program: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) dup2(r2, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async) write(r3, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002440)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1d8, 0x1d8, 0xf0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f00000005c0), {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @private=0xa010102, 0x5}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d63703835352c757466382c757466382c646d6f64653d3078303030303030303030303030393063382c63727566742c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c6d61703d6f66662c6d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c6f76657272696465726f636b7065726d2c696f636861727365743d64656661756c742c00553459239cc27347a48417c0f93ac0ba095e7cffc5c4fddc72b0acbb858ade3fa8677c39e605a858f1fc03aa3bb441f12627176b75e5312fd7b76a313eafaed505a653df3f3e4755d83dbfae9108d0698e5c7dd588899b31e82cc76d03aa10466b2c8cf82a352e67b4942d149ea42a7612de672d0824c9e3534784c0dd0e80f86758ea33fe023501c9caf88b760bca5be74b221f9b42d23d812d3628e05751725edf05033ecf2aede9bc0000000000000000000000001932664a95e40c386b4e989f0e60bd9c00bc7d00"/375], 0x12, 0x9ef, &(0x7f0000000e40)="$eJzs3ctvXNd9B/Dv5UOiaUOSbdV1BdsayZVM2yxFUrVUwYtWIkcSXT4KkgIsdGG5FlUIYuvWbgHbKFAZKLqKkQAJskh2RlZZGfAm3gTeJbtklUWAwP+CkZWyYnDvDKkhOeSQMh+y/PkQM3Mfv3vO7859HM7MnTlhf914YrO5d9dNWTq8amxpqbo94Pi1n3+T1Pn2uzT+1aeffVLePr6bA+nOa8Uvkr4ktaQnybNJ79j47MxUh4LuJDeSfJkUSQ6m8bglN1J8Py2HwZcpflrWu6EDWy2ZTpb4Ttvv/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5Gxdj48PBIcSAT09ferDUktXXGxmdniiwtrZ+zvEzDF1Wv38UXHetNivKWvr7lrr6fPXp/9jNJaifzXGPsuapD8vTlo8efOfL60z1dy8tvlM03cnDrxb7/4Ud33l5cXHhvVxJ5+F2pT0/MzUxMXbxSr03MzdQunDs3fObq5bna5YnJ+tz1ufn6VG1stn5xfma2NjD2cm3kwoWztfrQ9Zlr01fGhybryxPP/83o8PC52htD/1S/ODs3M33mjaG5sasTk5MT01eqmHJ2GXO+3BH/cWK+Nl+/OFWr3bq9uHB2TU7dWbP/lkEjndakDBrtFDQ6PDo6MjI6OvJxs/fslQnnXrvw2vnh4Z7hNbIuYpd2Wh4uj228mXf+JA4PqKvR/ieTmch0ruXN1Nr+jWU8s5nJ1Abzm5bb/1Nn6pvW29r+N1v5npbZx8q7k3mhOdq3Qfu/QS579/d+PsxHuZO3s5jFLOS9fc9ob/+upJ7pTGQuM5nIVC5WU2rNKbVcyLmcy3DeytUcz1xquZyJTKaeuVzPXOZTr/aoscymnouZz0xmU8tAxvJyahnJhVzI2dRSz1CuZybXMp0rGc/FqpRbuV0972c3yXElaGQrQaObBK1rzLfd/tfX/nPCd87On8ThAS012/8DnUMHxvYiIQAAAGDH/dWvc+joU7/6Q1Lk+ep9+csTk/Xh/U4LAAAA2EHV5XrPlQ+95dDzKbz+BwAAgEdNUX3HrkjSn+ONoeVvQnkTAAAAAB4R1ef/L6Q4fn+C1/8AAADwiOn8G/sdI4rB5Z//rd1sPN5sRjTGiv7LE5P1obGZyddHcrr6lYHqmwbrSutOit7q6wev5EQj6kR/47H/follnX1l1MjQ6yN5JSebKzLwYvnw4kCbyNFG5EuNyJdaI7uzKvJsGQkAj7qTm7THW23/X8lgI2LwWNXk9xxr0wYPa1kB4GGx0sfOn5pdmrVp/5sRL2zU/v/tJq//y4incut445KCobyTd7OYmxlM84qD4+1KXe6NoHEZwmCHdwP6m5cs/PZ8VwbXvR/Qt7KurbELGc1g23cEWsotlnM424jr3p1tAAB77eSm7fDW2v/BDq//+11SCAAPlZUe7HdxYL/XEQBYTSsNAAAAAAAAAAAAAAAAAAAAAAAAAAAAO29LP+D/m9PJ4uJCsgedBawM9G0nw80HurJHOe/7QHeS/ar977Ptpcpt/LA8dQZWD+zziQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA9USTd7aZ3JQeTDCc5s/dZ7Z67+53ATqk92GLFvdzLBzm00+kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzXNX//vyuNx8cbk9LTlZxKciPJP+93jjvp3n4nsG/+rbpv+f3/rqQ3S0V6Gps9Re/Y+OzMVLn5i4Pl/K8+/eyT8ta57PW9KpQFlDWs6lyiWUPLlN7VSz1ZLdU/vvD+nf969z9q45eqHfPS/OXJ8akrs/9wP/CZ4vNGFwit3SAs5/s/p375g5bJB5qVf16uaXtr671c1Tu+vt6/bLf0BvVuwe3FhdGypvn6m/P//e+3P2iZ9VROJC8OJAOra/rX8rZBTSfWPp+rFV8X/18cyo9zo9r+5bNRLBXlJjpcrf9jt24vLgy98+7izZWc/ndVTkdyPMnNpG/rOR2vzidtVXtdV29Z63AVVN4d7VDeplpKHNngeX2y2mX6t7UOtY3XodLheW9mdLZtRj/8z6dzettb+nSHGtsqvi5+X1zN7/J/Lf1/dJXb/1TaHp1tiqgiW/aU1nmrDq+uRmS15qOtM95aW+aGRyW74Hv5l/zdyvbvajn/N7fV3pyPWmpsf1wk2z8ufnZ4XYtyX9UiHV3TIjXPPhst08zzaCNqgzz/Iq8mPce2dUZ5tcMZZbeO/58UA/lj7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePgVSXe76V3JqSRHkhwux2vJ0tqYuw9QX1d/8SBp7pgHyfnbp9hwRYt7uZcPcmivMwIAAAAAAABgd1wa/+rTzz4pb9Xn8d35667mnFrSk+RI8aPesfHZmakOBfUmN5Y/0u/bXg43yrsn7o9/WY4922Gh/b18AAC+1f4cAAD//7IYb70=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xc, 0x8fd344c1}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60040c1}, 0x4) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60040c1}, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmsg$inet6(r5, &(0x7f0000000a80)={&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @mcast2, 0x2}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000180)="206cd1e2fa9d0ad6861c01409bfd921312f5934ef7e5995e1ee7f885b0f7006cd0d57ca8342137cbe94c3b7466d8773c4e2dc91e2bdc96cf22ce983649df81f2ab947599020a25f4701559f5", 0x4c}, {&(0x7f0000000200)="2e1b9404ac791599dfc63d15f99b096f128b4d2e97386a9da6794146402f2b25aec153fadbb2b2784c7aaa40fb08ffffe010a1dd75ffab800d519a53135da6ad4877d3b30f543fc5475cb6209051b19200078931dd0c1c41971a1d3883707b8b473caa5081d3ab30a21774ac6a1f543c84ab4f599028616093483896d35811d7de161214af7e167537266b7de62305e557c24dc9ac860c5683c686eae72a91cea803dfb96b59d62ebea83c7de715d53ba92a69d1d65c5a95f841a08b890ea94d5ec1b905b66b15cb89b0d3168aca737a3f5d8abf08c38b9711f2c05e33cfdb137fa605be43ed", 0xe6}, {&(0x7f0000000380)="5ba66f5ae2a4dd5bc5bc30f074d008925a8447ebd18eb6487a63092e2ccf536eb252261d9be93f19180e00db5fc2bd60b5306621917e794a704394f32b4ca0eb1fedf3117e6b59bcd00670c2432194aab407105e02373deffefb3f079931ce24657f08d47cb72334d378b9cdfd941e443d98fd90fed099434721187236a48a8825eb0e1d01c25036509469e73a14f2dd286658af46279f960405e913d89d9f976302", 0xa2}, {&(0x7f0000000440)="67e433afd3839b70399cd2edc55e43d4bb5ff290bdd84160a78ac1d55471ea9b199a0ed92f1171301fb0fbe84156411f8e82d61aa44fc8a21fb0167219d366c0f951fdcad73388281d61f6a6af610e331197d3b18270ed31e458828c520b9cb86a1e494834aef247e90c2d90bf3172df2c655a198549d54f78f65f0c341fb2764bdbd6b54c4503cc36a6d98ab493c11a2dfd520eab5df7c1f921db47aeb5171891ea4a1fedebc815621889375a615aeaf5a7a7ea9a259c9fdaf0b7784c3d5a3e832ae98373954212", 