Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 3954 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00005555768e7400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f835efd0019 CR3: 000000000eae7000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
kmemleak: Found object by alias at 0x607f1a63df7c
CPU: 1 UID: 0 PID: 3962 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xca/0x120
__lookup_object+0x94/0xb0
delete_object_full+0x27/0x70
free_percpu+0x30/0x1160
futex_hash_free+0x38/0xc0
mmput+0x2d3/0x390
do_exit+0x79d/0x2970
do_group_exit+0xd3/0x2a0
__x64_sys_exit_group+0x3e/0x50
x64_sys_call+0x18c5/0x18d0
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff79bb19
Code: Unable to access opcode bytes at 0x7f7bff79baef.
RSP: 002b:00007ffc7ef45bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f7bff79bb19
RDX: 00007f7bff74e72b RSI: ffffffffffffffbc RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc7ef45ce0
kmemleak: Object (percpu) 0x607f1a63df78 (size 8):
kmemleak: comm "syz-executor.4", pid 3958, jiffies 4294782583
kmemleak: min_count = 1
kmemleak: count = 0
kmemleak: flags = 0x21
kmemleak: checksum = 0
kmemleak: backtrace:
pcpu_alloc_noprof+0x87a/0x1170
perf_trace_event_init+0x366/0xa10
perf_trace_init+0x1a4/0x2f0
perf_tp_event_init+0xa6/0x120
perf_try_init_event+0x140/0x9f0
perf_event_alloc.part.0+0x118e/0x45f0
__do_sys_perf_event_open+0x719/0x2c20
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
arch_jump_label_transform_queue+0x70/0x110
__jump_label_update+0x12e/0x410
jump_label_update+0x376/0x550
static_key_disable_cpuslocked+0x15a/0x1c0
static_key_disable+0x1a/0x20
tracepoint_probe_unregister+0x711/0xc90
trace_event_reg+0x185/0x350
perf_trace_event_unreg.isra.0+0xae/0x1d0
perf_trace_destroy+0xc8/0x1c0
__free_event+0x255/0xc20
perf_event_release_kernel+0x3ef/0x540
perf_release+0x31/0x40
__fput+0x401/0xb50
fput_close_sync+0x10f/0x240
__x64_sys_close+0x8f/0x120
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4fb834772b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffff70a80a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4fb834772b
RDX: 00007f4fb84acbb8 RSI: ffffffff84bb774c RDI: 0000000000000003
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d7241d4
R10: 0000000000001a85 R11: 0000000000000293 R12: 000000000001c3d4
R13: 00000000000003e8 R14: 00007f4fb84a7f60 R15: 000000000001c3c9
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00005555768e7400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f835efd0019 CR3: 000000000eae7000 CR4: 0000000000350ef0
note: syz-executor.4[3954] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 3961 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888045d4f980 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: ffffc9000262c000
RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff888045d4fbf0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f57d2534700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000014377000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
snd_timer_user_ioctl+0x4a/0xd0
__x64_sys_ioctl+0x18f/0x210
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f57d4fbeb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f57d2534188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f57d50d1f60 RCX: 00007f57d4fbeb19
RDX: 0000000020000140 RSI: 0000000040485404 RDI: 0000000000000004
RBP: 00007f57d5018f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe99527b0f R14: 00007f57d2534300 R15: 0000000000022000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f57d2534700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000014377000 CR4: 0000000000350ef0
note: syz-executor.1[3961] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 3960 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800fd3f6c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800fcb0000 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88800fd3f930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
kmemleak: Found object by alias at 0x607f1a63e1c4
CPU: 1 UID: 0 PID: 3965 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xca/0x120
__lookup_object+0x94/0xb0
delete_object_full+0x27/0x70
free_percpu+0x30/0x1160
futex_hash_free+0x38/0xc0
mmput+0x2d3/0x390
do_exit+0x79d/0x2970
do_group_exit+0xd3/0x2a0
get_signal+0x2315/0x2340
arch_do_signal_or_restart+0x80/0x790
exit_to_user_mode_loop+0x8b/0x110
do_syscall_64+0x2f7/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6c27a9bb19
Code: Unable to access opcode bytes at 0x7f6c27a9baef.
