last executing test programs: 8.878610451s ago: executing program 0 (id=1): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) 8.679596938s ago: executing program 0 (id=6): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000700)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010000000000082405050389921c8dc13e698210ee241104836b2d95bc5cec7a915d"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0xc, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) 8.113289262s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48) socketpair(0x15, 0x2, 0x6, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) 7.902486138s ago: executing program 4 (id=7): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.388558076s ago: executing program 3 (id=4): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)="c2e26e20a44721ce99cee5763f90ad11de1fec1a", 0x14) syz_io_uring_setup(0x27b, 0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.844569692s ago: executing program 0 (id=8): fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003140)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4625, @private=0xa010102}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x36, 0x0, 0x0, 0x0, 0xce, 0x0, 0x1, 0x1, 0x9}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x18, 0xc8, 0x3}}}, 0x7) 4.651822577s ago: executing program 0 (id=9): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.65143436s ago: executing program 3 (id=10): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) lstat(&(0x7f0000001880)='./file0\x00', &(0x7f0000001640)) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r1 = open$dir(0x0, 0x8000, 0xf0) getdents(r1, 0x0, 0x0) 4.581447173s ago: executing program 4 (id=11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000056e000/0x3000)=nil, &(0x7f000056e000/0x2000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x1d, 0x58}) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 4.369182635s ago: executing program 2 (id=3): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 4.294762136s ago: executing program 1 (id=2): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) 3.735840814s ago: executing program 2 (id=12): bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) 3.73567506s ago: executing program 3 (id=13): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)) 3.230796165s ago: executing program 1 (id=14): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 2.516833652s ago: executing program 1 (id=15): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000003, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) 2.455373775s ago: executing program 3 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000080)}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x2010) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r4, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x4000) 1.486564464s ago: executing program 1 (id=17): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) 793.9229ms ago: executing program 1 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x3, 0x202) r2 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) write$binfmt_script(r1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000b80), 0x7, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$media(0x0, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 0s ago: executing program 0 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x800, @private0, 0x7}}, [0x607431be, 0x101, 0x4, 0x8, 0x1, 0xf, 0x1, 0x3, 0x7ff, 0x5, 0x8, 0xc, 0x8, 0xffffffffffffff29, 0x80]}, &(0x7f0000000000)=0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts. [ 86.125543][ T5823] cgroup: Unknown subsys name 'net' [ 86.343101][ T5823] cgroup: Unknown subsys name 'cpuset' [ 86.438427][ T5823] cgroup: Unknown subsys name 'rlimit' [ 86.706614][ T993] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 88.422970][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.339236][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.369044][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.374802][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.375846][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.385504][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.386241][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.387286][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.389667][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.390615][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.392809][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.394149][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.395104][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.406791][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.408582][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.409454][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.410642][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.411444][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.429185][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.430833][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.487850][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.490637][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.500223][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.523014][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.542811][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.547119][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.436160][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 92.450647][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.539980][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.768934][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.931936][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 93.498905][ T5852] Bluetooth: hci4: command tx timeout [ 93.498913][ T5155] Bluetooth: hci0: command tx timeout [ 93.499121][ T5839] Bluetooth: hci1: command tx timeout [ 93.530614][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.531496][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.532222][ T5848] bridge_slave_0: entered allmulticast mode [ 93.535091][ T5848] bridge_slave_0: entered promiscuous mode [ 93.555648][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.555801][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.556331][ T5835] bridge_slave_0: entered allmulticast mode [ 93.560307][ T5835] bridge_slave_0: entered promiscuous mode [ 