Oops: general protection fault, probably for non-canonical address 0xf87dfc1fea7e0051: 0000 [#1] SMP KASAN NOPTI KASAN: maybe wild-memory-access in range [0xc3f000ff53f00288-0xc3f000ff53f0028f] CPU: 0 UID: 0 PID: 4003 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007fb08cb38700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0aed59c000 CR3: 000000000e612000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 register_netdev+0x1a/0x60 sit_init_net+0x2c8/0x630 ops_init+0x1e1/0x650 setup_net+0x10d/0x320 copy_net_ns+0x2e3/0x650 create_new_namespaces+0x3f6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb08f5c2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb08cb38188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fb08f6d5f60 RCX: 00007fb08f5c2b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 RBP: 00007fb08f61cf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff81f1c58f R14: 00007fb08cb38300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007fb08cb38700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0aed59c000 CR3: 000000000e612000 CR4: 0000000000350ef0 note: syz-executor.2[4003] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 4077 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804608f2c0 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88804608f530 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fb08cb38700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f77f449a004 CR3: 000000001e1d0000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 pcpu_alloc_noprof+0xaa0/0x1170 alloc_vfsmnt+0x135/0x6e0 clone_mnt+0x6c/0xb70 copy_tree+0x34b/0xaf0 copy_mnt_ns+0x1ab/0xab0 create_new_namespaces+0xd6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb08f5c2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb08cb38188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fb08f6d5f60 RCX: 00007fb08f5c2b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 RBP: 00007fb08f61cf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff81f1c58f R14: 00007fb08cb38300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007fb08cb38700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f77f449a004 CR3: 000000001e1d0000 CR4: 0000000000350ef0 note: syz-executor.2[4077] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 4079 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888045c8f6c0 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff88801b698000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff888045c8f930 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000555592225400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff64756000 CR3: 000000001e015000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 __set_oom_adj.isra.0+0x68/0xf40 oom_score_adj_write+0x1ba/0x200 vfs_write+0x2b7/0x1150 ksys_write+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f87346465ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007fff64755a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f87346465ff RDX: 0000000000000004 RSI: 00007fff64755a60 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff647559b0 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f87346edff5 R13: 00007fff64755a60 R14: 0000000000000000 R15: 00007fff64756000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000555592225400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff64756000 CR3: 000000001e015000 CR4: 0000000000350ef0 note: syz-executor.4[4079] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 177 Comm: rs:main Q:Reg Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801b4d7940 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff888016928000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88801b4d7bb0 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f528d105700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000000d7a6000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 fdget_pos+0x2a8/0x380 ksys_write+0x71/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f528df48fef Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 5c fd ff ff 48 RSP: 002b:00007f528d104830 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 00007f528df48fef RDX: 0000000000001000 RSI: 00007f5284001e60 RDI: 0000000000000007 RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5284001e60 R13: 0000000000000000 R14: 0000000000000001 R15: 00007f5284001ba0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007f528d105700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000000d7a6000 CR4: 0000000000350ef0 note: rs:main Q:Reg[177] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#5] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 4075 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800afcf6c0 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff888045fd1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88800afcf930 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000555588776400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000001d990000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 __set_oom_adj.isra.0+0x68/0xf40 oom_score_adj_write+0x1ba/0x200 vfs_write+0x2b7/0x1150 ksys_write+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f02231dd5ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007ffdda25edd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f02231dd5ff RDX: 0000000000000004 RSI: 00007ffdda25ee20 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffdda25ed70 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f0223284ff5 R13: 00007ffdda25ee20 R14: 0000000000000000 R15: 00007ffdda25f3c0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000555588776400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000001d990000 CR4: 0000000000350ef0 note: syz-executor.3[4075] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#6] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 360 Comm: kworker/u10:5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f50f700 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff888017189b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88800f50f970 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000001d990000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000001d990000 CR4: 0000000000350ef0 note: kworker/u10:5[360] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#7] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 102 Comm: kworker/u10:3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888015caf700 