Warning: Permanently added '[localhost]:4341' (ECDSA) to the list of known hosts.
2025/08/29 10:14:16 fuzzer started
2025/08/29 10:14:17 dialing manager at localhost:43077
syzkaller login: [   51.581962] cgroup: Unknown subsys name 'net'
[   51.665449] cgroup: Unknown subsys name 'cpuset'
[   51.695286] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:14:28 syscalls: 2214
2025/08/29 10:14:28 code coverage: enabled
2025/08/29 10:14:28 comparison tracing: enabled
2025/08/29 10:14:28 extra coverage: enabled
2025/08/29 10:14:28 setuid sandbox: enabled
2025/08/29 10:14:28 namespace sandbox: enabled
2025/08/29 10:14:28 Android sandbox: enabled
2025/08/29 10:14:28 fault injection: enabled
2025/08/29 10:14:28 leak checking: enabled
2025/08/29 10:14:28 net packet injection: enabled
2025/08/29 10:14:28 net device setup: enabled
2025/08/29 10:14:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:14:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:14:28 USB emulation: enabled
2025/08/29 10:14:28 hci packet injection: enabled
2025/08/29 10:14:28 wifi device emulation: enabled
2025/08/29 10:14:28 802.15.4 emulation: enabled
2025/08/29 10:14:28 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:14:28 fetching corpus: 50, signal 23846/27292 (executing program)
2025/08/29 10:14:28 fetching corpus: 100, signal 39630/44241 (executing program)
2025/08/29 10:14:28 fetching corpus: 150, signal 46039/51882 (executing program)
2025/08/29 10:14:28 fetching corpus: 200, signal 50992/58018 (executing program)
2025/08/29 10:14:29 fetching corpus: 250, signal 54255/62443 (executing program)
2025/08/29 10:14:29 fetching corpus: 300, signal 57477/66764 (executing program)
2025/08/29 10:14:29 fetching corpus: 350, signal 62686/72755 (executing program)
2025/08/29 10:14:29 fetching corpus: 400, signal 66980/77875 (executing program)
2025/08/29 10:14:29 fetching corpus: 450, signal 69683/81505 (executing program)
2025/08/29 10:14:29 fetching corpus: 500, signal 72549/85175 (executing program)
2025/08/29 10:14:29 fetching corpus: 550, signal 76201/89587 (executing program)
2025/08/29 10:14:29 fetching corpus: 600, signal 78793/92936 (executing program)
2025/08/29 10:14:29 fetching corpus: 650, signal 81021/95981 (executing program)
2025/08/29 10:14:29 fetching corpus: 700, signal 81979/97822 (executing program)
2025/08/29 10:14:29 fetching corpus: 750, signal 84847/101230 (executing program)
2025/08/29 10:14:30 fetching corpus: 800, signal 87478/104380 (executing program)
2025/08/29 10:14:30 fetching corpus: 850, signal 89680/107171 (executing program)
2025/08/29 10:14:30 fetching corpus: 900, signal 91648/109690 (executing program)
2025/08/29 10:14:30 fetching corpus: 950, signal 93072/111742 (executing program)
2025/08/29 10:14:30 fetching corpus: 1000, signal 94939/114060 (executing program)
2025/08/29 10:14:30 fetching corpus: 1050, signal 97185/116574 (executing program)
2025/08/29 10:14:30 fetching corpus: 1100, signal 99240/118977 (executing program)
2025/08/29 10:14:30 fetching corpus: 1150, signal 101127/121178 (executing program)
2025/08/29 10:14:30 fetching corpus: 1200, signal 102814/123204 (executing program)
2025/08/29 10:14:30 fetching corpus: 1250, signal 104308/125122 (executing program)
2025/08/29 10:14:31 fetching corpus: 1300, signal 105906/127033 (executing program)
2025/08/29 10:14:31 fetching corpus: 1350, signal 107095/128669 (executing program)
2025/08/29 10:14:31 fetching corpus: 1400, signal 108212/130164 (executing program)
2025/08/29 10:14:31 fetching corpus: 1450, signal 109541/131767 (executing program)
2025/08/29 10:14:31 fetching corpus: 1500, signal 110432/133051 (executing program)
2025/08/29 10:14:31 fetching corpus: 1550, signal 112017/134770 (executing program)
2025/08/29 10:14:31 fetching corpus: 1600, signal 115065/137343 (executing program)
