last executing test programs:

4.301723851s ago: executing program 0 (id=1):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x48}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00'})
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0)

4.287323751s ago: executing program 1 (id=2):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x2000000}}, @nested_load_code={0x12e, 0x1f, {0x0, "ba00800000ecf4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x9f})
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0x44706, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0x44706, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.185699264s ago: executing program 3 (id=4):
mkdir(&(0x7f0000000040)='./file2\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1ff)
mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='befs\x00', 0x0, 0x0)

3.908106351s ago: executing program 3 (id=6):
syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000401e0903000000010203010902270001010080fa0904000003ff000000070581034000010705020240000007058302400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x2)

3.814677243s ago: executing program 0 (id=7):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022d000100000000090400000903000000092100000001222200090581030800000000090502030800000000"], 0x0)
syz_usb_ep_read(r1, 0x81, 0x1f, &(0x7f0000000080)=""/31)
syz_usb_ep_write(r1, 0x2, 0x24, &(0x7f00000000c0)="000005021f00000053595a20202020204449534b202020202020202020202020312e3020")
syz_usb_ep_write(r1, 0x2, 0xd, &(0x7f0000000100)="55534253010000000000000000")

3.705424246s ago: executing program 1 (id=8):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_dev$video(&(0x7f0000000010), 0x1, 0x2)
r2 = syz_open_dev$video(&(0x7f0000000020), 0x2, 0x2)
r3 = syz_open_dev$video(&(0x7f0000000030), 0x3, 0x2)
r4 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x2)
r5 = syz_open_dev$video(&(0x7f0000000050), 0x5, 0x2)
r6 = syz_open_dev$video(&(0x7f0000000060), 0x6, 0x2)
r7 = syz_open_dev$video(&(0x7f0000000070), 0x7, 0x2)
r8 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x2)
r9 = syz_open_dev$video(&(0x7f0000000090), 0x9, 0x2)
read(r0, &(0x7f0000000100), 0x1000)
read(r1, &(0x7f0000000100), 0x1000)
read(r2, &(0x7f0000000100), 0x1000)
read(r3, &(0x7f0000000100), 0x1000)
read(r4, &(0x7f0000000100), 0x1000)
read(r5, &(0x7f0000000100), 0x1000)
read(r6, &(0x7f0000000100), 0x1000)
read(r7, &(0x7f0000000100), 0x1000)
read(r8, &(0x7f0000000100), 0x1000)
read(r9, &(0x7f0000000100), 0x1000)

3.701989636s ago: executing program 4 (id=5):
r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc0000)
mmap(0x0, 0xc0000, 0x1, 0x12, r0, 0x0)

3.52396601s ago: executing program 4 (id=9):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x15, 0x5, 0x57e, 0x2007, 0x0, 0x0, "05010905a1011500250135004501750195018102c0"}}, 0x12d)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x31, "210000000000000000000000800200"/49}}, 0x37)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x31, "210000000000000000000000800200"/49}}, 0x37)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x31, "210000000000000000000000800200"/49}}, 0x37)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x31, "210000000000000000000000800200"/49}}, 0x37)
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x31, "210000000000000000000000800200"/49}}, 0x37)

3.227687718s ago: executing program 1 (id=11):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d6, &(0x7f00000004c0)="$eJzs3MtrXFUcB/DvzDRq06mptVqtigXrA8Q0bWnr1p1rCyK4MbTTB522kkRqs1KXWUqhPjaKuBAEi7hx58I/Qij4BwiigojWx8idmTumcSbYZOqg9/OBO3POvXf4nZPwOznnkDsBKmtv8VJLmkmuJZnpVW+8YW/vbeXQ1dPFUUunc+y7Wve+i4euni5vLT+3LclrSe5IUk/SGBJ38dLy2fl2u7XQr+9fOvfy/sVLy0+dOTd/qnWqdf7w3NOHjx45fOTA+Pp6bfrTN75+59nm24+2Pv9y9wdXivY2+9dW92OcaiPO33crgk3Q1kk3gA0pcnNLkqlu/s+k0a0BVdDpdB5e/zLw/1WT5FBR5R/6Yv1bHv/OzKPn22d6C5CL/b2FlUH8Ld29g/TXJtaXwLh9UYw/c8PGv/oNe3TT/X3NZpLtSe7s75XuSHJXkp1J7k6yK8k9NxG/HP9W/jb+1QfjXyPJvZvo467nfvh4ZPzXkz1D49cGO0G1YiGYZPcG439y9LPfRl3rvJ88luHxsyr+6P3h/SfPtFtzvdfhMfZdf+GlUfGL/k+PiF/2v7HJ/dqf3ts78/s68Z94ZPjvf2fKliR/JPklyfUkvyYpfqD3J9mT5IEkD64T//ibH7446loR/8SI/tdXxX9oIx3ve/7yR51NfBwAGLN6d05bq88OyvX67Gxvrrsr0/X2hcWlJ09eeOX8id7cd0em6uVUqzf/naoV9QP9uXBZP7imfqg/T77c2Nqtzx6/0D4x6c5DxW1bk/8/Nnr5D1SEf/mB6pL/UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv9QXfIfKqk54vmf7aue3ZnrP+/+VWPq9vJZH+C/r7Uw+CbeNYVJtwy41f5K+km3BAAAAAAYt1G7/+MsTLqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN6f+TS1JcTw+s6+59upttZ8b3fckF989duXV+aWlhQPF+e8H55fe6p8/OIn2A/9UmadlHgPVtXhp+ex8u91aUFBQqFzhzwAAAP//+VV4SQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dir0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dir0/file0\x00', 0x42, 0x1ff)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000100)=@random={'user.', 'attr1\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000140)=@random={'user.', 'attr2\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000180)=@random={'user.', 'attr3\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f00000001c0)=@random={'user.', 'attr4\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000300)=@random={'user.', 'attr5\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000340)=@random={'user.', 'attr6\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000380)=@random={'user.', 'attr7\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
setxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f00000003c0)=@random={'user.', 'attr8\x00'}, &(0x7f0000000200)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64, 0x0)
getxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000100)=@random={'user.', 'attr1\x00'}, &(0x7f00000008c0), 0x64)
listxattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000900), 0x400)
removexattr(&(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000100)=@random={'user.', 'attr1\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./dir0/file0\x00', &(0x7f0000000940), 0x0)
close(r0)

