BUG: unable to handle page fault for address: ffffffff00000190
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 5a8b067 P4D 5a8b067 PUD 0
Oops: Oops: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x186/0xe70
Code: 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 <44> 8b ab f0 01 00 00 31 ff 41 83 e5 01 44 89 ee e8 c5 4c ea ff 45
RSP: 0018:ffff8880163974c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: fffffffeffffffa0 RCX: 0000000000000002
RDX: ffff8880174d5280 RSI: ffffffff818995b7 RDI: ffffffff00000190
RBP: ffff888016397730 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555583ecf400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff00000190 CR3: 000000000dd8a000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
futex_hash_allocate+0x3e8/0x1150
futex_hash_allocate_default+0x319/0x5b0
copy_process+0x4e05/0x73c0
kernel_clone+0xea/0x7f0
__do_sys_clone+0xce/0x120
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f39247f2f41
Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
RSP: 002b:00007ffde551ac48 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f3921d67700 RCX: 00007f39247f2f41
RDX: 00007f3921d679d0 RSI: 00007f3921d672f0 RDI: 00000000003d0f00
RBP: 00007ffde551ae80 R08: 00007f3921d67700 R09: 00007f3921d67700
R10: 00007f3921d679d0 R11: 0000000000000206 R12: 00007ffde551acfe
R13: 00007ffde551acff R14: 00007f3921d67300 R15: 0000000000022000
Modules linked in:
CR2: ffffffff00000190
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x186/0xe70
Code: 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 <44> 8b ab f0 01 00 00 31 ff 41 83 e5 01 44 89 ee e8 c5 4c ea ff 45
RSP: 0018:ffff8880163974c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: fffffffeffffffa0 RCX: 0000000000000002
RDX: ffff8880174d5280 RSI: ffffffff818995b7 RDI: ffffffff00000190
RBP: ffff888016397730 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555583ecf400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff00000190 CR3: 000000000dd8a000 CR4: 0000000000350ef0
note: syz-executor.2[3939] exited with irqs disabled
note: syz-executor.2[3939] exited with preempt_count 2
BUG: unable to handle page fault for address: ffffffff00000190
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 5a8b067 P4D 5a8b067 PUD 0
Oops: Oops: 0000 [#2] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 3942 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x186/0xe70
Code: 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 <44> 8b ab f0 01 00 00 31 ff 41 83 e5 01 44 89 ee e8 c5 4c ea ff 45
RSP: 0018:ffff88804704f4c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: fffffffeffffffa0 RCX: 0000000000000002
RDX: ffff8880174d3700 RSI: ffffffff818995b7 RDI: ffffffff00000190
RBP: ffff88804704f730 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 000055558aa14400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff00000190 CR3: 000000000e210000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
futex_hash_allocate+0x3e8/0x1150
futex_hash_allocate_default+0x319/0x5b0
copy_process+0x4e05/0x73c0
kernel_clone+0xea/0x7f0
__do_sys_clone+0xce/0x120
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff0d5c69f41
Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
RSP: 002b:00007ffc7f44d9c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007ff0d31de700 RCX: 00007ff0d5c69f41
RDX: 00007ff0d31de9d0 RSI: 00007ff0d31de2f0 RDI: 00000000003d0f00
RBP: 00007ffc7f44dc00 R08: 00007ff0d31de700 R09: 00007ff0d31de700
R10: 00007ff0d31de9d0 R11: 0000000000000206 R12: 00007ffc7f44da7e
R13: 00007ffc7f44da7f R14: 00007ff0d31de300 R15: 0000000000022000
Modules linked in:
CR2: ffffffff00000190
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x186/0xe70
Code: 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 <44> 8b ab f0 01 00 00 31 ff 41 83 e5 01 44 89 ee e8 c5 4c ea ff 45
RSP: 0018:ffff8880163974c0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: fffffffeffffffa0 RCX: 0000000000000002
RDX: ffff8880174d5280 RSI: ffffffff818995b7 RDI: ffffffff00000190
RBP: ffff888016397730 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 000055558aa14400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff00000190 CR3: 000000000e210000 CR4: 0000000000350ef0
note: syz-executor.0[3942] exited with irqs disabled
note: syz-executor.0[3942] exited with preempt_count 2
kmemleak: Found object by alias at 0x607f1a62c4cc
CPU: 1 UID: 0 PID: 3941 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xca/0x120
__lookup_object+0x94/0xb0
delete_object_full+0x27/0x70
free_percpu+0x30/0x1160
futex_hash_free+0x38/0xc0
mmput+0x2d3/0x390
do_exit+0x79d/0x2970
do_group_exit+0xd3/0x2a0
__x64_sys_exit_group+0x3e/0x50
x64_sys_call+0x18c5/0x18d0
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f309aae7b19
Code: Unable to access opcode bytes at 0x7f309aae7aef.