2025/08/29 10:14:31 fetching corpus: 1650, signal 116447/138925 (executing program)
2025/08/29 10:14:31 fetching corpus: 1700, signal 117647/140320 (executing program)
2025/08/29 10:14:31 fetching corpus: 1750, signal 118728/141569 (executing program)
2025/08/29 10:14:32 fetching corpus: 1800, signal 120367/143161 (executing program)
2025/08/29 10:14:32 fetching corpus: 1850, signal 121360/144354 (executing program)
2025/08/29 10:14:32 fetching corpus: 1900, signal 122322/145486 (executing program)
2025/08/29 10:14:32 fetching corpus: 1950, signal 123926/146980 (executing program)
2025/08/29 10:14:32 fetching corpus: 2000, signal 124860/148037 (executing program)
2025/08/29 10:14:32 fetching corpus: 2050, signal 126246/149253 (executing program)
2025/08/29 10:14:32 fetching corpus: 2100, signal 126782/150089 (executing program)
2025/08/29 10:14:32 fetching corpus: 2150, signal 127808/151132 (executing program)
2025/08/29 10:14:32 fetching corpus: 2200, signal 128679/152071 (executing program)
2025/08/29 10:14:33 fetching corpus: 2250, signal 129423/152909 (executing program)
2025/08/29 10:14:33 fetching corpus: 2300, signal 130217/153821 (executing program)
2025/08/29 10:14:33 fetching corpus: 2350, signal 130939/154611 (executing program)
2025/08/29 10:14:33 fetching corpus: 2400, signal 132102/155576 (executing program)
2025/08/29 10:14:33 fetching corpus: 2450, signal 133420/156609 (executing program)
2025/08/29 10:14:33 fetching corpus: 2500, signal 134102/157363 (executing program)
2025/08/29 10:14:33 fetching corpus: 2550, signal 134756/158140 (executing program)
2025/08/29 10:14:33 fetching corpus: 2600, signal 135445/158848 (executing program)
2025/08/29 10:14:33 fetching corpus: 2650, signal 136067/159543 (executing program)
2025/08/29 10:14:33 fetching corpus: 2700, signal 136650/160195 (executing program)
2025/08/29 10:14:33 fetching corpus: 2750, signal 137385/160882 (executing program)
2025/08/29 10:14:34 fetching corpus: 2800, signal 137943/161506 (executing program)
2025/08/29 10:14:34 fetching corpus: 2850, signal 138692/162136 (executing program)
2025/08/29 10:14:34 fetching corpus: 2900, signal 139494/162799 (executing program)
2025/08/29 10:14:34 fetching corpus: 2950, signal 140532/163468 (executing program)
2025/08/29 10:14:34 fetching corpus: 3000, signal 141191/164084 (executing program)
2025/08/29 10:14:34 fetching corpus: 3050, signal 141717/164555 (executing program)
2025/08/29 10:14:34 fetching corpus: 3100, signal 142323/165085 (executing program)
2025/08/29 10:14:34 fetching corpus: 3150, signal 143350/165705 (executing program)
2025/08/29 10:14:34 fetching corpus: 3200, signal 143842/166175 (executing program)
2025/08/29 10:14:34 fetching corpus: 3250, signal 144641/166777 (executing program)
2025/08/29 10:14:35 fetching corpus: 3300, signal 145118/167261 (executing program)
2025/08/29 10:14:35 fetching corpus: 3350, signal 145617/167695 (executing program)
2025/08/29 10:14:35 fetching corpus: 3400, signal 146158/168145 (executing program)
2025/08/29 10:14:35 fetching corpus: 3450, signal 146666/168541 (executing program)
2025/08/29 10:14:35 fetching corpus: 3500, signal 147110/168968 (executing program)
2025/08/29 10:14:35 fetching corpus: 3550, signal 147984/169413 (executing program)
2025/08/29 10:14:35 fetching corpus: 3600, signal 148493/169770 (executing program)
2025/08/29 10:14:35 fetching corpus: 3650, signal 149018/170118 (executing program)
2025/08/29 10:14:35 fetching corpus: 3700, signal 149425/170448 (executing program)
2025/08/29 10:14:35 fetching corpus: 3750, signal 150421/170818 (executing program)
2025/08/29 10:14:36 fetching corpus: 3800, signal 151024/171135 (executing program)
2025/08/29 10:14:36 fetching corpus: 3850, signal 151417/171430 (executing program)
2025/08/29 10:14:36 fetching corpus: 3900, signal 151933/171734 (executing program)
2025/08/29 10:14:36 fetching corpus: 3950, signal 152459/172034 (executing program)