RSP: 002b:00007f6c25011218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f6c27baef68 RCX: 00007f6c27a9bb19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c27baef68
RBP: 00007f6c27baef60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c27baef6c
R13: 00007ffc275b9e9f R14: 00007f6c25011300 R15: 0000000000022000
kmemleak: Object (percpu) 0x607f1a63e1c0 (size 8):
kmemleak: comm "syz-executor.1", pid 3961, jiffies 4294782590
kmemleak: min_count = 1
kmemleak: count = 0
kmemleak: flags = 0x21
kmemleak: checksum = 0
kmemleak: backtrace:
pcpu_alloc_noprof+0x87a/0x1170
perf_trace_event_init+0x366/0xa10
perf_trace_init+0x1a4/0x2f0
perf_tp_event_init+0xa6/0x120
perf_try_init_event+0x140/0x9f0
perf_event_alloc.part.0+0x118e/0x45f0
__do_sys_perf_event_open+0x719/0x2c20
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
FS: 0000555566b0e400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044bc7000 CR4: 0000000000350ef0
Call Trace:
kmemleak: Cannot insert 0x607f1a63df7c into the object search tree (overlaps existing)
CPU: 1 UID: 0 PID: 3971 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xca/0x120
__link_object+0x190/0x210
__create_object+0x48/0x80
pcpu_alloc_noprof+0x87a/0x1170
__percpu_init_rwsem+0x2d/0x160
alloc_super+0x29e/0xb80
sget_fc+0xfe/0xb80
get_tree_nodev+0x28/0x190
vfs_get_tree+0x93/0x340
path_mount+0x132d/0x1dd0
__x64_sys_mount+0x27b/0x300
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff79bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7bfcd11188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f7bff8aef60 RCX: 00007f7bff79bb19
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000
RBP: 00007f7bff7f5f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc7ef459cf R14: 00007f7bfcd11300 R15: 0000000000022000
kmemleak: Kernel memory leak detector disabled
kmemleak: Object (percpu) 0x607f1a63df78 (size 8):
kmemleak: comm "syz-executor.4", pid 3958, jiffies 4294782583
kmemleak: min_count = 1
kmemleak: count = 0
kmemleak: flags = 0x21
kmemleak: checksum = 0
kmemleak: backtrace:
pcpu_alloc_noprof+0x87a/0x1170
perf_trace_event_init+0x366/0xa10
perf_trace_init+0x1a4/0x2f0
perf_tp_event_init+0xa6/0x120
perf_try_init_event+0x140/0x9f0
perf_event_alloc.part.0+0x118e/0x45f0
__do_sys_perf_event_open+0x719/0x2c20
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
__set_oom_adj.isra.0+0x68/0xf40
oom_score_adj_write+0x1ba/0x200
vfs_write+0x2b7/0x1150
ksys_write+0x121/0x240
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f835ef285ff
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
RSP: 002b:00007ffce067f920 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f835ef285ff
RDX: 0000000000000004 RSI: 00007ffce067f970 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffce067f8c0
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f835efcfff5
R13: 00007ffce067f970 R14: 0000000000000000 R15: 00007ffce067ff10
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#4] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
CPU: 1 UID: 0 PID: 175 Comm: in:imklog Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018fff440 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RDX: ffff888016e0b700 RSI: ffffffff8189a4e7 RDI: 0000000200000190
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff888018fff6b0 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 00007f1726d07700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 000000000d4c6000 CR4: 0000000000350ef0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
Call Trace:
FS: 0000555566b0e400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044bc7000 CR4: 0000000000350ef0
note: syz-executor.6[3960] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
syslog_print+0x244/0x5c0
do_syslog.part.0+0x20b/0x5b0
do_syslog+0xcd/0x110
kmsg_read+0x8e/0xc0
proc_reg_read+0x120/0x310
vfs_read+0x1eb/0xc70
ksys_read+0x121/0x240
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f172774a08c
Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf fc ff ff 48
RSP: 002b:00007f1726ce64d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f172774a08c
RDX: 0000000000001fa0 RSI: 00007f1726ce6d00 RDI: 0000000000000005
RBP: 000055940c5ff4c0 R08: 0000000000000000 R09: 000055940c5fbe88
R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007f1726ce6d00
R13: 0000000000001fa0 R14: 00007f1726ce6d00 R15: 00007f1726ce71ea
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#5] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: mld mld_dad_work
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RSP: 0018:ffff8880095e7700 EFLAGS: 00010212
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RDX: ffff8880095d8000 RSI: ffffffff8189a4e7 RDI: 0000000000000192
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
RBP: ffff8880095e7970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044bc7000 CR4: 0000000000350ef0
Call Trace:
FS: 00007f1726d07700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 000000000d4c6000 CR4: 0000000000350ef0
note: in:imklog[175] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
mld_dad_work+0x2a/0x1e0
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#6] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
CPU: 1 UID: 0 PID: 49 Comm: kworker/u10:2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RSP: 0018:ffff88800afb7700 EFLAGS: 00010212
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800afa8000 RSI: ffffffff8189a4e7 RDI: 0000000200000190
RBP: ffff88800afb7970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
CR2: 00007fab049b99c0 CR3: 000000000d4c6000 CR4: 0000000000350ef0
Call Trace:
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044bc7000 CR4: 0000000000350ef0
note: kworker/0:0[9] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#7] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 0 UID: 0 PID: 3874 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RSP: 0018:ffff888044a976c0 EFLAGS: 00010212