0xc8}, {&(0x7f0000000540)="3abf753b5962e63ec8d82433e29773e582539199996de2259176b851dcd44a04ca6c2b3d48267012894a701b99b3606d88696261af4608af37e17be8bf59aa", 0x3f}, {&(0x7f00000006c0)="162e9376b05b0663e3d8db3581f8880e55b0f567bc667cc29ae45da13fa5df0ed8e2662761d7b829b1e41c61c2c86f94ab75965b122d267335782903b3f94e08ed2b7797d76810df87b19e9d5487612395841418695a207b2ff6fa88671f08763a362e87132128029f08c975a7b46a0da647471bd690c3eb5ba52fe470380097bd2e5cc3a99d8fba02b11998c057ada13e5e35946d5adccdb32083580a139ca6e184f32c10914fde31d9766f057430a6b544fec8516d63", 0xb7}, {&(0x7f0000000780)="6ca86d4b3bc0380ee8f4cca44c8da2c212652cd89261dc1025997bfe4dc8b384f69ff82915e975221712b85368256ae39d7dbf6af2bd7da9a8a2e34119fa0db33c2e5d157498c86498ec3506ab77e914198e7e10713a8b92e6b6aa84d3c030e16cfa79bf90869e54808eaa03879534d089e82a6490ee2cd9a4b65db16b2110ebf80f3eeb2ec844f29d35f116330f870d15c99a17fc1ff5b6935b", 0x9a}, {&(0x7f0000000840)="937bf7eb3a6f424dc0666a3f730afa17f9bc8f9d844a3c747960d54fc895ec513973d027797090f5c04fc6d5c9f2f03512b3fec5e0fbe252d3fe7d28", 0x3c}], 0x8, &(0x7f0000000ac0)=[@rthdrdstopts={{0x1150, 0x29, 0x37, {0x5c, 0x226, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0xfe, "d078c2829d95346118957064226bf2adefda126307797f5b73af5ac3cb81f192916ff8b83fb78d2522f73d22eb8aaaabc0757d177b40d7ca018db4025cd84054ee7f45b606f6c55318689f5049cedc3e97ac8e2de5d662b2f206e7c2d6b97a41b9fbd240cdb8cfe676e4f5ccf5735cf8f41279e0e0fc12211f38c263b43b7a40e610a4d3edf5d0bc2b750014c9e7fbdc3daa9e597dc754902af338a5e528f8aef74666bfbbccce124e892c43b7d1ea206c562d6c32f850a3715bd1fbda86bdb1dd1a31dd2a294a4c5cc6fcb19f4e15021e9031e941e024a136e521e8f718646a8add0178d949eb3ffe75140015d153fc74e2c82302f08a9c93c48ad92688"}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x1000, "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"}, @hao={0xc9, 0x10, @remote}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}], 0x1190}, 0x24000084) [ 109.874125][ T4639] Bluetooth: hci0: command tx timeout [ 110.109450][ T5318] vhci_hcd vhci_hcd.0: remove, state 4 [ 110.127334][ T5318] usb usb7: USB disconnect, device number 1 [ 110.208520][ T5319] loop0: detected capacity change from 0 to 1764 [ 110.363175][ T1051] vhci_hcd vhci_hcd.0: stop threads [ 110.367980][ T5318] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 110.383979][ T1051] vhci_hcd vhci_hcd.0: release socket [ 110.394934][ T1051] vhci_hcd vhci_hcd.0: disconnect device [ 110.409447][ T1051] vhci_hcd vhci_hcd.0: stop threads [ 110.422704][ T1051] vhci_hcd vhci_hcd.0: release socket [ 110.430849][ T1051] vhci_hcd vhci_hcd.0: disconnect device [ 110.445656][ T1051] vhci_hcd vhci_hcd.0: stop threads [ 110.452498][ T1051] vhci_hcd vhci_hcd.0: release socket [ 110.456447][ T5318] vhci_hcd vhci_hcd.0: remove, state 4 [ 110.460566][ T1051] ================================================================== [ 110.465440][ T1051] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x452/0x460 [ 110.469704][ T1051] Read of size 4 at addr ffff8880348bc8f0 by task kworker/u4:8/1051 [ 110.474231][ T1051] [ 110.476499][ T1051] CPU: 0 UID: 0 PID: 1051 Comm: kworker/u4:8 Not tainted syzkaller #0 PREEMPT(full) [ 110.476536][ T1051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.476552][ T1051] Workqueue: usbip_event event_handler [ 110.476600][ T1051] Call Trace: [ 110.476613][ T1051] [ 110.476624][ T1051] dump_stack_lvl+0xe8/0x150 [ 110.476657][ T1051] print_address_description+0x55/0x1e0 [ 110.476685][ T1051] ? vhci_cleanup_unlink_list+0x452/0x460 [ 110.476708][ T1051] print_report+0x58/0x70 [ 110.476731][ T1051] kasan_report+0x117/0x150 [ 110.476758][ T1051] ? vhci_cleanup_unlink_list+0x452/0x460 [ 110.476783][ T1051] vhci_cleanup_unlink_list+0x452/0x460 [ 110.476805][ T1051] ? kasan_quarantine_put+0xbb/0x1f0 [ 110.476830][ T1051] vhci_shutdown_connection+0x2af/0x650 [ 110.476879][ T1051] event_handler+0x2a4/0x4b0 [ 110.476911][ T1051] ? process_scheduled_works+0xa20/0x14e0 [ 110.476935][ T1051] process_scheduled_works+0xa8e/0x14e0 [ 110.476967][ T1051] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.476992][ T1051] ? assign_work+0x3cf/0x5d0 [ 110.477014][ T1051] worker_thread+0xa47/0xfb0 [ 110.477042][ T1051] ? __kthread_parkme+0x71/0x1f0 [ 110.477071][ T1051] kthread+0x388/0x470 [ 110.477099][ T1051] ? __pfx_worker_thread+0x10/0x10 [ 110.477120][ T1051] ? __pfx_kthread+0x10/0x10 [ 110.477147][ T1051] ret_from_fork+0x514/0xb70 [ 110.477175][ T1051] ? __pfx_ret_from_fork+0x10/0x10 [ 110.477203][ T1051] ? __switch_to+0xc89/0x1420 [ 110.477227][ T1051] ? __pfx_kthread+0x10/0x10 [ 110.477253][ T1051] ret_from_fork_asm+0x1a/0x30 [ 110.477292][ T1051] [ 110.477300][ T1051] [ 110.562591][ T1051] Allocated by task 1: [ 110.565380][ T1051] kasan_save_track+0x3e/0x80 [ 110.568858][ T1051] __kasan_kmalloc+0x93/0xb0 [ 110.571288][ T1051] __kmalloc_noprof+0x375/0x720 [ 110.573725][ T1051] __usb_create_hcd+0x67/0x900 [ 110.575921][ T1051] vhci_hcd_probe+0x1e6/0x3e0 [ 110.578110][ T1051] platform_probe+0xf9/0x190 [ 110.580856][ T1051] really_probe+0x254/0xae0 [ 110.584033][ T1051] __driver_probe_device+0x1e8/0x360 [ 110.587105][ T1051] driver_probe_device+0x4f/0x240 [ 110.589627][ T1051] __device_attach_driver+0x270/0x410 [ 110.592731][ T1051] bus_for_each_drv+0x258/0x2f0 [ 110.595925][ T1051] __device_attach+0x2c4/0x450 [ 110.598786][ T1051] device_initial_probe+0xa1/0xd0 [ 110.601313][ T1051] bus_probe_device+0x12a/0x220 [ 110.603759][ T1051] device_add+0x7d7/0xb80 [ 110.606674][ T1051] platform_device_add+0x4bd/0x860 [ 110.610008][ T1051] platform_device_register_full+0x62d/0x710 [ 110.613045][ T1051] vhci_hcd_init+0x227/0x360 [ 110.615345][ T1051] do_one_initcall+0x250/0x870 [ 110.618108][ T1051] do_initcall_level+0x10a/0x1a0 [ 110.621401][ T1051] do_initcalls+0x59/0xa0 [ 110.624202][ T1051] kernel_init_freeable+0x29d/0x3e0 [ 110.626664][ T1051] kernel_init+0x1d/0x1d0 [ 110.628754][ T1051] ret_from_fork+0x514/0xb70 [ 110.631534][ T1051] ret_from_fork_asm+0x1a/0x30 [ 110.634660][ T1051] [ 110.635939][ T1051] Freed by task 5318: [ 110.638112][ T1051] kasan_save_track+0x3e/0x80 [ 110.640642][ T1051] kasan_save_free_info+0x40/0x50 [ 110.643101][ T1051] __kasan_slab_free+0x5c/0x80 [ 110.645762][ T1051] kfree+0x1c5/0x640 [ 110.648115][ T1051] vhci_hcd_remove+0x9e/0x110 [ 110.650916][ T1051] device_release_driver_internal+0x48b/0x880 [ 110.654233][ T1051] unbind_store+0x1a1/0x1d0 [ 110.656520][ T1051] kernfs_fop_write_iter+0x3a4/0x540 [ 110.659108][ T1051] vfs_write+0x612/0xba0 [ 110.661332][ T1051] ksys_write+0x150/0x270 [ 110.664023][ T1051] do_syscall_64+0x174/0x580 [ 110.667123][ T1051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.670222][ T1051] [ 110.671517][ T1051] Last potentially related work creation: [ 110.674514][ T1051] kasan_save_stack+0x3e/0x60 [ 110.677494][ T1051] kasan_record_aux_stack+0xbd/0xd0 [ 110.680803][ T1051] insert_work+0x3d/0x330 [ 110.683198][ T1051] __queue_work+0xcd8/0x10a0 [ 110.685560][ T1051] queue_work_on+0x106/0x1d0 [ 110.688137][ T1051] unlink1+0x344/0x3e0 [ 110.690789][ T1051] usb_hcd_unlink_urb+0xe6/0x1e0 [ 110.694209][ T1051] usb_kill_urb+0x10b/0x2f0 [ 110.696555][ T1051] hub_quiesce+0x211/0x330 [ 110.698688][ T1051] hub_suspend+0x904/0xad0 [ 110.701120][ T1051] usb_suspend_both+0x285/0x1040 [ 110.704739][ T1051] usb_runtime_suspend+0x58/0x110 [ 110.708138][ T1051] __rpm_callback+0x2c7/0x950 [ 110.710464][ T1051] rpm_suspend+0x8a0/0x17b0 [ 110.712463][ T1051] __pm_runtime_suspend+0x12f/0x1a0 [ 110.715139][ T1051] usb_new_device+0xaee/0x1690 [ 110.717932][ T1051] register_root_hub+0x250/0x5c0 [ 110.721043][ T1051] usb_add_hcd+0xac7/0xf80 [ 110.724339][ T1051] vhci_hcd_probe+0x1fa/0x3e0 [ 110.726875][ T1051] platform_probe+0xf9/0x190 [ 110.729426][ T1051] really_probe+0x254/0xae0 [ 110.732138][ T1051] __driver_probe_device+0x1e8/0x360 [ 110.735250][ T1051] driver_probe_device+0x4f/0x240 [ 110.737779][ T1051] __device_attach_driver+0x270/0x410 [ 110.740693][ T1051] bus_for_each_drv+0x258/0x2f0 [ 110.743616][ T1051] __device_attach+0x2c4/0x450 [ 110.746532][ T1051] device_initial_probe+0xa1/0xd0 [ 110.749346][ T1051] bus_probe_device+0x12a/0x220 [ 110.752079][ T1051] device_add+0x7d7/0xb80 [ 110.754593][ T1051] platform_device_add+0x4bd/0x860 [ 110.757669][ T1051] platform_device_register_full+0x62d/0x710 [ 110.760794][ T1051] vhci_hcd_init+0x227/0x360 [ 110.763036][ T1051] do_one_initcall+0x250/0x870 [ 110.765781][ T1051] do_initcall_level+0x10a/0x1a0 [ 110.768860][ T1051] do_initcalls+0x59/0xa0 [ 110.771811][ T1051] kernel_init_freeable+0x29d/0x3e0 [ 110.774483][ T1051] kernel_init+0x1d/0x1d0 [ 110.776597][ T1051] ret_from_fork+0x514/0xb70 [ 110.779227][ T1051] ret_from_fork_asm+0x1a/0x30 [ 110.782260][ T1051] [ 110.783541][ T1051] Second to last potentially related work creation: [ 110.786750][ T1051] kasan_save_stack+0x3e/0x60 [ 110.788586][ T1051] kasan_record_aux_stack+0xbd/0xd0 [ 110.791249][ T1051] insert_work+0x3d/0x330 [ 110.793536][ T1051] __queue_work+0xcd8/0x10a0 [ 110.796053][ T1051] queue_work_on+0x106/0x1d0 [ 110.798635][ T1051] usb_hcd_submit_urb+0xa3b/0x1b60 [ 110.801324][ T1051] usb_start_wait_urb+0x13f/0x5b0 [ 110.803980][ T1051] usb_control_msg+0x234/0x3e0 [ 110.807194][ T1051] hub_suspend+0x891/0xad0 [ 110.809894][ T1051] usb_suspend_both+0x285/0x1040 [ 110.812506][ T1051] usb_runtime_suspend+0x58/0x110 [ 110.814870][ T1051] __rpm_callback+0x2c7/0x950 [ 110.817537][ T1051] rpm_suspend+0x8a0/0x17b0 [ 110.820348][ T1051] __pm_runtime_suspend+0x12f/0x1a0 [ 110.823573][ T1051] usb_new_device+0xaee/0x1690 [ 110.825921][ T1051] register_root_hub+0x250/0x5c0 [ 110.828471][ T1051] usb_add_hcd+0xac7/0xf80 [ 110.830876][ T1051] vhci_hcd_probe+0x1fa/0x3e0 [ 110.833783][ T1051] platform_probe+0xf9/0x190 [ 110.836486][ T1051] really_probe+0x254/0xae0 [ 110.839046][ T1051] __driver_probe_device+0x1e8/0x360 [ 110.841666][ T1051] driver_probe_device+0x4f/0x240 [ 110.844560][ T1051] __device_attach_driver+0x270/0x410 [ 110.848151][ T1051] bus_for_each_drv+0x258/0x2f0 [ 110.851256][ T1051] __device_attach+0x2c4/0x450 [ 110.853615][ T1051] device_initial_probe+0xa1/0xd0 [ 110.856899][ T1051] bus_probe_device+0x12a/0x220 [ 110.860308][ T1051] device_add+0x7d7/0xb80 [ 110.862930][ T1051] platform_device_add+0x4bd/0x860 [ 110.865578][ T1051] platform_device_register_full+0x62d/0x710 [ 110.868769][ T1051] vhci_hcd_init+0x227/0x360 [ 110.871594][ T1051] do_one_initcall+0x250/0x870 [ 110.874601][ T1051] do_initcall_level+0x10a/0x1a0 [ 110.877309][ T1051] do_initcalls+0x59/0xa0 [ 110.879652][ T1051] kernel_init_freeable+0x29d/0x3e0 [ 110.882619][ T1051] kernel_init+0x1d/0x1d0 [ 110.885419][ T1051] ret_from_fork+0x514/0xb70 [ 110.887927][ T1051] ret_from_fork_asm+0x1a/0x30 [ 110.890493][ T1051] [ 110.891675][ T1051] The buggy address belongs to the object at ffff8880348bc000 [ 110.891675][ T1051] which belongs to the cache kmalloc-8k of size 8192 [ 110.899847][ T1051] The buggy address is located 2288 bytes inside of [ 110.899847][ T1051] freed 8192-byte region [ffff8880348bc000, ffff8880348be000) [ 110.906543][ T1051] [ 110.907877][ T1051] The buggy address belongs to the physical page: [ 110.912433][ T1051] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x348b8 [ 110.917155][ T1051] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.921597][ T1051] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 