, {&(0x7f0000002500)=""/201, 0xc9}], 0x9, &(0x7f00000026c0)=""/159, 0x9f}, 0x8}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/107, 0x6b}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/164, 0xa4}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/228, 0xe4}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x8}], 0x4, 0x40000100, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-connect$inet6-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-connect$inet6-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in rcu_segcblist_enqueue
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001280)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program did not crash
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$pppl2tp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program did not crash
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program did not crash
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-syz_genetlink_get_family_id$ethtool-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-setsockopt$inet6_tcp_TCP_CONGESTION-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='dctcp', 0x5)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
accept(0xffffffffffffffff, 0x0, &(0x7f00000012c0))
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000002d80)=0x9) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000002d80)=0x9)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000002d80)=0x9)

program did not crash
testing program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0)

program crashed: KASAN: use-after-free Write in pppol2tp_release
extracting C reproducer
testing compiled C program (duration=36.080844354s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Write in pppol2tp_release
simplifying C reproducer
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Write in pppol2tp_release
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Write in pppol2tp_release
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Write in pppol2tp_release
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0)

program crashed: KASAN: use-after-free Read in rcu_cblist_dequeue
validation run: crashed=true
testing program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0)

program crashed: KASAN: use-after-free Write in pppol2tp_release
validation run: crashed=true
testing program (duration=36.080844354s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-ioctl$OCFS2_IOC_GROUP_EXTEND
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0)

program crashed: KASAN: use-after-free Write in pppol2tp_release
validation run: crashed=true
reproducing took 39m29.247875152s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline]
BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline]
BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:173 [inline]
BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298
Write of size 8 at addr ffff888111712550 by task syz.2.17/383

CPU: 1 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 __dump_stack+0x21/0x24 lib/dump_stack.c:77
 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:435 [inline]
 kasan_report+0x100/0x140 mm/kasan/report.c:452
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
 atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline]
 atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline]
 __mutex_trylock_fast kernel/locking/mutex.c:173 [inline]
 mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298
 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1286
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7ff2f6d64e59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd13630998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffd13630a80 RCX: 00007ff2f6d64e59
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000005d6d R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b32b20000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff2f6fddfac R14: 00007ff2f6fddfa8 R15: 00007ff2f6fddfa0

Allocated by task 383:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:430 [inline]
 ____kasan_kmalloc mm/kasan/common.c:509 [inline]
 __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518
 kasan_kmalloc include/linux/kasan.h:254 [inline]
 __kmalloc+0x19f/0x330 mm/slub.c:4038
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616
 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772
 __sys_connect_file net/socket.c:1866 [inline]
 __sys_connect+0x3ce/0x450 net/socket.c:1883
 __do_sys_connect net/socket.c:1893 [inline]
 __se_sys_connect net/socket.c:1890 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:1890
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

Freed by task 383:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4a/0x70 mm/kasan/common.c:45
 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370
 kasan_slab_free include/linux/kasan.h:220 [inline]
 slab_free_hook mm/slub.c:1600 [inline]
 slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626
 slab_free mm/slub.c:3208 [inline]
 kfree+0xc0/0x270 mm/slub.c:4196
 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline]
 l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193
 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589
 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1286
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

The buggy address belongs to the object at ffff888111712400
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 336 bytes inside of
 512-byte region [ffff888111712400, ffff888111712600)
The buggy address belongs to the page:
page:ffffea000445c400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111710
head:ffffea000445c400 order:2 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head)
raw: 4000000000010200 ffffea00043ef200 0000000300000003 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 98, ts 3642950178, free_ts 0
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook mm/page_alloc.c:2456 [inline]
 prep_new_page+0x176/0x190 mm/page_alloc.c:2462
 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254
 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1813 [inline]
 new_slab+0x84/0x3f0 mm/slub.c:1874
 new_slab_objects mm/slub.c:2632 [inline]
 ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796
 __slab_alloc+0x63/0xa0 mm/slub.c:2836
 slab_alloc_node mm/slub.c:2918 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 __kmalloc_track_caller+0x1e4/0x310 mm/slub.c:4541
 __kmalloc_reserve net/core/skbuff.c:144 [inline]
 __alloc_skb+0xdc/0x520 net/core/skbuff.c:212
 alloc_skb include/linux/skbuff.h:1126 [inline]
 alloc_skb_with_frags+0xa3/0x560 net/core/skbuff.c:6006
 sock_alloc_send_pskb+0x87f/0x9a0 net/core/sock.c:2393
 unix_dgram_sendmsg+0x6f3/0x18f0 net/unix/af_unix.c:1725
 sock_sendmsg_nosec net/socket.c:652 [inline]
 __sock_sendmsg net/socket.c:664 [inline]
 sock_write_iter+0x2a6/0x3a0 net/socket.c:1018
 call_write_iter include/linux/fs.h:2066 [inline]
 new_sync_write fs/read_write.c:518 [inline]
 vfs_write+0x770/0xd70 fs/read_write.c:605
 ksys_write+0x14a/0x260 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write fs/read_write.c:667 [inline]
 __x64_sys_write+0x7b/0x90 fs/read_write.c:667
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888111712400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888111712480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff888111712500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                 ^
 ffff888111712580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888111712600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline]
BUG: KASAN: use-after-free in atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline]
BUG: KASAN: use-after-free in __mutex_trylock_fast kernel/locking/mutex.c:173 [inline]
BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298
Write of size 8 at addr ffff888111712550 by task syz.2.17/383