2025/08/29 10:14:36 fetching corpus: 4000, signal 152957/172329 (executing program)
2025/08/29 10:14:36 fetching corpus: 4050, signal 153451/172622 (executing program)
2025/08/29 10:14:36 fetching corpus: 4100, signal 154177/172879 (executing program)
2025/08/29 10:14:36 fetching corpus: 4150, signal 154565/173125 (executing program)
2025/08/29 10:14:36 fetching corpus: 4200, signal 155028/173147 (executing program)
2025/08/29 10:14:36 fetching corpus: 4250, signal 155655/173147 (executing program)
2025/08/29 10:14:36 fetching corpus: 4300, signal 156070/173152 (executing program)
2025/08/29 10:14:37 fetching corpus: 4350, signal 156620/173158 (executing program)
2025/08/29 10:14:37 fetching corpus: 4400, signal 157025/173177 (executing program)
2025/08/29 10:14:37 fetching corpus: 4450, signal 157469/173186 (executing program)
2025/08/29 10:14:37 fetching corpus: 4500, signal 157850/173247 (executing program)
2025/08/29 10:14:37 fetching corpus: 4550, signal 158554/173263 (executing program)
2025/08/29 10:14:37 fetching corpus: 4600, signal 159116/173293 (executing program)
2025/08/29 10:14:37 fetching corpus: 4650, signal 159491/173300 (executing program)
2025/08/29 10:14:37 fetching corpus: 4700, signal 159846/173300 (executing program)
2025/08/29 10:14:37 fetching corpus: 4750, signal 160215/173309 (executing program)
2025/08/29 10:14:38 fetching corpus: 4800, signal 160786/173311 (executing program)
2025/08/29 10:14:38 fetching corpus: 4850, signal 161126/173312 (executing program)
2025/08/29 10:14:38 fetching corpus: 4900, signal 161527/173313 (executing program)
2025/08/29 10:14:38 fetching corpus: 4950, signal 161960/173343 (executing program)
2025/08/29 10:14:38 fetching corpus: 5000, signal 162783/173355 (executing program)
2025/08/29 10:14:38 fetching corpus: 5050, signal 163148/173362 (executing program)
2025/08/29 10:14:38 fetching corpus: 5100, signal 163534/173379 (executing program)
2025/08/29 10:14:38 fetching corpus: 5150, signal 164048/173382 (executing program)
2025/08/29 10:14:38 fetching corpus: 5200, signal 164491/173384 (executing program)
2025/08/29 10:14:38 fetching corpus: 5250, signal 164901/173387 (executing program)
2025/08/29 10:14:39 fetching corpus: 5300, signal 165375/173400 (executing program)
2025/08/29 10:14:39 fetching corpus: 5350, signal 165730/173405 (executing program)
2025/08/29 10:14:39 fetching corpus: 5400, signal 166121/173409 (executing program)
2025/08/29 10:14:39 fetching corpus: 5450, signal 166614/173425 (executing program)
2025/08/29 10:14:39 fetching corpus: 5500, signal 166963/173457 (executing program)
2025/08/29 10:14:39 fetching corpus: 5550, signal 167315/173461 (executing program)
2025/08/29 10:14:39 fetching corpus: 5600, signal 168010/173467 (executing program)
2025/08/29 10:14:39 fetching corpus: 5650, signal 168473/173468 (executing program)
2025/08/29 10:14:39 fetching corpus: 5700, signal 168982/173481 (executing program)
2025/08/29 10:14:39 fetching corpus: 5750, signal 169405/173485 (executing program)
2025/08/29 10:14:39 fetching corpus: 5800, signal 169812/173487 (executing program)
2025/08/29 10:14:40 fetching corpus: 5850, signal 170225/173496 (executing program)
2025/08/29 10:14:40 fetching corpus: 5900, signal 170541/173502 (executing program)
2025/08/29 10:14:40 fetching corpus: 5950, signal 170724/173505 (executing program)
2025/08/29 10:14:40 fetching corpus: 6000, signal 171110/173509 (executing program)
2025/08/29 10:14:40 fetching corpus: 6004, signal 171113/173509 (executing program)
2025/08/29 10:14:40 fetching corpus: 6004, signal 171113/173509 (executing program)
2025/08/29 10:14:42 starting 8 fuzzer processes
10:14:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x20, 0x5e, 0x101, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="9c6b47272c98c038e6"]}]}, 0x20}], 0x1}, 0x0)