2.693354012s ago: executing program 1 (id=12):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040a41520900001010203010902270001010080fa0904000003ff000000070581024000000705020240000007058402400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='1-1:1.0\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='1-1:1.0\x00', 0x8)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/dvb_usb_af9005/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='2-1:1.0\x00', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/drivers/dvb_usb_af9005/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='2-1:1.0\x00', 0x8)
close(r3)

2.128352066s ago: executing program 3 (id=14):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000800000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000800000), 0x2000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000800000/0x2000)=nil})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x2000})
madvise(&(0x7f0000800000/0x2000)=nil, 0x2000, 0x4)
close(r2)
close(r1)
close(r0)

1.711886497s ago: executing program 3 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='8\n\x00', 0x2)
r1 = fsopen(&(0x7f0000000600)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000800)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='addr\x00', &(0x7f0000000a00)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b00)='clientaddr\x00', &(0x7f0000000c00)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000d00)='vers\x00', &(0x7f0000000e00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1.536696311s ago: executing program 2 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0x1d6b\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='0x0104\x00', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='usbip-vudc.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1.345315476s ago: executing program 3 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
write(r0, &(0x7f0000000100)='1', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/force_emulation_prefix\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1', 0x1)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000280)="0f0b6b766ddbe3", 0x7}], 0x1, 0x1, 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.270946487s ago: executing program 2 (id=19):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
symlink(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f00000002c0)='\n', 0x1)
write(r0, &(0x7f0000000300)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f0000000340)='\n', 0x1)
write(r0, &(0x7f0000000380)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f00000003c0)='\n', 0x1)
write(r0, &(0x7f0000000400)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f0000000440)='\n', 0x1)
write(r0, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f00000004c0)='\n', 0x1)
write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f0000000540)='\n', 0x1)
write(r0, &(0x7f0000000580)='dummy_udc.0\n', 0xc)
write(r0, &(0x7f00000005c0)='\n', 0x1)

716.459282ms ago: executing program 2 (id=20):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580), 0x1, 0x14d3, &(0x7f00000015c0)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002ac0)='test_file\x00', 0x42, 0x1c0)
write(r0, &(0x7f0000002b00)='hello world! some more data to fill a block or more...\x00', 0x40)

638.032154ms ago: executing program 3 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r2)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000500), 0x16, 0x2)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000540)=0x1)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000540))
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='\n\x00', 0x1)
close(r4)

407.72315ms ago: executing program 2 (id=22):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x100000, 0x2000, &(0x7f0000100000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@code={0xa, 0x1d, {"48c704250000100078563412"}}], 0x1d})
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x100000, 0x0, &(0x7f0000100000/0x2000)=nil})