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff88800f681b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff888015caf970 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000004268c000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000004268c000 CR4: 0000000000350ef0 note: kworker/u10:3[102] exited with preempt_count 2 kmemleak: Found object by alias at 0x607f1a63e2b4 CPU: 1 UID: 0 PID: 4079 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f87346465ff Code: Unable to access opcode bytes at 0x7f87346465d5. RSP: 002b:00007fff64755a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f87346465ff RDX: 0000000000000004 RSI: 00007fff64755a60 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff647559b0 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f87346edff5 R13: 00007fff64755a60 R14: 0000000000000000 R15: 00007fff64756000 kmemleak: Object (percpu) 0x607f1a63e2b0 (size 8): kmemleak: comm "syz-executor.2", pid 4077, jiffies 4294783615 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 alloc_vfsmnt+0x135/0x6e0 clone_mnt+0x6c/0xb70 copy_tree+0x34b/0xaf0 copy_mnt_ns+0x1ab/0xab0 create_new_namespaces+0xd6/0xab0 copy_namespaces+0x45c/0x580 copy_process+0x2649/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone3+0x1f5/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#8] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 49 Comm: kworker/u10:2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800af1f700 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff88800b263700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88800af1f970 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000004268c000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000004268c000 CR4: 0000000000350ef0 note: kworker/u10:2[49] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#9] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] CPU: 0 UID: 0 PID: 3766 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff8880150076c0 EFLAGS: 00010212 RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 RDX: ffff888015491b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190 RBP: ffff888015007930 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007f252e3108c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7a69e77c50 CR3: 000000000e25b000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 ep_send_events+0xff/0xaa0 do_epoll_wait+0x42e/0xee0 __x64_sys_epoll_wait+0x15b/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f252e7cf0d6 Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24 RSP: 002b:00007ffe14548568 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 000056215e5105e0 RCX: 00007f252e7cf0d6 RDX: 0000000000000002 RSI: 000056215e5408f0 RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000002 R14: 00005621566302e6 R15: 0000000000000000 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#10] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 281 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) ---[ end trace 0000000000000000 ]--- Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888018ae7400 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff888017bdd280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff888018ae7670 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 000055556ef27400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 ldt_dup_context+0x46/0x350 dup_mmap+0x178e/0x1d10 copy_process+0x3ad5/0x73c0 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 kernel_clone+0xea/0x7f0 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007f252e3108c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 __do_sys_clone+0xce/0x120 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7a69e77c50 CR3: 000000000e25b000 CR4: 0000000000350ef0 note: systemd-udevd[3766] exited with preempt_count 2 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f77f3f8110b Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 RSP: 002b:00007ffd01d8faf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77f3f8110b RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 000055556ef27400 R10: 000055556ef276d0 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd01d8fbd0 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#11] SMP KASAN NOPTI ---[ end trace 0000000000000000 ]--- KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] CPU: 0 UID: 0 PID: 273 Comm: kworker/u9:3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) RIP: 0010:perf_tp_event+0x175/0xe70 Tainted: [D]=DIE, [W]=WARN Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 Workqueue: events_unbound cfg80211_wiphy_work RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RIP: 0010:perf_tp_event+0x175/0xe70 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801a8af700 EFLAGS: 00010212 RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 RDX: ffff8880178e1b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 RBP: ffff88801a8af970 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000 FS: 000055556ef27400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7a69e77c50 CR3: 000000003b4ba000 CR4: 0000000000350ef0 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 Call Trace: note: syz-executor.0[281] exited with preempt_count 2 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#12] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] ---[ end trace 0000000000000000 ]--- CPU: 1 UID: 0 PID: 318 Comm: kworker/u10:4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN RIP: 0010:perf_tp_event+0x175/0xe70 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff8880166af700 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: ffff88801542d280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff8880166af970 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 worker_thread+0x67e/0xe90 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kthread+0x3c8/0x740 CR2: 00007f7a69e77c50 CR3: 000000003b4ba000 CR4: 0000000000350ef0 note: kworker/u9:3[273] exited with preempt_count 2 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#13] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] CPU: 0 UID: 0 PID: 4085 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) RSP: 0018:ffff88804724f340 EFLAGS: 00010213 Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RSP: 0018:ffff8880156076c0 EFLAGS: 00010212 RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 RDX: ffff888015490000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 RBP: ffff888015607930 