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RDX: ffff888015e11b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff888044a97930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
FS: 00007f5aff3348c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044ba9000 CR4: 0000000000350ef0
CR2: 00007fab049b99c0 CR3: 000000000d4c6000 CR4: 0000000000350ef0
Call Trace:
note: kworker/u10:2[49] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5aff7f30d6
Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24
RSP: 002b:00007ffe67d67168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 0000564d56f926d0 RCX: 00007f5aff7f30d6
RDX: 0000000000000002 RSI: 0000564d56fb5770 RDI: 0000000000000003
RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000004
R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000002 R14: 0000564d2ece32e6 R15: 0000000000000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#8] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 1 UID: 60929 PID: 3964 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [D]=DIE, [W]=WARN
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RSP: 0018:ffff88800a2f7640 EFLAGS: 00010212
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RDX: ffff888044d8d280 RSI: ffffffff8189a4e7 RDI: 0000000200000190
RBP: ffff88800a2f78b0 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f8b03cd8700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
FS: 00007f5aff3348c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CR2: 00007fab049b99c0 CR3: 0000000016a34000 CR4: 0000000000350ef0
Call Trace:
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000044ba9000 CR4: 0000000000350ef0
note: systemd-udevd[3874] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
perf_event_exit_task+0x46/0x510
do_exit+0x626/0x2970
do_group_exit+0xd3/0x2a0
get_signal+0x2315/0x2340
arch_do_signal_or_restart+0x80/0x790
exit_to_user_mode_loop+0x8b/0x110
do_syscall_64+0x2f7/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8b06762b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f8b03cd8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f8b06875f68 RCX: 00007f8b06762b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b06875f68
RBP: 00007f8b06875f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b06875f6c
R13: 00007ffc535ed0bf R14: 00007f8b03cd8300 R15: 0000000000022000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#9] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 0 UID: 0 PID: 286 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880175bf6c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88801c118000 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff8880175bf930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555588162400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003ea6a000 CR4: 0000000000350ef0
Call Trace:
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
anon_pipe_write+0x12a/0x1a80
vfs_write+0xbe9/0x1150
ksys_write+0x1ef/0x240
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f69e3c045ff
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
RSP: 002b:00007fff1a646130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f69e3c045ff
RDX: 000000000000000c RSI: 00007fff1a646220 RDI: 00000000000000f8
RBP: 00007fff1a6461bc R08: 0000000000000000 R09: 00007f69e3d41000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 000000000001c3cc R14: 0000000000000002 R15: 00007fff1a646220
Modules linked in:
---[ end trace 0000000000000000 ]---
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RIP: 0010:perf_tp_event+0x175/0xe70
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
FS: 00007f8b03cd8700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555588162400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003ea6a000 CR4: 0000000000350ef0
note: syz-executor.5[286] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#10] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 3970 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018e27880 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff888017659b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff888018e27af0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00005555562b1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
Call Trace:
CR2: 00007fab049b99c0 CR3: 0000000016a34000 CR4: 0000000000350ef0
note: syz-executor.0[3964] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
perf_event_exit_task+0x46/0x510
do_exit+0x626/0x2970
Fixing recursive fault but reboot is needed!
do_group_exit+0xd3/0x2a0
__x64_sys_exit_group+0x3e/0x50
x64_sys_call+0x18c5/0x18d0
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff79bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc7ef45bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f7bff79bb19
RDX: 00007f7bff74e72b RSI: ffffffffffffffbc RDI: 0000000000000000
RBP: 0000000000000000 R08: 00007f7bff8b31d0 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc7ef45ce0
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#11] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 1 UID: 0 PID: 359 Comm: kworker/u9:6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RSP: 0018:ffff888016917700 EFLAGS: 00010212
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RDX: ffff888015de3700 RSI: ffffffff8189a4e7 RDI: 0000000200000190
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RBP: ffff888016917970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000044bc7000 CR4: 0000000000350ef0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
Call Trace:
FS: 00005555562b1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
note: syz-executor.2[3970] exited with preempt_count 2
Fixing recursive fault but reboot is needed!