163.199536ms ago: executing program 2 (id=23):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x18})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit]})
ioctl$KVM_SET_LAPIC(r3, 0x4040ae68, &(0x7f0000000200))
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000300)=0x20)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 2 (id=24):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='dummy_udc.0\x00', 0xb)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='dummy_udc.0\x00', 0xb)
close(r2)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   55.141557][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.162519][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts.
syzkaller login: [   80.746260][ T4259] cgroup: Unknown subsys name 'net'
[   80.846796][ T4259] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.439042][ T4259] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   84.250340][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.258843][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.266911][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.275484][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.285354][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.293485][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.301501][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.301592][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.311041][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.324189][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.325515][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.331573][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.340469][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.352839][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.354762][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.370270][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.377505][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.385687][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.393625][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.401041][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.409036][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.416211][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.424155][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.434250][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.441907][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.446053][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.461423][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.475582][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   84.487887][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.495352][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.837129][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   84.940358][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   85.035130][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   85.124159][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   85.153042][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.161154][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.170098][ T4276] device bridge_slave_0 entered promiscuous mode
[   85.182978][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.190249][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.199169][ T4276] device bridge_slave_1 entered promiscuous mode
[   85.213677][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.221610][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.230340][ T4271] device bridge_slave_0 entered promiscuous mode
[   85.238152][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   85.275486][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.282763][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.293616][ T4271] device bridge_slave_1 entered promiscuous mode
[   85.334554][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.360546][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.383478][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.401775][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.425236][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.432622][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.441351][ T4275] device bridge_slave_0 entered promiscuous mode
[   85.455619][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.464900][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.474455][ T4275] device bridge_slave_1 entered promiscuous mode
[   85.527065][ T4271] team0: Port device team_slave_0 added
[   85.535972][ T4271] team0: Port device team_slave_1 added
[   85.546042][ T4276] team0: Port device team_slave_0 added
[   85.578951][ T4276] team0: Port device team_slave_1 added
[   85.586818][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.605928][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.616408][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.624408][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.633835][ T4273] device bridge_slave_0 entered promiscuous mode
[   85.657602][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.664863][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.691081][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.719515][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.726651][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.735097][ T4274] device bridge_slave_0 entered promiscuous mode
[   85.743131][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.751392][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.760415][ T4273] device bridge_slave_1 entered promiscuous mode
[   85.774518][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.782138][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.809406][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.827711][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.835107][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.843889][ T4274] device bridge_slave_1 entered promiscuous mode
[   85.865462][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.873039][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.900469][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.922059][ T4275] team0: Port device team_slave_0 added
[   85.943824][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.951000][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.977318][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.990757][ T4275] team0: Port device team_slave_1 added
[   86.011725][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.025789][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.064600][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.089992][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.097086][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.123368][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.155241][ T4271] device hsr_slave_0 entered promiscuous mode
[   86.162213][ T4271] device hsr_slave_1 entered promiscuous mode
[   86.171885][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.191252][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.198908][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.230783][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.269529][ T4273] team0: Port device team_slave_0 added
[   86.285897][ T4276] device hsr_slave_0 entered promiscuous mode
[   86.292966][ T4276] device hsr_slave_1 entered promiscuous mode
[   86.300320][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.308288][ T4276] Cannot create hsr debugfs directory
[   86.331019][ T4273] team0: Port device team_slave_1 added
[   86.340067][ T4274] team0: Port device team_slave_0 added
[   86.348693][ T4274] team0: Port device team_slave_1 added
[   86.412225][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.419647][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.446198][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.469181][   T49] Bluetooth: hci3: command 0x0409 tx timeout