RSP: 002b:00007fff01307788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f309aae7b19
RDX: 00007f309aa9a72b RSI: ffffffffffffffbc RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000001b2d035d88 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff01307870
kmemleak: Object (percpu) 0x607f1a62c4c8 (size 8):
kmemleak: comm "syz-executor.4", pid 3946, jiffies 4294797012
kmemleak: min_count = 1
kmemleak: count = 0
kmemleak: flags = 0x21
kmemleak: checksum = 0
kmemleak: backtrace:
pcpu_alloc_noprof+0x87a/0x1170
perf_trace_event_init+0x366/0xa10
perf_trace_init+0x1a4/0x2f0
perf_tp_event_init+0xa6/0x120
perf_try_init_event+0x140/0x9f0
perf_event_alloc.part.0+0x118e/0x45f0
__do_sys_perf_event_open+0x719/0x2c20
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
BUG: unable to handle page fault for address: ffffffff00000008
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 5a8b067 P4D 5a8b067 PUD 0
Oops: Oops: 0002 [#3] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 3946 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_trace_add+0x225/0x340
Code: 00 4d 85 ed 74 2a e8 da b2 f5 ff 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 df 00 00 00 <4d> 89 75 08 eb 03 45 31 e4 e8 ad b2 f5 ff 44 89 e0 5b 5d 41 5c 41
RSP: 0018:ffff8880470a79c8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff8880096492c0 RCX: ffffffff817e33ce
RDX: 1fffffffe0000001 RSI: ffffffff817e34a6 RDI: ffffffff00000008
RBP: ffffe8ffffc094c8 R08: ffffffff85ca3e40 R09: ffffed1008e14f80
R10: 0000000000000000 R11: 1ffff1100d9c6f7b R12: 0000000000000000
R13: ffffffff00000000 R14: ffff888009649320 R15: ffff888009649358
FS: 00007fac90cb3700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffff00000008 CR3: 000000001f060000 CR4: 0000000000350ef0
Call Trace:
event_sched_in+0x446/0xb60
merge_sched_in+0xb4d/0x1810
visit_groups_merge.constprop.0.isra.0+0x8d1/0x1150
ctx_sched_in+0x579/0x9b0
perf_event_sched_in+0x5d/0x90
----------------
Code disassembly (best guess):
0: 89 85 c8 fd ff ff mov %eax,-0x238(%rbp)
6: e8 c9 51 ea ff callq 0xffea51d4
b: 48 8d bb f0 01 00 00 lea 0x1f0(%rbx),%rdi
12: 48 89 f8 mov %rdi,%rax
15: 48 c1 e8 03 shr $0x3,%rax
19: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax
1e: 84 c0 test %al,%al
20: 74 08 je 0x2a
22: 3c 03 cmp $0x3,%al
24: 0f 8e c5 0b 00 00 jle 0xbef
* 2a: 44 8b ab f0 01 00 00 mov 0x1f0(%rbx),%r13d <-- trapping instruction
31: 31 ff xor %edi,%edi
33: 41 83 e5 01 and $0x1,%r13d
37: 44 89 ee mov %r13d,%esi
3a: e8 c5 4c ea ff callq 0xffea4d04
3f: 45 rex.RB