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#12] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 0 UID: 0 PID: 346 Comm: kworker/u10:5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800f227700 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff888015edb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88800f227970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
Call Trace:
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RIP: 0010:perf_tp_event+0x175/0xe70
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
note: kworker/u10:5[346] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#13] SMP KASAN NOPTI
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 97 Comm: systemd-journal Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888015e0f6c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff888015e10000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888015e0f930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007fab054b2900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000c71c000 CR4: 0000000000350ef0
Call Trace:
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
CR2: 00007fab049b99c0 CR3: 0000000044bc7000 CR4: 0000000000350ef0
note: kworker/u9:6[359] exited with preempt_count 2
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fab05d7b116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce70cc0e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 00005649b9184360 RCX: 00007fab05d7b116
RDX: 0000000000000015 RSI: 00005649b918a8b0 RDI: 0000000000000008
RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007fab06107000
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 0000000000000015 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#14] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
CPU: 1 UID: 0 PID: 25 Comm: kworker/u9:0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RIP: 0010:perf_tp_event+0x175/0xe70
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800976f700 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RDX: ffff888009751b80 RSI: ffffffff8189a4e7 RDI: 0000000200000190
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RBP: ffff88800976f970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
FS: 00007fab054b2900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CR2: 00007fab049b99c0 CR3: 0000000044bc7000 CR4: 0000000000350ef0
Call Trace:
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000c71c000 CR4: 0000000000350ef0
note: systemd-journal[97] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#15] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 44 Comm: kworker/u10:1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800a47f700 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff88800a315280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88800a47f970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003d444000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
---[ end trace 0000000000000000 ]---
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RIP: 0010:perf_tp_event+0x175/0xe70
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003d444000 CR4: 0000000000350ef0
note: kworker/u10:1[44] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#16] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 3971 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
CR2: 00007fab049b99c0 CR3: 0000000044bc7000 CR4: 0000000000350ef0
RIP: 0010:perf_tp_event+0x175/0xe70
note: kworker/u9:0[25] exited with preempt_count 2
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018c27640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff88801765d280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888018c278b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f7bfcd11700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
perf_event_exit_task+0x46/0x510
do_exit+0x626/0x2970
do_group_exit+0xd3/0x2a0
get_signal+0x2315/0x2340
arch_do_signal_or_restart+0x80/0x790
exit_to_user_mode_loop+0x8b/0x110
do_syscall_64+0x2f7/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff79bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7bfcd11218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f7bff8aef68 RCX: 00007f7bff79bb19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bff8aef68
RBP: 00007f7bff8aef60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7bff8aef6c
R13: 00007ffc7ef459cf R14: 00007f7bfcd11300 R15: 0000000000022000
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0040000032: 0000 [#17] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000200000190-0x0000000200000197]
CPU: 1 UID: 0 PID: 203 Comm: kworker/u8:2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RIP: 0010:perf_tp_event+0x175/0xe70
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Workqueue: ipv6_addrconf addrconf_dad_work
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RIP: 0010:perf_tp_event+0x175/0xe70
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RSP: 0018:ffff888016a4f680 EFLAGS: 00010212
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RAX: 0000000040000032 RBX: 00000001ffffffa0 RCX: 0000000000000002
RDX: ffff888014609b80 RSI: ffffffff8189a4e7 RDI: 0000000200000190
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RBP: ffff888016a4f8f0 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
FS: 00007f7bfcd11700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CR2: 0000000000000000 CR3: 0000000043dd8000 CR4: 0000000000350ef0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000014377000 CR4: 0000000000350ef0
note: syz-executor.2[3971] exited with preempt_count 2
Call Trace:
Fixing recursive fault but reboot is needed!
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
addrconf_dad_work+0xf6/0x11a0
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#18] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 423 Comm: kworker/u9:8 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018e77700 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff888017620000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888018e77970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000041d3b000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
RIP: 0010:perf_tp_event+0x175/0xe70
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
ret_from_fork+0x34b/0x430
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
ret_from_fork_asm+0x1a/0x30
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
Modules linked in:
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
---[ end trace 0000000000000000 ]---
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
RIP: 0010:perf_tp_event+0x175/0xe70
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
CR2: 00007fab049b99c0 CR3: 0000000014377000 CR4: 0000000000350ef0
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000041d3b000 CR4: 0000000000350ef0