[   86.477460][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.485029][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.512142][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.541047][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.548069][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.574980][   T49] Bluetooth: hci4: command 0x0409 tx timeout
[   86.575123][   T49] Bluetooth: hci1: command 0x0409 tx timeout
[   86.575231][   T49] Bluetooth: hci0: command 0x0409 tx timeout
[   86.582864][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[   86.604198][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.621825][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.629888][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.656447][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.675946][ T4275] device hsr_slave_0 entered promiscuous mode
[   86.683262][ T4275] device hsr_slave_1 entered promiscuous mode
[   86.690740][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.698515][ T4275] Cannot create hsr debugfs directory
[   86.807606][ T4273] device hsr_slave_0 entered promiscuous mode
[   86.815192][ T4273] device hsr_slave_1 entered promiscuous mode
[   86.822865][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.830794][ T4273] Cannot create hsr debugfs directory
[   86.881470][ T4274] device hsr_slave_0 entered promiscuous mode
[   86.889155][ T4274] device hsr_slave_1 entered promiscuous mode
[   86.896022][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.904371][ T4274] Cannot create hsr debugfs directory
[   87.277273][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.335861][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.346243][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.408158][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.485036][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.511807][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.559798][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.599256][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.642161][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.652377][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.672956][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.692527][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.773932][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.806149][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.830965][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.841623][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.872718][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.893557][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.906776][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.935232][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   87.956849][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.968722][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.977565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.022268][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.039009][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.047859][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.062102][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.069468][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.079683][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.088781][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.097384][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.104766][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.117201][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.135348][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.152057][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.197818][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   88.213762][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.225475][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.235808][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.250781][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.284161][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.294569][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.304781][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.314443][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.324068][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.334109][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.343481][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.352738][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.360222][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.368368][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.376960][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.421806][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   88.444473][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.453657][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.463792][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.471016][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.480758][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.490335][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.499117][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.508087][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.516885][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.526451][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.534703][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.544152][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.553122][ T4286] Bluetooth: hci3: command 0x041b tx timeout
[   88.561159][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.570542][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.577885][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.587598][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.608330][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   88.619090][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.627461][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.635686][ T4286] Bluetooth: hci0: command 0x041b tx timeout
[   88.635722][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[   88.635748][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[   88.639497][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[   88.653098][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.675193][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.708242][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.723985][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.734693][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.746369][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.756337][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.768365][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.783056][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.790201][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.798189][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.807873][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.817035][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.827131][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.836282][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.845938][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.855011][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.862376][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.870911][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.880971][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.890106][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.943131][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.958295][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.968292][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.984785][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.995659][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.012517][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.024803][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.032214][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.047636][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.057954][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.072651][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.084305][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.096708][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.110109][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.119129][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.194391][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.226648][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.237322][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.271564][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.310330][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.334810][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.367743][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.380066][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.425084][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.457988][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.496884][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.511512][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.527418][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.556852][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.565385][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.586534][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   