CPU: 1 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 __dump_stack+0x21/0x24 lib/dump_stack.c:77
 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:435 [inline]
 kasan_report+0x100/0x140 mm/kasan/report.c:452
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
 atomic64_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:1515 [inline]
 atomic_long_try_cmpxchg_acquire include/asm-generic/atomic-long.h:443 [inline]
 __mutex_trylock_fast kernel/locking/mutex.c:173 [inline]
 mutex_lock+0x85/0xf0 kernel/locking/mutex.c:298
 pppol2tp_release+0x178/0x2b0 net/l2tp/l2tp_ppp.c:442
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1286
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7ff2f6d64e59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd13630998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffd13630a80 RCX: 00007ff2f6d64e59
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000005d6d R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b32b20000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff2f6fddfac R14: 00007ff2f6fddfa8 R15: 00007ff2f6fddfa0

Allocated by task 383:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:430 [inline]
 ____kasan_kmalloc mm/kasan/common.c:509 [inline]
 __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518
 kasan_kmalloc include/linux/kasan.h:254 [inline]
 __kmalloc+0x19f/0x330 mm/slub.c:4038
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616
 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772
 __sys_connect_file net/socket.c:1866 [inline]
 __sys_connect+0x3ce/0x450 net/socket.c:1883
 __do_sys_connect net/socket.c:1893 [inline]
 __se_sys_connect net/socket.c:1890 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:1890
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

Freed by task 383:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4a/0x70 mm/kasan/common.c:45
 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370
 kasan_slab_free include/linux/kasan.h:220 [inline]
 slab_free_hook mm/slub.c:1600 [inline]
 slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626
 slab_free mm/slub.c:3208 [inline]
 kfree+0xc0/0x270 mm/slub.c:4196
 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline]
 l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193
 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589
 pppol2tp_release+0x169/0x2b0 net/l2tp/l2tp_ppp.c:439
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1286
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

The buggy address belongs to the object at ffff888111712400
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 336 bytes inside of
 512-byte region [ffff888111712400, ffff888111712600)
The buggy address belongs to the page:
page:ffffea000445c400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111710
head:ffffea000445c400 order:2 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head)
raw: 4000000000010200 ffffea00043ef200 0000000300000003 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 98, ts 3642950178, free_ts 0
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook mm/page_alloc.c:2456 [inline]
 prep_new_page+0x176/0x190 mm/page_alloc.c:2462
 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254
 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1813 [inline]
 new_slab+0x84/0x3f0 mm/slub.c:1874
 new_slab_objects mm/slub.c:2632 [inline]
 ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796
 __slab_alloc+0x63/0xa0 mm/slub.c:2836
 slab_alloc_node mm/slub.c:2918 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 __kmalloc_track_caller+0x1e4/0x310 mm/slub.c:4541
 __kmalloc_reserve net/core/skbuff.c:144 [inline]
 __alloc_skb+0xdc/0x520 net/core/skbuff.c:212
 alloc_skb include/linux/skbuff.h:1126 [inline]
 alloc_skb_with_frags+0xa3/0x560 net/core/skbuff.c:6006
 sock_alloc_send_pskb+0x87f/0x9a0 net/core/sock.c:2393
 unix_dgram_sendmsg+0x6f3/0x18f0 net/unix/af_unix.c:1725
 sock_sendmsg_nosec net/socket.c:652 [inline]
 __sock_sendmsg net/socket.c:664 [inline]
 sock_write_iter+0x2a6/0x3a0 net/socket.c:1018
 call_write_iter include/linux/fs.h:2066 [inline]
 new_sync_write fs/read_write.c:518 [inline]
 vfs_write+0x770/0xd70 fs/read_write.c:605
 ksys_write+0x14a/0x260 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write fs/read_write.c:667 [inline]
 __x64_sys_write+0x7b/0x90 fs/read_write.c:667
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
page_owner free stack trace missing

Memory state around the buggy address:
 ffff888111712400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888111712480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff888111712500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                 ^
 ffff888111712580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888111712600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================