110.926789][ T1051] page_type: f5(slab) [ 110.929068][ T1051] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 110.933305][ T1051] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 110.938498][ T1051] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 110.943784][ T1051] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 110.948795][ T1051] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 110.954989][ T1051] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 110.959541][ T1051] page dumped because: kasan: bad access detected [ 110.962366][ T1051] page_owner tracks the page as allocated [ 110.965607][ T1051] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20057701492, free_ts 20054787177 [ 110.976196][ T1051] post_alloc_hook+0x1f9/0x250 [ 110.979398][ T1051] get_page_from_freelist+0x21fa/0x2270 [ 110.982879][ T1051] __alloc_frozen_pages_noprof+0x18d/0x380 [ 110.986009][ T1051] allocate_slab+0x79/0x5e0 [ 110.988418][ T1051] refill_objects+0x2d5/0x350 [ 110.991476][ T1051] __pcs_replace_empty_main+0x2bf/0x6b0 [ 110.994718][ T1051] __kmalloc_cache_noprof+0x3a7/0x660 [ 110.997539][ T1051] dummy_hcd_init+0x3e2/0xd00 [ 110.999918][ T1051] do_one_initcall+0x250/0x870 [ 111.003282][ T1051] do_initcall_level+0x10a/0x1a0 [ 111.006383][ T1051] do_initcalls+0x59/0xa0 [ 111.008735][ T1051] kernel_init_freeable+0x29d/0x3e0 [ 111.011864][ T1051] kernel_init+0x1d/0x1d0 [ 111.014868][ T1051] ret_from_fork+0x514/0xb70 [ 111.017591][ T1051] ret_from_fork_asm+0x1a/0x30 [ 111.020121][ T1051] page last free pid 1370 tgid 1370 stack trace: [ 111.024052][ T1051] free_pages_prepare+0x960/0xa60 [ 111.027309][ T1051] __free_contig_range_common+0x174/0x340 [ 111.030592][ T1051] free_pages_bulk+0x48/0x120 [ 111.033342][ T1051] vfree+0x224/0x4a0 [ 111.035882][ T1051] delayed_vfree_work+0x55/0x80 [ 111.038945][ T1051] process_scheduled_works+0xa8e/0x14e0 [ 111.042082][ T1051] worker_thread+0xa47/0xfb0 [ 111.044972][ T1051] kthread+0x388/0x470 [ 111.047402][ T1051] ret_from_fork+0x514/0xb70 [ 111.049877][ T1051] ret_from_fork_asm+0x1a/0x30 [ 111.052808][ T1051] [ 111.054419][ T1051] Memory state around the buggy address: [ 111.057667][ T1051] ffff8880348bc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.061879][ T1051] ffff8880348bc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.067119][ T1051] >ffff8880348bc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.071533][ T1051] ^ [ 111.075675][ T1051] ffff8880348bc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.080859][ T1051] ffff8880348bc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.084444][ T1051] ================================================================== [ 111.092157][ T5318] usb usb6: USB disconnect, device number 1 [ 111.139744][ T5318] vhci_hcd vhci_hcd.0: USB bus 6 deregistered