89.605222][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.639167][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.677257][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.706648][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.729793][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.749403][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.756677][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.783481][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.809998][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.838949][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.846599][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.889170][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.957868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.976865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.987561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.999401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.008359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.064514][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.075156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.095432][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.105156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.117576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.132910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.142952][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.156650][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.165366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.180012][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.201291][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.217318][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.251050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.273184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.290189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.302754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.312865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.321900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.335373][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.370543][ T4271] device veth0_vlan entered promiscuous mode
[   90.392307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.407092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.426093][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.449732][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.465487][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.475780][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.492276][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.506198][ T4271] device veth1_vlan entered promiscuous mode
[   90.569587][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.581800][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.590805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.600827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.615878][ T4276] device veth0_vlan entered promiscuous mode
[   90.628888][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[   90.640988][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.650011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.658193][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.667891][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.683713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.694815][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.708933][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[   90.715200][ T4287] Bluetooth: hci4: command 0x040f tx timeout
[   90.721946][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[   90.721964][   T49] Bluetooth: hci0: command 0x040f tx timeout
[   90.736003][ T4275] device veth0_vlan entered promiscuous mode
[   90.769978][ T4276] device veth1_vlan entered promiscuous mode
[   90.799812][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.808404][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.817404][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.831860][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.841165][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.904903][ T4271] device veth0_macvtap entered promiscuous mode
[   90.919490][ T4275] device veth1_vlan entered promiscuous mode
[   90.928345][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.942792][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.951825][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.960481][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.969844][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.981459][ T4273] device veth0_vlan entered promiscuous mode
[   90.994303][ T4276] device veth0_macvtap entered promiscuous mode
[   91.017284][ T4271] device veth1_macvtap entered promiscuous mode
[   91.025100][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.035455][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.045941][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.054349][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.063371][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.081551][ T4276] device veth1_macvtap entered promiscuous mode
[   91.101965][ T4273] device veth1_vlan entered promiscuous mode
[   91.114464][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.123537][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.133263][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.142301][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.151974][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.160127][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.177176][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.186328][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.223245][ T4275] device veth0_macvtap entered promiscuous mode
[   91.240942][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.252022][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.284286][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.294276][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.303705][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.318268][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.342787][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.353344][ T4275] device veth1_macvtap entered promiscuous mode
[   91.367853][ T4273] device veth0_macvtap entered promiscuous mode
[   91.376817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.388972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.397887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.414415][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.423941][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.438216][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.454276][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.486236][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.497662][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.512383][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.525979][ T4273] device veth1_macvtap entered promiscuous mode