10:14:42 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

10:14:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:14:42 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)

10:14:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x31, 0x0, &(0x7f00000018c0))

10:14:42 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'})

10:14:42 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x30}}], 0x2, 0x0)

10:14:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
read(r0, &(0x7f00000012c0)=""/210, 0xd2)

[   77.366806] audit: type=1400 audit(1756462483.093:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   78.590090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.593181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.595999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.600328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.603703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.660319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.664117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.670082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.682864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.686144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.737052] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.739009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.743497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.750863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.753277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.757900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.769025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.772966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.778288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.783100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.784254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.786131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.790032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.798216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.800946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.802090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.803663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.808116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.814788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.816539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.818822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.824200] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.827210] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.828971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.832050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.835238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.843876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.848956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.888030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.904924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   80.623944] Bluetooth: hci0: command tx timeout
[   80.752650] Bluetooth: hci1: command tx timeout
[   80.815420] Bluetooth: hci2: command tx timeout
[   80.881656] Bluetooth: hci5: command tx timeout
[   80.882187] Bluetooth: hci3: command tx timeout
[   80.942905] Bluetooth: hci7: command tx timeout
[   80.943796] Bluetooth: hci6: command tx timeout
[   80.944294] Bluetooth: hci4: command tx timeout
[   82.672623] Bluetooth: hci0: command tx timeout
[   82.799698] Bluetooth: hci1: command tx timeout
[   82.864617] Bluetooth: hci2: command tx timeout
[   82.926742] Bluetooth: hci3: command tx timeout
[   82.927189] Bluetooth: hci5: command tx timeout
[   82.990715] Bluetooth: hci4: command tx timeout
[   82.991739] Bluetooth: hci6: command tx timeout
[   82.991778] Bluetooth: hci7: command tx timeout
[   84.718641] Bluetooth: hci0: command tx timeout
[   84.846682] Bluetooth: hci1: command tx timeout
[   84.910728] Bluetooth: hci2: command tx timeout
[   84.975664] Bluetooth: hci3: command tx timeout
[   84.975727] Bluetooth: hci5: command tx timeout
[   85.038701] Bluetooth: hci7: command tx timeout
[   85.041676] Bluetooth: hci6: command tx timeout
[   85.041709] Bluetooth: hci4: command tx timeout
[   86.766892] Bluetooth: hci0: command tx timeout
[   86.894720] Bluetooth: hci1: command tx timeout
[   86.958941] Bluetooth: hci2: command tx timeout
[   87.022701] Bluetooth: hci5: command tx timeout
[   87.023449] Bluetooth: hci3: command tx timeout
[   87.086797] Bluetooth: hci4: command tx timeout
[   87.087765] Bluetooth: hci6: command tx timeout
[   87.087822] Bluetooth: hci7: command tx timeout
[  116.035147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.035816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.184542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.185627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.418313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.418945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.487479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.488070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.537728] audit: type=1400 audit(1756462522.266:8): avc:  denied  { open } for  pid=3828 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.541771] audit: type=1400 audit(1756462522.266:9): avc:  denied  { kernel } for  pid=3828 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.649239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.649986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.701167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.701829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.773250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.773890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.864422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.865571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:15:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
read(r0, &(0x7f00000012c0)=""/210, 0xd2)