93.585047][ T5839] Bluetooth: hci3: command tx timeout [ 93.657821][ T5839] Bluetooth: hci2: command tx timeout [ 93.702097][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.702210][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.702356][ T5848] bridge_slave_1: entered allmulticast mode [ 93.704157][ T5848] bridge_slave_1: entered promiscuous mode [ 93.706526][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.706679][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.706809][ T5835] bridge_slave_1: entered allmulticast mode [ 93.711165][ T5835] bridge_slave_1: entered promiscuous mode [ 93.829833][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.829979][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.830163][ T5836] bridge_slave_0: entered allmulticast mode [ 93.832871][ T5836] bridge_slave_0: entered promiscuous mode [ 94.110330][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.110459][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.110636][ T5836] bridge_slave_1: entered allmulticast mode [ 94.112323][ T5836] bridge_slave_1: entered promiscuous mode [ 94.278519][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.278665][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.278843][ T5843] bridge_slave_0: entered allmulticast mode [ 94.280799][ T5843] bridge_slave_0: entered promiscuous mode [ 94.453811][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.457190][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.457439][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.460442][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.460631][ T5843] bridge_slave_1: entered allmulticast mode [ 94.463383][ T5843] bridge_slave_1: entered promiscuous mode [ 94.641631][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.643880][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.819071][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.819348][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.819545][ T5837] bridge_slave_0: entered allmulticast mode [ 94.822465][ T5837] bridge_slave_0: entered promiscuous mode [ 94.845694][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.080677][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.080820][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.081018][ T5837] bridge_slave_1: entered allmulticast mode [ 95.083220][ T5837] bridge_slave_1: entered promiscuous mode [ 95.086489][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.272016][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.391694][ T5848] team0: Port device team_slave_0 added [ 95.394971][ T5835] team0: Port device team_slave_0 added [ 95.400484][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.541214][ T5848] team0: Port device team_slave_1 added [ 95.543269][ T5835] team0: Port device team_slave_1 added [ 95.577944][ T5839] Bluetooth: hci0: command tx timeout [ 95.577975][ T5839] Bluetooth: hci1: command tx timeout [ 95.577996][ T5839] Bluetooth: hci4: command tx timeout [ 95.621733][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.623764][ T5836] team0: Port device team_slave_0 added [ 95.657795][ T5155] Bluetooth: hci3: command tx timeout [ 95.737689][ T5155] Bluetooth: hci2: command tx timeout [ 95.856365][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.859454][ T5836] team0: Port device team_slave_1 added [ 96.264684][ T5843] team0: Port device team_slave_0 added [ 96.419696][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.419710][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.419727][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.422296][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.422311][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.422338][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.424647][ T5843] team0: Port device team_slave_1 added [ 96.652160][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.652174][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.652198][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.653330][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.653340][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.653357][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.751624][ T5837] team0: Port device team_slave_0 added [ 96.753866][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.753880][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.753905][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.877311][ T5837] team0: Port device team_slave_1 added [ 96.885575][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.885592][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.885619][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.924934][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.924952][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.924982][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.080132][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.080144][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.080161][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.436969][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.436982][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.437000][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.583757][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.583773][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.583799][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.658902][ T5155] Bluetooth: hci4: command tx timeout [ 97.658918][ T5839] Bluetooth: hci1: command tx timeout [ 97.658937][ T5155] Bluetooth: hci0: command tx timeout [ 97.705402][ T5848] hsr_slave_0: entered promiscuous mode [ 97.706662][ T5848] hsr_slave_1: entered promiscuous mode [ 97.719663][ T5835] hsr_slave_0: entered promiscuous mode [ 97.720971][ T5835] hsr_slave_1: entered promiscuous mode [ 97.722341][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 97.722460][ T5835] Cannot create hsr debugfs directory [ 97.737741][ T5852] Bluetooth: hci3: command tx timeout [ 97.817965][ T5852] Bluetooth: hci2: command tx timeout [ 97.918898][ T5836] hsr_slave_0: entered promiscuous mode [ 97.919931][ T5836] hsr_slave_1: entered promiscuous mode [ 97.920552][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 97.920573][ T5836] Cannot create hsr debugfs directory [ 98.107145][ T5843] hsr_slave_0: entered promiscuous mode [ 98.115278][ T5843] hsr_slave_1: entered promiscuous mode [ 98.116144][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 98.116162][ T5843] Cannot create hsr debugfs directory [ 98.784595][ T5837] hsr_slave_0: entered promiscuous mode [ 98.785563][ T5837] hsr_slave_1: entered promiscuous mode [ 98.786163][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 98.786182][ T5837] Cannot create hsr debugfs directory [ 99.737918][ T5852] Bluetooth: hci0: command tx timeout [ 99.737951][ T5852] Bluetooth: hci4: command tx timeout [ 99.747709][ T5852] Bluetooth: hci1: command tx timeout [ 99.819145][ T5852] Bluetooth: hci3: command tx timeout [ 99.897946][ T5852] Bluetooth: hci2: command tx timeout [ 100.221803][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.265773][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.313407][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.364866][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.478174][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.511351][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.548679][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.603881][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.736735][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.784653][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.830330][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.888856][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.079602][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.112397][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.162323][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.204598][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.375648][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.429577][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.470294][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.470588][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.524729][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.649257][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.686676][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.723949][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.724569][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.770484][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.770700][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.840731][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.891968][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.897262][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.897412][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.964637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.964853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.036821][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.093748][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.094007][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.115869][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.163925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.164659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.243660][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.296901][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.381025][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.381996][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.461131][ T1379] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.461372][ T1379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.490672][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.561880][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.563712][ T1907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.616819][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.616982][ T1907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.682035][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.072904][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.455194][ T5835] veth0_vlan: entered promiscuous mode [ 103.588704][ T5835] veth1_vlan: entered promiscuous mode [ 103.696070][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.797981][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.801177][ T5848] veth0_vlan: entered promiscuous mode [ 103.829782][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.835140][ T5835] veth0_macvtap: entered promiscuous mode [ 103.876834][ T5835] veth1_macvtap: entered promiscuous mode [ 103.886898][ T5848] veth1_vlan: entered promiscuous mode [ 104.006360][ T5836] veth0_vlan: entered promiscuous mode [ 104.019577][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.064846][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.105793][ T5836] veth1_vlan: entered promiscuous mode [ 104.129787][ T1185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.134785][ T5843] veth0_vlan: entered promiscuous mode [ 104.136150][ T1185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.143221][ T5848] veth0_macvtap: entered promiscuous mode [ 104.167140][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.193260][ T1185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.207199][ T5837] veth0_vlan: entered promiscuous mode [ 104.216610][ T5848] veth1_macvtap: entered promiscuous mode [ 104.286893][ T5843] veth1_vlan: entered promiscuous mode [ 104.364226][ T5837] veth1_vlan: entered promiscuous mode [ 104.455028][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.504799][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.516460][ T5836] veth0_macvtap: entered promiscuous mode [ 104.585162][ T5836] veth1_macvtap: entered promiscuous mode [ 104.587403][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.594451][ T1907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.594474][ T1907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.627831][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.656153][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.685415][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.735121][ T5843] veth0_macvtap: entered promiscuous mode [ 104.804830][ T1379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.804851][ T1379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.824268][ T5837] veth0_macvtap: entered promiscuous mode [ 104.830363][ T5843] veth1_macvtap: entered promiscuous mode [ 104.843364][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.927854][ T5837] veth1_macvtap: entered promiscuous mode [ 104.952457][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.069942][ T1120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.075419][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.100830][ T1120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.104428][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.131586][ T1379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.183906][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.186022][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.203884][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.203921][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.342491][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.452700][ T1379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.475214][ T1379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.490869][ T1379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.496883][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.496903][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.526120][ T1379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.583423][ T1379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.598630][ T1379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.656292][ T1379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.728996][ T1379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.927895][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.927921][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.178050][ T993] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.281073][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.281093][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.332318][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 106.397101][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.397123][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.429419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.487691][ T993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.492424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.494797][ T993] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 106.494818][ T993] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 106.494836][ T993] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 106.494854][ T993] usb 1-1: config 128 has no interface number 0 [ 106.494896][ T993] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 28, changing to 8 [ 106.494922][ T993] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33417, setting to 1024 [ 106.494947][ T993] usb 1-1: config 128 interface 127 has no altsetting 0 [ 106.547713][ T5916] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 106.664152][ T993] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 106.664180][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.664202][ T993] usb 1-1: Product: syz [ 106.664216][ T993] usb 1-1: Manufacturer: syz [ 106.664231][ T993] usb 1-1: SerialNumber: syz [ 106.771534][ T5916] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 106.771561][ T5916] usb 5-1: config 0 has no interface number 0 [ 106.771601][ T5916] usb 5-1: config 0 interface 29 has no altsetting 0 [ 106.808586][ T5916] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 106.808625][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.808645][ T5916] usb 5-1: Product: syz [ 106.808660][ T5916] usb 5-1: Manufacturer: syz [ 106.808675][ T5916] usb 5-1: SerialNumber: syz [ 107.137635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.347839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.448417][ T5916] usb 5-1: config 0 descriptor?? [ 107.667611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.567606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.569347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.656325][ T5916] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 108.657390][ T5916] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 108.657415][ T5916] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 108.657442][ T5916] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 108.936706][ T993] usb 1-1: USB disconnect, device number 2 [ 108.950398][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.950418][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.981616][ T5916] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 109.042267][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.082269][ T5916] usb 5-1: USB disconnect, device number 2 [ 109.153985][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.154006][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.212844][ T5970] syz.3.4 (5970): drop_caches: 2 [ 109.369502][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.369521][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.759522][ T990] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.969541][ T5983] netlink: 'syz.4.11': attribute type 12 has an invalid length. [ 110.035629][ T990] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.035657][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.035677][ T990] usb 1-1: Product: syz [ 110.035686][ T990] usb 1-1: Manufacturer: syz [ 110.035707][ T990] usb 1-1: SerialNumber: syz [ 110.395812][ T5989] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 110.422347][ T5989] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.157779][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 111.323400][ T31] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 111.323430][ T31] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 111.323452][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 111.323516][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.323544][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.323567][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.323622][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 111.323646][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.339195][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 111.490994][ T31] usb 3-1: config 0 descriptor?? [ 111.699822][ T990] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 112.887749][ T990] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 112.902588][ T990] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 112.902661][ T990] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.904672][ T990] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.971900][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 112.973080][ T31] lg-g15 0003:046D:C225.0001: item fetching failed at offset 0/5 [ 112.974004][ T31] lg-g15 0003:046D:C225.0001: probe with driver lg-g15 failed with error -22 [ 113.039849][ T990] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 113.096968][ T9] usb 3-1: USB disconnect, device number 2 [ 113.200787][ T990] usb 1-1: USB disconnect, device number 3 [ 113.237575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.267576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.487599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.148770][ C0] ------------[ cut here ]------------ [ 114.148794][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 114.148840][ C0] Modules linked in: [ 114.148877][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.148903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.148920][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 114.148944][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 114.148961][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 114.148978][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 114.148993][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 114.149005][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 114.149018][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 114.149032][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802813e468 [ 114.149045][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 114.149062][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.149077][ C0] CR2: 00007efd4fa71000 CR3: 0000000029d16000 CR4: 00000000003526f0 [ 114.149102][ C0] Call Trace: [ 114.149110][ C0] [ 114.149133][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.149169][ C0] call_timer_fn+0x17e/0x5f0 [ 114.149199][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.149222][ C0] ? call_timer_fn+0xbe/0x5f0 [ 114.149246][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 114.149272][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.149292][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.149311][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.149328][ C0] __run_timer_base+0x648/0x970 [ 114.149361][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 114.149405][ C0] run_timer_softirq+0xb7/0x180 [ 114.149433][ C0] handle_softirqs+0x22f/0x710 [ 114.149472][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 114.149500][ C0] run_ktimerd+0xcf/0x190 [ 114.149520][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 114.149540][ C0] ? schedule+0x91/0x360 [ 114.149565][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 114.149582][ C0] smpboot_thread_fn+0x53f/0xa60 [ 114.149602][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 114.149626][ C0] kthread+0x70e/0x8a0 [ 114.149652][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 114.149670][ C0] ? __pfx_kthread+0x10/0x10 [ 114.149715][ C0] ? __pfx_kthread+0x10/0x10 [ 114.149740][ C0] ret_from_fork+0x3f9/0x770 [ 114.149763][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 114.149788][ C0] ? __switch_to_asm+0x39/0x70 [ 114.149803][ C0] ? __switch_to_asm+0x33/0x70 [ 114.149816][ C0] ? __pfx_kthread+0x10/0x10 [ 114.149842][ C0] ret_from_fork_asm+0x1a/0x30 [ 114.149869][ C0] [ 114.149877][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.149888][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.149905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.149914][ C0] Call Trace: [ 114.149921][ C0] [ 114.149926][ C0] dump_stack_lvl+0x99/0x250 [ 114.149951][ C0] ? __asan_memcpy+0x40/0x70 [ 114.149968][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.149991][ C0] ? __pfx__printk+0x10/0x10 [ 114.150018][ C0] vpanic+0x281/0x750 [ 114.150042][ C0] ? __pfx__printk+0x10/0x10 [ 114.150058][ C0] ? __pfx_vpanic+0x10/0x10 [ 114.150081][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 114.150120][ C0] panic+0xb9/0xc0 [ 114.150143][ C0] ? __pfx_panic+0x10/0x10 [ 114.150189][ C0] __warn+0x31b/0x4b0 [ 114.150210][ C0] ? est_timer+0x6dc/0x9f0 [ 114.150227][ C0] ? est_timer+0x6dc/0x9f0 [ 114.150243][ C0] report_bug+0x2be/0x4f0 [ 114.150261][ C0] ? est_timer+0x6dc/0x9f0 [ 114.150278][ C0] ? est_timer+0x6dc/0x9f0 [ 114.150293][ C0] ? est_timer+0x6de/0x9f0 [ 114.150309][ C0] handle_bug+0x84/0x160 [ 114.150332][ C0] exc_invalid_op+0x1a/0x50 [ 114.150354][ C0] asm_exc_invalid_op+0x1a/0x20 [ 114.150368][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 114.150384][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 114.150396][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 114.150408][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 114.150419][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 114.150427][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 114.150437][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 114.150447][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802813e468 [ 114.150462][ C0] ? est_timer+0x6db/0x9f0 [ 114.150493][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.150517][ C0] call_timer_fn+0x17e/0x5f0 [ 114.150536][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.150551][ C0] ? call_timer_fn+0xbe/0x5f0 [ 114.150570][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 114.150597][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.150616][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.150634][ C0] ? __pfx_est_timer+0x10/0x10 [ 114.150659][ C0] __run_timer_base+0x648/0x970 [ 114.150701][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 114.150744][ C0] run_timer_softirq+0xb7/0x180 [ 114.150771][ C0] handle_softirqs+0x22f/0x710 [ 114.150803][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 114.150831][ C0] run_ktimerd+0xcf/0x190 [ 114.150851][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 114.150870][ C0] ? schedule+0x91/0x360 [ 114.150894][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 114.150911][ C0] smpboot_thread_fn+0x53f/0xa60 [ 114.150931][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 114.150955][ C0] kthread+0x70e/0x8a0 [ 114.150980][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 114.151002][ C0] ? __pfx_kthread+0x10/0x10 [ 114.151028][ C0] ? __pfx_kthread+0x10/0x10 [ 114.151051][ C0] ret_from_fork+0x3f9/0x770 [ 114.151072][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 114.151101][ C0] ? __switch_to_asm+0x39/0x70 [ 114.151114][ C0] ? __switch_to_asm+0x33/0x70 [ 114.151127][ C0] ? __pfx_kthread+0x10/0x10 [ 114.151150][ C0] ret_from_fork_asm+0x1a/0x30 [ 114.151176][ C0] [ 114.151548][ C0] Kernel Offset: disabled