[   91.538140][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.555362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.566226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.583534][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.598759][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.615435][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.626956][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.645304][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.656852][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.687877][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.705874][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.736262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.749607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.769436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.784688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.796270][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.807517][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.818337][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.829776][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.842040][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.857053][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.869064][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.882649][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.893505][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.904825][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.917503][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.931107][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.941668][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.952814][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.963356][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.974455][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.984955][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.999473][   T33] cfg80211: failed to load regulatory.db
[   92.014139][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.026016][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.034602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.046595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.058335][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.067980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.077664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.087474][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.103973][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.114533][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.125645][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.136126][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.184515][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.206676][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.218003][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.227888][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.254507][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.264770][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.274001][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.283443][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.479266][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.499546][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.513969][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.522553][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.539372][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.571461][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.584670][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.604986][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.614285][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.623592][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.633062][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.642553][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.661484][ T4274] device veth0_vlan entered promiscuous mode
[   92.661961][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.676013][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.694483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.708582][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[   92.728057][ T4274] device veth1_vlan entered promiscuous mode
[   92.747089][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.757866][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.779909][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.782804][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.798273][ T4287] Bluetooth: hci4: command 0x0419 tx timeout
[   92.798341][ T4286] Bluetooth: hci0: command 0x0419 tx timeout
[   92.807283][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[   92.816818][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[   92.863178][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.880898][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.889640][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.897894][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.930197][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.938362][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.956255][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.970289][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.979787][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.993142][ T4274] device veth0_macvtap entered promiscuous mode
[   93.006141][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.022412][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.040362][ T4274] device veth1_macvtap entered promiscuous mode
[   93.049654][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.059706][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.069010][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.098130][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.119519][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.136274][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.147664][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.158001][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.169198][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.179489][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.190572][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.202618][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.215517][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.227091][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.237558][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.246161][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.254421][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.265419][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.278101][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.290892][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.301034][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.312470][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.324619][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.333227][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.345702][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.355573][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.368638][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.379074][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.394468][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.406789][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.416012][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.425511][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.676134][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.705220][ T4371] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.718169][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.757709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.836313][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.856693][ T4370] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[   93.879981][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.912446][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.408589][ T4327] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.418715][ T4365] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.458650][    T7] nintendo 0005:057E:2007.0001: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0