[  117.086522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.087456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.132562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.133345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.209307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.210031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.242815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  117.268283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  117.279195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.279844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.302948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.304161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.339225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.339919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.393762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.394396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.426934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.427527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.487416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.488065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.635191] audit: type=1400 audit(1756462523.363:10): avc:  denied  { module_load } for  pid=3894 comm="syz-executor.7" path="/sys/kernel/notes" dev="sysfs" ino=206 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=system permissive=1
[  117.641786] Invalid ELF header magic: != ELF
[  117.807903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.809312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
10:15:23 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x30}}], 0x2, 0x0)

10:15:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x31, 0x0, &(0x7f00000018c0))

10:15:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x20, 0x5e, 0x101, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="9c6b47272c98c038e6"]}]}, 0x20}], 0x1}, 0x0)

10:15:23 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'})

10:15:23 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

10:15:23 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)

10:15:23 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
read(r0, &(0x7f00000012c0)=""/210, 0xd2)

10:15:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

[  117.871424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  117.882305] Invalid ELF header magic: != ELF
10:15:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x31, 0x0, &(0x7f00000018c0))

[  117.889031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.891960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
10:15:23 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x30}}], 0x2, 0x0)

10:15:23 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'})

10:15:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x20, 0x5e, 0x101, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="9c6b47272c98c038e6"]}]}, 0x20}], 0x1}, 0x0)

10:15:23 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)

[  117.961257] kmemleak: Found object by alias at 0x607f1a62984c
[  117.961278] CPU: 0 UID: 0 PID: 3917 Comm: syz-executor.3 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  117.961297] Tainted: [W]=WARN
[  117.961301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  117.961308] Call Trace:
[  117.961312]  <TASK>
[  117.961317]  dump_stack_lvl+0xca/0x120
[  117.961342]  __lookup_object+0x94/0xb0
[  117.961359]  delete_object_full+0x27/0x70
[  117.961380]  free_percpu+0x30/0x1160
[  117.961397]  ? arch_uprobe_clear_state+0x16/0x140
[  117.961417]  futex_hash_free+0x38/0xc0
[  117.961431]  mmput+0x2d3/0x390
[  117.961450]  do_exit+0x79d/0x2970
[  117.961463]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  117.961484]  ? zap_other_threads+0x2b9/0x3a0
[  117.961501]  ? __pfx_do_exit+0x10/0x10
[  117.961514]  ? do_group_exit+0x1c3/0x2a0
[  117.961528]  ? _raw_spin_unlock_irq+0x23/0x40
[  117.961546]  do_group_exit+0xd3/0x2a0
[  117.961561]  __x64_sys_exit_group+0x3e/0x50
[  117.961574]  x64_sys_call+0x18c5/0x18d0
[  117.961590]  do_syscall_64+0xbf/0x360
[  117.961601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.961612] RIP: 0033:0x7fba589c5b19
[  117.961621] Code: Unable to access opcode bytes at 0x7fba589c5aef.
[  117.961626] RSP: 002b:00007ffcce63cbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  117.961638] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fba589c5b19
[  117.961645] RDX: 00007fba5897872b RSI: ffffffffffffffbc RDI: 0000000000000000
[  117.961652] RBP: 0000000000000000 R08: 0000001b2d32177c R09: 0000000000000000
[  117.961659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.961665] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcce63ccc0
[  117.961680]  </TASK>
[  117.961684] kmemleak: Object (percpu) 0x607f1a629848 (size 8):
[  117.961690] kmemleak:   comm "syz-executor.4", pid 3920, jiffies 4294784783
[  117.961697] kmemleak:   min_count = 1
[  117.961701] kmemleak:   count = 0
[  117.961704] kmemleak:   flags = 0x21
[  117.961708] kmemleak:   checksum = 0
[  117.961711] kmemleak:   backtrace:
[  117.961715]  pcpu_alloc_noprof+0x87a/0x1170
[  117.961730]  perf_trace_event_init+0x366/0xa10
[  117.961743]  perf_trace_init+0x1a4/0x2f0
[  117.961754]  perf_tp_event_init+0xa6/0x120
[  117.961770]  perf_try_init_event+0x140/0x9f0
[  117.961783]  perf_event_alloc.part.0+0x118e/0x45f0
[  117.961799]  __do_sys_perf_event_open+0x719/0x2c20
[  117.961812]  do_syscall_64+0xbf/0x360
[  117.961820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.974955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  117.987840] Invalid ELF header magic: != ELF
10:15:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:15:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x31, 0x0, &(0x7f00000018c0))