note: kworker/u9:8[423] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#19] SMP KASAN NOPTI
note: kworker/u8:2[203] exited with preempt_count 2
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f1
CPU: 0 UID: 0 PID: 337 Comm: kworker/u9:4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f1
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
flags: 0x100000000000000(node=0|zone=1)
Workqueue: events_unbound cfg80211_wiphy_work
page_type: f9(unknown)
RIP: 0010:perf_tp_event+0x175/0xe70
raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
RSP: 0018:ffff88801743f700 EFLAGS: 00010212
page dumped because: nonzero mapcount
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880160b1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
Modules linked in:
RBP: ffff88801743f970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f2
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f2
CR2: 0000000000000000 CR3: 000000003ceb8000 CR4: 0000000000350ef0
flags: 0x100000000000000(node=0|zone=1)
Call Trace:
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea000028bc90 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f3
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f3
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea000028bcc8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
perf_trace_run_bpf_submit+0xef/0x180
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f4
perf_trace_contention_begin+0x235/0x3e0
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f4
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea000028bd08 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
trace_contention_begin+0xae/0x110
page dumped because: nonzero mapcount
__mutex_lock+0x14b/0x1020
Modules linked in:
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f5
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f5
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea000028bd48 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
cfg80211_wiphy_work+0x7e/0x480
Modules linked in:
process_one_work+0x8e1/0x19c0
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f6
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f6
flags: 0x100000000000000(node=0|zone=1)
worker_thread+0x67e/0xe90
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea000028bd88 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
kthread+0x3c8/0x740
page dumped because: nonzero mapcount
Modules linked in:
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process ksoftirqd/1 pfn:0a2f7
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa2f7
ret_from_fork+0x34b/0x430
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
ret_from_fork_asm+0x1a/0x30
raw: 0100000000000000 0000000000000000 ffffea000028bdc8 0000000000000000
Modules linked in:
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
---[ end trace 0000000000000000 ]---
page dumped because: nonzero mapcount
RIP: 0010:perf_tp_event+0x175/0xe70
Modules linked in:
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
run_ksoftirqd+0x2e/0x60
smpboot_thread_fn+0x41d/0x9d0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#20] SMP KASAN NOPTI
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 3975 Comm: syz-executor.2 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RIP: 0010:perf_tp_event+0x175/0xe70
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RSP: 0018:ffff888015cb7640 EFLAGS: 00010212
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016368000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888015cb78b0 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 00007f7bfccf0700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000043dd8000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
perf_event_exit_task+0x46/0x510
do_exit+0x626/0x2970
do_group_exit+0xd3/0x2a0
get_signal+0x2315/0x2340
arch_do_signal_or_restart+0x80/0x790
exit_to_user_mode_loop+0x8b/0x110
ret_from_fork+0x3ac/0x430
ret_from_fork_asm+0x1a/0x30
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003ceb8000 CR4: 0000000000350ef0
Modules linked in:
note: kworker/u9:4[337] exited with preempt_count 2
---[ end trace 0000000000000000 ]---
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#21] SMP KASAN NOPTI
RIP: 0010:perf_tp_event+0x175/0xe70
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 41 Comm: kworker/R-ata_s Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800a31f7c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff88800a310000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88800a31fa30 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003ceb8000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
worker_attach_to_pool+0x25/0x3c0
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
rescuer_thread+0x367/0xd60
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f7bfccf0700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kthread+0x3c8/0x740
CR2: 00007fab049b99c0 CR3: 0000000043dd8000 CR4: 0000000000350ef0
note: syz-executor.2[3975] exited with preempt_count 2
Fixing recursive fault but reboot is needed!
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#22] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 26 Comm: kworker/u10:0 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888009777700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888009753700 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888009777970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000044ba9000 CR4: 0000000000350ef0
Call Trace:
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
perf_trace_run_bpf_submit+0xef/0x180
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
perf_trace_contention_end+0x235/0x3e0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
trace_contention_end+0xae/0x110
CR2: 0000000000000000 CR3: 000000003ceb8000 CR4: 0000000000350ef0
__mutex_lock+0x166/0x1020
note: kworker/R-ata_s[41] exited with preempt_count 2
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#23] SMP KASAN NOPTI
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 58 Comm: kworker/0:2 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: 0x0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
(events)
RIP: 0010:perf_tp_event+0x175/0xe70
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RSP: 0018:ffff88800faa7780 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
CR2: 00007fab049b99c0 CR3: 0000000044ba9000 CR4: 0000000000350ef0
RDX: ffff88800fa19b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88800faa79f0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
note: kworker/u10:0[26] exited with preempt_count 2
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000005a88000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
worker_attach_to_pool+0x25/0x3c0
create_worker+0x2a9/0x800