[   94.598611][ T4327] usb 1-1: Using ep0 maxpacket: 16
[   94.613364][ T4365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   94.622831][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.641781][ T4365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[   94.665365][   T14] libceph: mon0 (2)127.0.0.1:3300 socket error on write
[   94.666760][ T4327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   94.677973][ T4365] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[   94.696542][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.706227][ T4365] usb 4-1: Product: syz
[   94.711744][ T4365] usb 4-1: Manufacturer: syz
[   94.716655][ T4365] usb 4-1: SerialNumber: syz
[   94.727534][ T4327] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   94.744329][ T4379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.749377][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.768695][ T4379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.780457][ T4397] loop1: detected capacity change from 0 to 512
[   94.789458][ T4365] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[   94.798324][ T4327] usb 1-1: config 0 descriptor??
[   94.831007][ T4365] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   94.886816][ T4397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   94.905858][ T4397] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.022335][ T4365] libceph: mon0 (2)127.0.0.1:3300 socket closed (con state V2_BANNER_PREFIX)
[   95.115130][ T4365] usb 4-1: USB disconnect, device number 2
[   95.134223][ T4365] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   95.144856][ T4365] garmin_gps 4-1:1.0: device disconnected
[   95.174845][ T4276] EXT4-fs (loop1): unmounting filesystem.
[   95.257992][ T4327] HID 045e:07da: Invalid code 65791 type 1
[   95.288282][ T4327] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5
[   95.310126][ T4327] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   95.385875][ T4392] ceph: No mds server is up or the cluster is laggy
[   95.538640][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.656106][ T4407] vidtv vidtv.0: Successfully removed vidtv
[   95.731294][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   95.743592][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   95.761802][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[   95.793408][   T14] usb 2-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00
[   95.821327][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.834546][   T14] usb 2-1: Product: syz
[   95.839203][   T14] usb 2-1: Manufacturer: syz
[   95.848594][   T14] usb 2-1: SerialNumber: syz
[   95.870531][ T4404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.899708][ T4404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.907068][ T4404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.922370][   T14] af9005: boot packet bulk message failed: -71 (252/0)
[   95.937040][   T14] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware
[   95.999668][   T14] usb 2-1: Direct firmware load for af9005.fw failed with error -2
[   96.008345][   T14] usb 2-1: Falling back to sysfs fallback for: af9005.fw
[   96.164519][ T4325] usb 1-1: USB disconnect, device number 2
[   96.281350][ T4417] svc: failed to register nfsdv3 RPC service (errno 111).
[   96.308072][ T4417] svc: failed to register nfsaclv3 RPC service (errno 111).
[   96.549579][    T7] nintendo 0005:057E:2007.0001: failed reading SPI flash; ret=-110
[   96.574379][ T4365] smpboot: CPU 1 is now offline
[   96.602966][    T7] nintendo 0005:057E:2007.0001: using factory cal for left stick
[   96.714989][ T4427] x86: Booting SMP configuration:
[   96.741643][ T4325] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   96.766660][ T4433] UDC core: g1: couldn't find an available UDC or it's busy
[   96.801137][ T4427] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   96.824266][ T4433] UDC core: g1: couldn't find an available UDC or it's busy
[   96.875180][ T4433] UDC core: g1: couldn't find an available UDC or it's busy
[   96.925337][ T4431] UDC core: g1: couldn't find an available UDC or it's busy
[   96.952845][ T4431] UDC core: g1: couldn't find an available UDC or it's busy
[   96.961864][ T4325] usb 1-1: Using ep0 maxpacket: 16
[   96.975815][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.994828][ T4431] UDC core: g1: couldn't find an available UDC or it's busy
[   97.003272][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   97.020457][ T4431] UDC core: g1: couldn't find an available UDC or it's busy
[   97.028238][ T4325] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   97.039893][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.066273][ T4325] usb 1-1: config 0 descriptor??
[   97.182509][ T4437] loop2: detected capacity change from 0 to 256
[   97.283753][ T4325] usbhid 1-1:0.0: can't add hid device: -71
[   97.294645][ T4325] usbhid: probe of 1-1:0.0 failed with error -71
[   97.304038][ T4439] using random self ethernet address
[   97.319276][ T4439] using random host ethernet address
[   97.327348][ T4325] usb 1-1: USB disconnect, device number 3
[   97.363353][ T4439] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[   97.380854][ T4439] udc dummy_udc.0: failed to start g1: -19
[   97.421864][ T4439] UDC core: g1: couldn't find an available UDC or it's busy
[   97.856184][ T4449] ==================================================================
[   97.864590][ T4449] BUG: KASAN: slab-out-of-bounds in reg_fixed_voltage_probe+0xa8b/0xd30
[   97.873069][ T4449] Read of size 4 at addr ffff8880278aa17c by task syz.2.24/4449
[   97.880810][ T4449] 
[   97.883196][ T4449] CPU: 0 PID: 4449 Comm: syz.2.24 Not tainted syzkaller #0
[   97.890407][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   97.900753][ T4449] Call Trace:
[   97.904051][ T4449]  <TASK>
[   97.907010][ T4449]  dump_stack_lvl+0x188/0x24e
[   97.911737][ T4449]  ? __lock_acquire+0x7c40/0x7c40
[   97.916850][ T4449]  ? show_regs_print_info+0x12/0x12
[   97.922463][ T4449]  ? load_image+0x410/0x410
[   97.927207][ T4449]  ? _raw_spin_lock_irqsave+0xbc/0x100
[   97.933103][ T4449]  ? __virt_addr_valid+0x188/0x540
[   97.938355][ T4449]  ? __virt_addr_valid+0x467/0x540
[   97.943875][ T4449]  ? reg_fixed_voltage_probe+0xa8b/0xd30
[   97.949689][ T4449]  print_report+0xa8/0x210
[   97.954326][ T4449]  kasan_report+0x10b/0x140
[   97.958881][ T4449]  ? reg_fixed_voltage_probe+0xa8b/0xd30
[   97.965041][ T4449]  reg_fixed_voltage_probe+0xa8b/0xd30
[   97.970579][ T4449]  ? of_regulator_bulk_get_all+0x5c0/0x5c0
[   97.976619][ T4449]  ? is_acpi_device_node+0x22/0x60
[   97.982036][ T4449]  ? acpi_dev_pm_attach+0xe7/0x290
[   97.987267][ T4449]  platform_probe+0x137/0x1c0
[   97.992178][ T4449]  ? platform_uevent+0xb0/0xb0
[   97.997071][ T4449]  really_probe+0x24a/0xb40
[   98.001608][ T4449]  ? pm_runtime_barrier+0x147/0x1c0
[   98.006951][ T4449]  __driver_probe_device+0x1f5/0x390
[   98.012276][ T4449]  device_driver_attach+0xd9/0x1c0
[   98.017506][ T4449]  bind_store+0x33b/0x380
[   98.021882][ T4449]  ? mutex_lock_nested+0x10/0x10
[   98.027030][ T4449]  ? unbind_store+0x300/0x300
[   98.031843][ T4449]  ? __virt_addr_valid+0x188/0x540
[   98.037190][ T4449]  ? __virt_addr_valid+0x467/0x540
[   98.042442][ T4449]  ? sysfs_kf_write+0x183/0x2a0
[   98.047421][ T4449]  ? sysfs_kf_read+0x350/0x350
[   98.052218][ T4449]  kernfs_fop_write_iter+0x3a0/0x520
[   98.057546][ T4449]  vfs_write+0x482/0x9a0
[   98.061840][ T4449]  ? file_end_write+0x250/0x250
[   98.066737][ T4449]  ? __fget_files+0x3fc/0x460
[   98.071546][ T4449]  ? __fdget_pos+0x2ae/0x360
[   98.076170][ T4449]  ? ksys_write+0x70/0x260
[   98.080818][ T4449]  ksys_write+0x14d/0x260
[   98.085633][ T4449]  ? __ia32_sys_read+0x80/0x80