10:15:24 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'})

10:15:24 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x30}}], 0x2, 0x0)

10:15:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x20, 0x5e, 0x101, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="9c6b47272c98c038e6"]}]}, 0x20}], 0x1}, 0x0)

10:15:24 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)

10:15:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
read(r0, &(0x7f00000012c0)=""/210, 0xd2)

10:15:24 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

[  118.569409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  118.574235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.582205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.587032] Invalid ELF header magic: != ELF
10:15:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:15:24 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840)

10:15:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:15:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:15:24 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

10:15:24 executing program 3:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setuid(r0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
ioprio_set$uid(0x3, r1, 0x6000)
ioprio_get$uid(0x3, 0x0)

10:15:24 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4)

10:15:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
dup2(r1, r0)
write$binfmt_script(r0, 0x0, 0xfdef)

10:15:24 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840)

10:15:24 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x3, 0x0, 0x2f, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3}]}}}}}}, 0x0)

10:15:24 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

10:15:24 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4)

10:15:24 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

10:15:24 executing program 3:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setuid(r0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
ioprio_set$uid(0x3, r1, 0x6000)
ioprio_get$uid(0x3, 0x0)

10:15:24 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4)

[  119.176927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.183189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
10:15:24 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x3, 0x0, 0x2f, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3}]}}}}}}, 0x0)

10:15:24 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000001180)=@can, 0x80, 0x0}}], 0x1, 0x24002840)