worker_thread+0x956/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#24] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 357 Comm: kworker/u9:5 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880193df700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888015de0000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff8880193df970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000041d3b000 CR4: 0000000000350ef0
Call Trace:
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
perf_trace_run_bpf_submit+0xef/0x180
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
perf_trace_contention_end+0x235/0x3e0
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
trace_contention_end+0xae/0x110
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
__mutex_lock+0x166/0x1020
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000005a88000 CR4: 0000000000350ef0
note: kworker/0:2[58] exited with preempt_count 2
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#25] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 17 Comm: rcu_exp_gp_kthr Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800963f7c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff888009630000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88800963fa30 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000043c35000 CR4: 0000000000350ef0
Call Trace:
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
perf_trace_run_bpf_submit+0xef/0x180
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
perf_trace_contention_begin+0x235/0x3e0
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
trace_contention_begin+0xae/0x110
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
__mutex_lock+0x14b/0x1020
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fab049b99c0 CR3: 0000000041d3b000 CR4: 0000000000350ef0
note: kworker/u9:5[357] exited with preempt_count 2
kworker/u9:0 (25) used greatest stack depth: 23968 bytes left
rcu_exp_wait_wake+0x129/0x1390
kthread_worker_fn+0x2b5/0xad0
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#26] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 107 Comm: kworker/u9:3 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RIP: 0010:perf_tp_event+0x175/0xe70
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Workqueue: events_unbound cfg80211_wiphy_work
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RIP: 0010:perf_tp_event+0x175/0xe70
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RSP: 0018:ffff8880179af700 EFLAGS: 00010212
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016448000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RBP: ffff8880179af970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CR2: 0000000000000000 CR3: 0000000043c35000 CR4: 0000000000350ef0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
note: rcu_exp_gp_kthr[17] exited with preempt_count 2
CR2: 00007fab049b99c0 CR3: 0000000041d3b000 CR4: 0000000000350ef0
Call Trace:
BUG: Bad page state in process syz-fuzzer pfn:18e21
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e21
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
perf_trace_run_bpf_submit+0xef/0x180
page dumped because: nonzero mapcount
perf_trace_contention_end+0x235/0x3e0
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e22
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e22
trace_contention_end+0xae/0x110
flags: 0x100000000000000(node=0|zone=1)
__mutex_lock+0x166/0x1020
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000638890 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e23
cfg80211_wiphy_work+0x7e/0x480
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e23
process_one_work+0x8e1/0x19c0
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea00006388c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
worker_thread+0x67e/0xe90
page dumped because: nonzero mapcount
Modules linked in:
kthread+0x3c8/0x740
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e24
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e24
ret_from_fork+0x34b/0x430
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
ret_from_fork_asm+0x1a/0x30
raw: 0100000000000000 0000000000000000 ffffea0000638908 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
Modules linked in:
---[ end trace 0000000000000000 ]---
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e25
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e25
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000638948 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e26
RIP: 0010:perf_tp_event+0x175/0xe70
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e26
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000638988 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
BUG: Bad page state in process syz-fuzzer pfn:18e27
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e27
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea00006389c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 273 Comm: syz-fuzzer Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x39/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7e19f1
Code: 24 10 48 8d 6c 24 10 48 8b 4c 24 50 48 8b 54 24 30 48 39 d1 77 50 48 8b 54 24 48 48 39 d1 77 41 48 8b 44 24 38 48 8b 54 24 20 <31> db eb 03 48 ff c3 48 39 cb 7d 1c 0f b6 34 1a 0f b6 3c 18 40 38
RSP: 002b:000000c0005c5420 EFLAGS: 00000293
RAX: 000000c00034217b RBX: 0000000000008983 RCX: 00000000000000b1
RDX: 000000c00033d67d RSI: 000000c000336000 RDI: 000000c00033d67d
RBP: 000000c0005c5430 R08: 0000000000000006 R09: 0000000000000e33
R10: 0000000000000022 R11: 00000000000000b1 R12: 000000000000767d
R13: 0000000000003e85 R14: 000000000000417b R15: 000000000000767d
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#27] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
CPU: 0 UID: 0 PID: 344 Comm: kworker/u10:4 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RSP: 0018:ffff888017497700 EFLAGS: 00010212
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
RDX: ffff888018df8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888017497970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000003d444000 CR4: 0000000000350ef0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Call Trace:
CR2: 00007fab049b99c0 CR3: 0000000041d3b000 CR4: 0000000000350ef0
note: kworker/u9:3[107] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#28] SMP KASAN NOPTI
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RIP: 0010:perf_tp_event+0x175/0xe70
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800d4d77c0 EFLAGS: 00010212
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff88801906b700 RSI: ffffffff8189a4e7 RDI: 0000000100000190
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
RBP: ffff88800d4d7a30 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 00005555651a4400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 0000000014377000 CR4: 0000000000350ef0
CR2: 0000000000000000 CR3: 000000003d444000 CR4: 0000000000350ef0