[   98.090696][ T4449]  ? lockdep_hardirqs_on+0x94/0x140
[   98.096036][ T4449]  do_syscall_64+0x4c/0xa0
[   98.100515][ T4449]  ? clear_bhb_loop+0x60/0xb0
[   98.105411][ T4449]  ? clear_bhb_loop+0x60/0xb0
[   98.110155][ T4449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.116187][ T4449] RIP: 0033:0x7f6306d9e0d9
[   98.120657][ T4449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.140400][ T4449] RSP: 002b:00007f6307d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   98.149028][ T4449] RAX: ffffffffffffffda RBX: 00007f6307025fa0 RCX: 00007f6306d9e0d9
[   98.157027][ T4449] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[   98.165302][ T4449] RBP: 00007f6306e35024 R08: 0000000000000000 R09: 0000000000000000
[   98.173396][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.181496][ T4449] R13: 00007f6307026038 R14: 00007f6307025fa0 R15: 00007ffec485d788
[   98.189862][ T4449]  </TASK>
[   98.192913][ T4449] 
[   98.195351][ T4449] Allocated by task 1:
[   98.199440][ T4449]  kasan_set_track+0x4b/0x70
[   98.204075][ T4449]  __kasan_kmalloc+0x8e/0xa0
[   98.208759][ T4449]  __kmalloc_node_track_caller+0xb0/0x240
[   98.215294][ T4449]  kmemdup+0x27/0x60
[   98.219239][ T4449]  platform_device_add_data+0x2a/0xa0
[   98.224836][ T4449]  dummy_hcd_init+0x766/0x1167
[   98.229654][ T4449]  do_one_initcall+0x257/0x800
[   98.234460][ T4449]  do_initcall_level+0x13d/0x1ed
[   98.239429][ T4449]  do_initcalls+0x4b/0x8a
[   98.243871][ T4449]  kernel_init_freeable+0x401/0x5ab
[   98.249114][ T4449]  kernel_init+0x19/0x1b0
[   98.253475][ T4449]  ret_from_fork+0x1f/0x30
[   98.257930][ T4449] 
[   98.260275][ T4449] The buggy address belongs to the object at ffff8880278aa168
[   98.260275][ T4449]  which belongs to the cache kmalloc-8 of size 8
[   98.274029][ T4449] The buggy address is located 12 bytes to the right of
[   98.274029][ T4449]  8-byte region [ffff8880278aa168, ffff8880278aa170)
[   98.287688][ T4449] 
[   98.290125][ T4449] The buggy address belongs to the physical page:
[   98.296754][ T4449] page:ffffea00009e2a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x278aa
[   98.307130][ T4449] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[   98.314896][ T4449] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017441280
[   98.323659][ T4449] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000
[   98.332262][ T4449] page dumped because: kasan: bad access detected
[   98.338712][ T4449] page_owner tracks the page as allocated
[   98.344449][ T4449] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 11527390989, free_ts 11526485466
[   98.362119][ T4449]  post_alloc_hook+0x173/0x1a0
[   98.366927][ T4449]  get_page_from_freelist+0x206b/0x2180
[   98.372602][ T4449]  __alloc_pages+0x1ec/0x4f0
[   98.377401][ T4449]  alloc_page_interleave+0x24/0x1e0
[   98.382640][ T4449]  alloc_slab_page+0x5d/0x180
[   98.387610][ T4449]  new_slab+0x87/0x2d0
[   98.391881][ T4449]  ___slab_alloc+0xbc5/0x1240
[   98.396604][ T4449]  __kmem_cache_alloc_node+0x126/0x270
[   98.402171][ T4449]  __kmalloc_node_track_caller+0xa0/0x240
[   98.408208][ T4449]  kstrdup_const+0x56/0x90
[   98.412750][ T4449]  __kernfs_new_node+0xa6/0x7f0
[   98.417631][ T4449]  kernfs_new_node+0x148/0x250
[   98.422421][ T4449]  kernfs_create_link+0xa3/0x200
[   98.427732][ T4449]  sysfs_do_create_link_sd+0x83/0x110
[   98.433310][ T4449]  device_add+0x83b/0x1050
[   98.437756][ T4449]  device_create+0x266/0x300
[   98.442391][ T4449] page last free stack trace:
[   98.447084][ T4449]  free_unref_page_prepare+0x8e5/0x9e0
[   98.452666][ T4449]  free_unref_page_list+0xbb/0x8e0
[   98.457824][ T4449]  release_pages+0x20d1/0x2340
[   98.462620][ T4449]  tlb_flush_mmu+0x105/0x220
[   98.467243][ T4449]  tlb_finish_mmu+0xf0/0x220
[   98.471881][ T4449]  exit_mmap+0x388/0x970
[   98.476281][ T4449]  __mmput+0x118/0x3a0
[   98.480553][ T4449]  free_bprm+0x122/0x2d0
[   98.484915][ T4449]  kernel_execve+0x3e5/0x980
[   98.489530][ T4449]  call_usermodehelper_exec_async+0x207/0x350
[   98.495636][ T4449]  ret_from_fork+0x1f/0x30
[   98.500119][ T4449] 
[   98.502555][ T4449] Memory state around the buggy address:
[   98.508221][ T4449]  ffff8880278aa000: 06 fc fc fc fc 06 fc fc fc fc 00 fc fc fc fc 00
[   98.516401][ T4449]  ffff8880278aa080: fc fc fc fc 00 fc fc fc fc 06 fc fc fc fc 00 fc
[   98.524610][ T4449] >ffff8880278aa100: fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc
[   98.532701][ T4449]                                                                 ^
[   98.540876][ T4449]  ffff8880278aa180: fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc
[   98.548972][ T4449]  ffff8880278aa200: fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc
[   98.557137][ T4449] ==================================================================
[   98.602160][ T4449] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   98.609438][ T4449] CPU: 0 PID: 4449 Comm: syz.2.24 Not tainted syzkaller #0
[   98.616676][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.626777][ T4449] Call Trace:
[   98.630096][ T4449]  <TASK>
[   98.633150][ T4449]  dump_stack_lvl+0x188/0x24e
[   98.637887][ T4449]  ? memcpy+0x3c/0x60
[   98.641926][ T4449]  ? show_regs_print_info+0x12/0x12
[   98.647155][ T4449]  ? load_image+0x410/0x410
[   98.651688][ T4449]  panic+0x2d3/0x710
[   98.655600][ T4449]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[   98.661876][ T4449]  ? bpf_jit_dump+0xd0/0xd0
[   98.666440][ T4449]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[   98.672475][ T4449]  ? _raw_spin_unlock+0x40/0x40
[   98.677385][ T4449]  check_panic_on_warn+0x80/0xa0
[   98.682622][ T4449]  ? reg_fixed_voltage_probe+0xa8b/0xd30
[   98.688474][ T4449]  end_report+0x66/0x110
[   98.692781][ T4449]  kasan_report+0x118/0x140
[   98.697402][ T4449]  ? reg_fixed_voltage_probe+0xa8b/0xd30
[   98.703067][ T4449]  reg_fixed_voltage_probe+0xa8b/0xd30
[   98.708589][ T4449]  ? of_regulator_bulk_get_all+0x5c0/0x5c0
[   98.714553][ T4449]  ? is_acpi_device_node+0x22/0x60
[   98.719746][ T4449]  ? acpi_dev_pm_attach+0xe7/0x290
[   98.724978][ T4449]  platform_probe+0x137/0x1c0
[   98.729781][ T4449]  ? platform_uevent+0xb0/0xb0
[   98.734585][ T4449]  really_probe+0x24a/0xb40
[   98.739118][ T4449]  ? pm_runtime_barrier+0x147/0x1c0
[   98.744342][ T4449]  __driver_probe_device+0x1f5/0x390
[   98.749663][ T4449]  device_driver_attach+0xd9/0x1c0
[   98.754893][ T4449]  bind_store+0x33b/0x380
[   98.759256][ T4449]  ? mutex_lock_nested+0x10/0x10
[   98.764255][ T4449]  ? unbind_store+0x300/0x300
[   98.768964][ T4449]  ? __virt_addr_valid+0x188/0x540
[   98.774152][ T4449]  ? __virt_addr_valid+0x467/0x540
[   98.779410][ T4449]  ? sysfs_kf_write+0x183/0x2a0
[   98.784304][ T4449]  ? sysfs_kf_read+0x350/0x350
[   98.789185][ T4449]  kernfs_fop_write_iter+0x3a0/0x520
[   98.794503][ T4449]  vfs_write+0x482/0x9a0
[   98.798953][ T4449]  ? file_end_write+0x250/0x250
[   98.803837][ T4449]  ? __fget_files+0x3fc/0x460
[   98.808565][ T4449]  ? __fdget_pos+0x2ae/0x360
[   98.813223][ T4449]  ? ksys_write+0x70/0x260
[   98.817715][ T4449]  ksys_write+0x14d/0x260
[   98.822181][ T4449]  ? __ia32_sys_read+0x80/0x80
[   98.827455][ T4449]  ? lockdep_hardirqs_on+0x94/0x140
[   98.832965][ T4449]  do_syscall_64+0x4c/0xa0
[   98.837504][ T4449]  ? clear_bhb_loop+0x60/0xb0
[   98.842208][ T4449]  ? clear_bhb_loop+0x60/0xb0
[   98.847181][ T4449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.853459][ T4449] RIP: 0033:0x7f6306d9e0d9
[   98.857897][ T4449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.877615][ T4449] RSP: 002b:00007f6307d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   98.886055][ T4449] RAX: ffffffffffffffda RBX: 00007f6307025fa0 RCX: 00007f6306d9e0d9
[   98.894052][ T4449] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[   98.902227][ T4449] RBP: 00007f6306e35024 R08: 0000000000000000 R09: 0000000000000000
[   98.910490][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.918493][ T4449] R13: 00007f6307026038 R14: 00007f6307025fa0 R15: 00007ffec485d788
[   98.926585][ T4449]  </TASK>
[   98.930203][ T4449] Kernel Offset: disabled
[   98.934553][ T4449] Rebooting in 86400 seconds..