10:15:24 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

[  119.207127] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  119.208350] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  119.209047] CPU: 1 UID: 16877 PID: 3976 Comm: syz-executor.3 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  119.210027] Tainted: [W]=WARN
[  119.210790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  119.212384] RIP: 0010:perf_tp_event+0x175/0xe70
[  119.213672] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  119.218521] RSP: 0018:ffff888046a07780 EFLAGS: 00010012
[  119.220167] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900050b2000
[  119.220898] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  119.221479] RBP: ffff888046a079f0 R08: ffff88806cf31340 R09: ffffe8ffffd06848
[  119.222045] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  119.222616] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  119.223213] FS:  00007fba55f3b700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  119.223889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.224353] CR2: 00005555906abc58 CR3: 000000001e1ac000 CR4: 0000000000350ef0
[  119.224923] Call Trace:
[  119.225135]  <TASK>
[  119.225328]  ? sched_balance_newidle+0x340/0x12e0
[  119.225728]  ? __pfx_perf_tp_event+0x10/0x10
[  119.226092]  ? __lock_acquire+0xc65/0x1b70
[  119.226439]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  119.226929]  ? lock_acquire+0x15e/0x2f0
[  119.227282]  ? find_held_lock+0x2b/0x80
[  119.227620]  ? finish_task_switch.isra.0+0x201/0x840
[  119.228055]  ? finish_task_switch.isra.0+0x206/0x840
[  119.228468]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  119.228891]  ? __lock_acquire+0x694/0x1b70
[  119.229243]  ? perf_trace_run_bpf_submit+0xef/0x180
[  119.229645]  ? find_held_lock+0x2b/0x80
[  119.229968]  perf_trace_run_bpf_submit+0xef/0x180
[  119.230360]  perf_trace_preemptirq_template+0x259/0x430
[  119.230796]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  119.231268]  ? __pfx___smp_call_single_queue+0x10/0x10
[  119.231696]  ? find_held_lock+0x2b/0x80
[  119.232021]  ? try_to_wake_up+0x8ae/0x11d0
[  119.232365]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  119.232778]  trace_irq_enable.constprop.0+0xa6/0x100
[  119.233182]  trace_hardirqs_on+0x26/0x40
[  119.233516]  _raw_spin_unlock_irqrestore+0x2c/0x50
[  119.233912]  try_to_wake_up+0x8ae/0x11d0
[  119.234244]  ? __pfx_try_to_wake_up+0x10/0x10
[  119.234611]  ? plist_del+0x122/0x270
[  119.234919]  ? find_held_lock+0x2b/0x80
[  119.235246]  ? futex_wake+0x474/0x540
[  119.235559]  wake_up_q+0xa1/0x130
[  119.235847]  futex_wake+0x47e/0x540
[  119.236148]  ? __pfx_futex_wake+0x10/0x10
[  119.236482]  ? lock_acquire+0x15e/0x2f0
[  119.236806]  ? avc_has_perm_noaudit+0x11b/0x3d0
[  119.237189]  do_futex+0x26d/0x370
[  119.237481]  ? __pfx_do_futex+0x10/0x10
[  119.237805]  __x64_sys_futex+0x1c9/0x4d0
[  119.238135]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  119.238607]  ? __pfx___x64_sys_futex+0x10/0x10
[  119.238979]  ? __do_sys_ioprio_get+0x3bd/0x1290
[  119.239360]  ? __do_sys_ioprio_get+0xca/0x1290
[  119.239733]  do_syscall_64+0xbf/0x360
[  119.240042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.240455] RIP: 0033:0x7fba589c5b19
[  119.240755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  119.242194] RSP: 002b:00007fba55f3b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  119.242796] RAX: ffffffffffffffda RBX: 00007fba58ad8f68 RCX: 00007fba589c5b19
[  119.243363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba58ad8f6c
[  119.243930] RBP: 00007fba58ad8f60 R08: 000000000000000e R09: 0000000000000000
[  119.244493] R10: 0000000000006000 R11: 0000000000000246 R12: 00007fba58ad8f6c
[  119.245061] R13: 00007ffcce63c9af R14: 00007fba55f3b300 R15: 0000000000022000
[  119.245640]  </TASK>
[  119.245830] Modules linked in:
[  119.246093] ---[ end trace 0000000000000000 ]---
[  119.246468] RIP: 0010:perf_tp_event+0x175/0xe70
[  119.246848] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  119.248295] RSP: 0018:ffff888046a07780 EFLAGS: 00010012
[  119.248720] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900050b2000
[  119.249298] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  119.249864] RBP: ffff888046a079f0 R08: ffff88806cf31340 R09: ffffe8ffffd06848
[  119.250427] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  119.250993] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  119.251558] FS:  00007fba55f3b700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  119.252199] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.252665] CR2: 00005555906abc58 CR3: 000000001e1ac000 CR4: 0000000000350ef0
[  119.253244] note: syz-executor.3[3976] exited with irqs disabled
[  119.253790] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  119.254677] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  119.255363] CPU: 1 UID: 16877 PID: 3976 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  119.256329] Tainted: [D]=DIE, [W]=WARN
[  119.256635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  119.257292] RIP: 0010:perf_tp_event+0x175/0xe70
[  119.257676] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  119.259104] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012
[  119.259529] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  119.260091] RDX: ffff888016f13700 RSI: ffffffff818995b7 RDI: 0000000100000190