Call Trace:
note: kworker/u10:4[344] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
perf_event_ctx_lock_nested+0x232/0x4d0
perf_event_release_kernel+0x9e/0x540
perf_release+0x31/0x40
__fput+0x401/0xb50
fput_close_sync+0x10f/0x240
__x64_sys_close+0x8f/0x120
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f57d4f7172b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe99527b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f57d4f7172b
RDX: 0000001b2d024bd0 RSI: ffffffff813b276a RDI: 0000000000000003
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d022be4
R10: 0000000000001f6d R11: 0000000000000293 R12: 00007f57d50d2b60
R13: 00007f57d50d2b60 R14: 00007f57d50d1f60 R15: 000000000001c3cd
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#29] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RIP: 0010:perf_tp_event+0x175/0xe70
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RIP: 0010:perf_tp_event+0x175/0xe70
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f822348f900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
FS: 00005555651a4400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000f1a1000 CR4: 0000000000350ef0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Call Trace:
CR2: 0000001b2d024000 CR3: 0000000014377000 CR4: 0000000000350ef0
note: syz-executor.1[3955] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
Modules linked in:
---[ end trace 0000000000000000 ]---
BUG: Bad page state in process systemd pfn:18c21
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c21
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
console_unlock+0xc2/0x1f0
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c22
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c22
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000630890 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
console_unlock+0xc2/0x1f0
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c23
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c23
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea00006308c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
console_unlock+0xc2/0x1f0
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#30] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 285 Comm: syz-executor.6 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880167476c0 EFLAGS: 00010212
__x64_sys_epoll_wait+0x15b/0x280
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880160c1b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888016747930 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 0000555566b0e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 000000003d444000 CR4: 0000000000350ef0
Call Trace:
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c24
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c24
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000630908 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
perf_trace_run_bpf_submit+0xef/0x180
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
perf_trace_contention_end+0x235/0x3e0
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
anon_pipe_write+0x12a/0x1a80
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
vfs_write+0xbe9/0x1150
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
ksys_write+0x1ef/0x240
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f835ef285ff
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
RSP: 002b:00007ffce067fe20 EFLAGS: 00000293
ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007f835ef285ff
console_unlock+0xc2/0x1f0
RDX: 000000000000000c RSI: 00007ffce067ff10 RDI: 00000000000000f8
RBP: 00007ffce067feac R08: 0000000000000000 R09: 00007f835f065000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 000000000001c3d0 R14: 0000000000000000 R15: 00007ffce067ff10
Modules linked in:
---[ end trace 0000000000000000 ]---
vprintk_emit+0x3f6/0x630
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
_printk+0xbe/0xf0
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555566b0e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 000000003d444000 CR4: 0000000000350ef0
note: syz-executor.6[285] exited with preempt_count 2
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c25
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c25
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000630948 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
console_unlock+0xc2/0x1f0
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#31] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 289 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
ep_send_events+0xff/0xaa0
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018c5f6c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880147a0000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888018c5f930 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
do_epoll_wait+0x42e/0xee0
FS: 00005555651a4400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 000000004252a000 CR4: 0000000000350ef0
Call Trace:
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
perf_trace_run_bpf_submit+0xef/0x180
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
perf_trace_contention_end+0x235/0x3e0
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c26
trace_contention_end+0xae/0x110
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c26
flags: 0x100000000000000(node=0|zone=1)
__mutex_lock+0x166/0x1020
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000630988 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
anon_pipe_write+0x12a/0x1a80
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
vfs_write+0xbe9/0x1150
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
ksys_write+0x1ef/0x240
sysvec_apic_timer_interrupt+0x70/0x80
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0033:0x7f57d4f715ff
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
RSP: 002b:00007ffe99527d30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f57d4f715ff
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RDX: 000000000000000c RSI: 00007ffe99527e20 RDI: 00000000000000f8
RBP: 00007ffe99527dbc R08: 0000000000000000 R09: 00007f57d50ae000
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
R13: 000000000001c8f7 R14: 0000000000000005 R15: 00007ffe99527e20
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
Modules linked in:
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00005555651a4400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
console_unlock+0xc2/0x1f0
CR2: 0000001b2d024000 CR3: 000000004252a000 CR4: 0000000000350ef0
note: syz-executor.1[289] exited with preempt_count 2
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
BUG: Bad page state in process systemd pfn:18c27
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18c27
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea00006309c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:console_flush_all+0x8c1/0xb70
Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 c8 7d 1f 00 e8 b3 c2 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 c8 96 5b
RSP: 0018:ffff8880095471f0 EFLAGS: 00000246
RAX: ffffffff85f37dd8 RBX: 0000000000000001 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed
RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 000000005b2d2d2d R12: 0000000000000000
R13: ffffffff85f37dd8 R14: dffffc0000000000 R15: ffffffff85f37d80
console_unlock+0xc2/0x1f0
vprintk_emit+0x3f6/0x630
_printk+0xbe/0xf0
oops_exit+0x3a/0x50
oops_end+0x65/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8223c6c116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffce2374010 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 000055f675b30b70 RCX: 00007f8223c6c116
RDX: 000000000000002f RSI: 000055f676390f80 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: af5e86d5c9cb232e
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002f R14: 0000000000000000 R15: 000055f66b1a5b4e
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#32] SMP KASAN NOPTI
RIP: 0010:perf_tp_event+0x175/0xe70
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
CPU: 1 UID: 0 PID: 112 Comm: systemd-udevd Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888015c678c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880147a5280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888015c67b30 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
FS: 00007f5aff3348c0(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 000000000d8a7000 CR4: 0000000000350ef0
Call Trace:
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f822348f900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000f1a1000 CR4: 0000000000350ef0
perf_trace_run_bpf_submit+0xef/0x180
note: systemd[1] exited with preempt_count 2
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
fdget_pos+0x2a8/0x380
__x64_sys_getdents64+0xe0/0x2c0
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5aff7bb9c7
Code: 0f 1f 00 48 8b 47 20 c3 66 2e 0f 1f 84 00 00 00 00 00 90 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 99 74 0f 00 f7 d8 64 89 02 48
RSP: 002b:00007ffe67d67098 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 0000564d56fe3b20 RCX: 00007f5aff7bb9c7
RDX: 0000000000008000 RSI: 0000564d56fe3b50 RDI: 0000000000000012
RBP: 0000564d56fe3b50 R08: 0000000000000030 R09: 00007f5aff8b3be0
R10: 0000000000000010 R11: 0000000000000293 R12: fffffffffffffe00
R13: 0000564d56fe3b24 R14: 0000000000000000 R15: 0000564d56f92650
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#33] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
RIP: 0010:perf_tp_event+0x175/0xe70
CPU: 0 UID: 0 PID: 142 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RSP: 0018:ffff88801c06f700 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
RDX: ffff888014608000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
RBP: ffff88801c06f970 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
FS: 00007f5aff3348c0(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000f1a1000 CR4: 0000000000350ef0
CR2: 0000001b2d024000 CR3: 000000000d8a7000 CR4: 0000000000350ef0
Call Trace:
note: systemd-udevd[112] exited with preempt_count 2
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_begin+0x235/0x3e0
trace_contention_begin+0xae/0x110
__mutex_lock+0x14b/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#34] SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 1 UID: 0 PID: 2817 Comm: kworker/u10:7 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888009a67700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880160b3700 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888009a67970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d024000 CR3: 0000000043c35000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
RIP: 0010:perf_tp_event+0x175/0xe70
cfg80211_wiphy_work+0x7e/0x480
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
process_one_work+0x8e1/0x19c0
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
RIP: 0010:perf_tp_event+0x175/0xe70
RBP: ffff88801631f8b0 R08: ffff88806ce31340 R09: ffffe8ffffc15f78
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801631f640 EFLAGS: 00010212
RAX: 0000000000000032 RBX: ffffffffffffffa2 RCX: 0000000000000002
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000f1a1000 CR4: 0000000000350ef0
note: kworker/u10:3[142] exited with preempt_count 2
RDX: ffff88800ea31b80 RSI: ffffffff8189a4e7 RDI: 0000000000000192
BUG: Bad page state in process kworker/u10:7 pfn:15cb1
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15cb1
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 1 UID: 0 PID: 2817 Comm: kworker/u10:7 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80
Code: 5d 41 5c 41 5d e9 70 60 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 58 89 10 06 65 8b 05 69 89 10
RSP: 0018:ffff888009a673b0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 1ffff1100134ce78 RCX: ffffffff817c3ab6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8154befa
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff8643b457 R11: 0000000000000001 R12: 0000000000000041
R13: 0000000000000200 R14: ffff888014608000 R15: ffff888009a67478
vprintk_emit+0x530/0x630
_printk+0xbe/0xf0
__show_regs+0x16f/0x750
oops_end+0x7d/0xe0
exc_general_protection+0x1a2/0x330
asm_exc_general_protection+0x26/0x30
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888009a67700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880160b3700 RSI: ffffffff8189a4e7 RDI: 0000000100000190
RBP: ffff888009a67970 R08: ffff88806cf31340 R09: ffffe8ffffd161c0
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
BUG: Bad page state in process kworker/u10:7 pfn:15cb2
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15cb2
flags: 0x100000000000000(node=0|zone=1)
page_type: f9(unknown)
raw: 0100000000000000 0000000000000000 ffffea0000572c90 0000000000000000
raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000
page dumped because: nonzero mapcount
Modules linked in:
CPU: 1 UID: 0 PID: 2817 Comm: kworker/u10:7 Tainted: G B D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
dump_stack_lvl+0xfa/0x120
bad_page+0x8c/0x1c0
__free_frozen_pages+0xaf9/0xe10
----------------
Code disassembly (best guess), 1 bytes skipped:
0: df 48 89 fisttps -0x77(%rax)
3: 85 a8 fd ff ff 48 test %ebp,0x48fffffd(%rax)
9: c1 e8 03 shr $0x3,%eax
c: 4c 01 e0 add %r12,%rax
f: 48 89 85 c8 fd ff ff mov %rax,-0x238(%rbp)
16: e8 c9 51 ea ff callq 0xffea51e4
1b: 48 8d bb f0 01 00 00 lea 0x1f0(%rbx),%rdi
22: 48 89 f8 mov %rdi,%rax
25: 48 c1 e8 03 shr $0x3,%rax
* 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 74 08 je 0x3a
32: 3c 03 cmp $0x3,%al
34: 0f 8e c5 0b 00 00 jle 0xbff
3a: 44 rex.R
3b: 8b .byte 0x8b
3c: ab stos %eax,%es:(%rdi)
3d: f0 lock
3e: 01 .byte 0x1