[  119.260657] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd06848
[  119.261227] R10: 0000000000000000 R11: ffff88801a186898 R12: dffffc0000000000
[  119.261795] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[  119.262360] FS:  00007fba55f3b700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  119.262993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.263460] CR2: 00005555906abc58 CR3: 000000001e1ac000 CR4: 0000000000350ef0
[  119.264033] Call Trace:
[  119.264243]  <IRQ>
[  119.264423]  ? __pfx_perf_tp_event+0x10/0x10
[  119.264786]  ? enqueue_task_fair+0xded/0x1e00
[  119.265148]  ? check_preempt_wakeup_fair+0x6e/0x950
[  119.265557]  ? wakeup_preempt+0x140/0x2a0
[  119.265891]  ? lock_release+0x1c7/0x290
[  119.266210]  ? lock_release+0x1c7/0x290
[  119.266533]  ? do_raw_spin_unlock+0x53/0x220
[  119.266893]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  119.267301]  ? try_to_wake_up+0x8ae/0x11d0
[  119.267645]  ? do_raw_spin_lock+0x123/0x260
[  119.267995]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  119.268374]  ? perf_trace_run_bpf_submit+0xef/0x180
[  119.268775]  perf_trace_run_bpf_submit+0xef/0x180
[  119.269169]  perf_trace_preemptirq_template+0x259/0x430
[  119.269607]  ? read_tsc+0x9/0x20
[  119.269891]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  119.270367]  ? clockevents_program_event+0x135/0x360
[  119.270778]  ? tick_program_event+0xac/0x140
[  119.271124]  ? handle_softirqs+0x16e/0x770
[  119.271475]  trace_irq_enable.constprop.0+0xa6/0x100
[  119.271879]  trace_hardirqs_on+0x26/0x40
[  119.272207]  handle_softirqs+0x16e/0x770
[  119.272546]  __irq_exit_rcu+0xc4/0x100
[  119.272866]  irq_exit_rcu+0x9/0x20
[  119.273159]  sysvec_apic_timer_interrupt+0x70/0x80
[  119.273572]  </IRQ>
[  119.273758]  <TASK>
[  119.273943]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.274361] RIP: 0010:make_task_dead+0xa2/0x3b0
[  119.274745] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  119.276192] RSP: 0018:ffff888046a07f28 EFLAGS: 00000246
[  119.276614] RAX: 0000000000000001 RBX: ffff888016f13700 RCX: ffffffff817c2b86
[  119.277179] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  119.277754] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  119.278319] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888016f13700
[  119.278888] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  119.279456]  ? trace_irq_enable.constprop.0+0x26/0x100
[  119.279876]  ? make_task_dead+0x214/0x3b0
[  119.280214]  ? make_task_dead+0x214/0x3b0
[  119.280549]  ? do_syscall_64+0xbf/0x360
[  119.280871]  rewind_stack_and_make_dead+0x16/0x20
[  119.281271] RIP: 0033:0x7fba589c5b19
[  119.281569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  119.283018] RSP: 002b:00007fba55f3b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  119.283618] RAX: ffffffffffffffda RBX: 00007fba58ad8f68 RCX: 00007fba589c5b19
[  119.284186] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba58ad8f6c
[  119.284745] RBP: 00007fba58ad8f60 R08: 000000000000000e R09: 0000000000000000
[  119.285323] R10: 0000000000006000 R11: 0000000000000246 R12: 00007fba58ad8f6c
[  119.285888] R13: 00007ffcce63c9af R14: 00007fba55f3b300 R15: 0000000000022000
[  119.286454]  </TASK>
[  119.286648] Modules linked in:
[  119.286916] ---[ end trace 0000000000000000 ]---
[  119.287293] RIP: 0010:perf_tp_event+0x175/0xe70
[  119.287682] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  119.289147] RSP: 0018:ffff888046a07780 EFLAGS: 00010012
[  119.289578] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900050b2000
[  119.290147] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  119.290713] RBP: ffff888046a079f0 R08: ffff88806cf31340 R09: ffffe8ffffd06848
[  119.291277] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  119.291840] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  119.292406] FS:  00007fba55f3b700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  119.293041] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.293617] CR2: 00005555906abc58 CR3: 000000001e1ac000 CR4: 0000000000350ef0
[  119.294187] Kernel panic - not syncing: Fatal exception in interrupt
[  119.294897] Kernel Offset: disabled
[  119.295189] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:15:25  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffffff8647a7b8 RCX=ffffffff8100012f RDX=0000000000000002
RSI=ffffffff867ba066 RDI=ffffffff8647a7ac RBP=ffffffff8647a7ac RSP=ffff8880171ff7d0
R8 =ffffffff867ba066 R9 =0000000000000000 R10=000000000003be53 R11=0000000000000003
R12=ffffffff8647a7b4 R13=ffffffff8647a7ac R14=ffffffff8647a7ac R15=dffffc0000000000
RIP=ffffffff813579f8 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f952f7f88c0 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f412522f3a4 CR3=000000000c43e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005640c106aa2000005640c106aa00
XMM06=00005640c1042e5000000003ffffffff XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888046a070f0
R8 =0000000000000000 R9 =ffffed100148f046 R10=0000000000000030 R11=313030203a505352
R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fba55f3b700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555906abc58 CR3=000000001e1ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fba58aac7c000007fba58aac7c8
XMM02=00007fba58aac7e000007fba58aac7c0 XMM03=00007fba58aac7c800007fba58aac7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000