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 FS: 0000555564748400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 CR2: 00007fcb159ae541 CR3: 0000000045053000 CR4: 0000000000350ef0 Call Trace: note: kworker/u10:4[318] exited with preempt_count 2 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 __set_oom_adj.isra.0+0x68/0xf40 oom_score_adj_write+0x1ba/0x200 vfs_write+0x2b7/0x1150 ksys_write+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcb158e15ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007ffdbf937930 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcb158e15ff RDX: 0000000000000004 RSI: 00007ffdbf937980 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffdbf9378d0 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcb15988ff5 R13: 00007ffdbf937980 R14: 0000000000000000 R15: 00007ffdbf937f20 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#14] SMP KASAN NOPTI ---[ end trace 0000000000000000 ]--- KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 45 Comm: kworker/u9:2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) RIP: 0010:perf_tp_event+0x175/0xe70 Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 Workqueue: events_unbound cfg80211_wiphy_work RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RSP: 0018:ffff88800ae6f700 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RDX: ffff88800a45b700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 RBP: ffff88800ae6f970 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 FS: 0000555564748400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Call Trace: CR2: 00007fcb159ae541 CR3: 0000000045053000 CR4: 0000000000350ef0 note: syz-executor.1[4085] exited with preempt_count 2 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#15] SMP KASAN NOPTI ---[ end trace 0000000000000000 ]--- KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] CPU: 0 UID: 0 PID: 408 Comm: kworker/u10:7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff8880460e7700 EFLAGS: 00010212 RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 RDX: ffff888018a38000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 RBP: ffff8880460e7970 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe692a2dff8 CR3: 00000000436a0000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 RIP: 0010:perf_tp_event+0x175/0xe70 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 Modules linked in: RSP: 0018:ffff88804724f340 EFLAGS: 00010213 ---[ end trace 0000000000000000 ]--- RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 0000000039648000 CR4: 0000000000350ef0 note: kworker/u9:2[45] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#16] SMP KASAN NOPTI RIP: 0010:perf_tp_event+0x175/0xe70 KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] CPU: 1 UID: 0 PID: 176 Comm: in:imklog Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RSP: 0018:ffff88801b56f440 EFLAGS: 00010212 RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RDX: ffff88801bcab700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 RBP: ffff88801b56f6b0 R08: ffff88806cf31340 R09: ffffe8ffffd162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f528d506700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f528403a0c8 CR3: 000000000d7a6000 CR4: 0000000000350ef0 CR2: 00007fe692a2dff8 CR3: 00000000436a0000 CR4: 0000000000350ef0 Call Trace: note: kworker/u10:7[408] exited with preempt_count 2 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 syslog_print+0x244/0x5c0 do_syslog.part.0+0x20b/0x5b0 do_syslog+0xcd/0x110 kmsg_read+0x8e/0xc0 proc_reg_read+0x120/0x310 vfs_read+0x1eb/0xc70 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f528df4908c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf fc ff ff 48 RSP: 002b:00007f528d4e54d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f528df4908c RDX: 0000000000001fa0 RSI: 00007f528d4e5d00 RDI: 0000000000000005 RBP: 000055993825f4c0 R08: 0000000000000000 R09: 0000000000000000 R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007f528d4e5d00 R13: 0000000000001fa0 R14: 00007f528d4e5d00 R15: 00007f528d4e5fe2 Modules linked in: Oops: general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#17] SMP KASAN NOPTI ---[ end trace 0000000000000000 ]--- KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] CPU: 0 UID: 0 PID: 4077 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) RIP: 0010:perf_tp_event+0x175/0xe70 Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RIP: 0010:perf_trace_add+0x21b/0x340 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 Code: 00 0f 85 3a 01 00 00 4c 89 75 00 4d 85 ed 74 2a e8 da b2 f5 ff 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 df 00 00 00 4d 89 75 08 eb 03 45 31 e4 e8 ad b2 RSP: 0018:ffff88804608f8d8 EFLAGS: 00010012 RAX: dffffc0000000000 RBX: ffff8880466092c0 RCX: ffffffff817e42fe RDX: 0000000020000001 RSI: ffffffff817e43d6 RDI: 0000000100000008 RBP: ffffe8ffffc162b0 R08: ffffffff85ca4140 R09: ffffed1008c11f62 R10: 0000000000000000 R11: 1ffff1100d9c6f7b R12: 0000000000000000 R13: 0000000100000000 R14: ffff888046609320 R15: ffff888046609358 FS: 00007fb08cb38700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe692a2dff8 CR3: 000000001e1d0000 CR4: 0000000000350ef0 Call Trace: event_sched_in+0x446/0xb60 merge_sched_in+0xb4d/0x1810 visit_groups_merge.constprop.0.isra.0+0x8d1/0x1150 ctx_sched_in+0x579/0x9b0 perf_event_sched_in+0x5d/0x90 __perf_event_task_sched_in+0x2ec/0x5e0 finish_task_switch.isra.0+0x410/0x840 __schedule+0xe86/0x3590 __cond_resched+0x4c/0x80 exit_signals+0x2a/0x940 do_exit+0x2db/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fb08f5c2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb08cb38188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fb08f6d5f60 RCX: 00007fb08f5c2b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 RBP: 00007fb08f61cf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff81f1c58f R14: 00007fb08cb38300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804724f340 EFLAGS: 00010213 RAX: 187e001fea7e0051 RBX: c3f000ff53f0009f RCX: ffffc90001695000 RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: c3f000ff53f0028f RBP: ffff88804724f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc162b0 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 FS: 00007fb08cb38700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe692a2dff8 CR3: 000000001e1d0000 CR4: 0000000000350ef0 note: syz-executor.2[4077] exited with irqs disabled ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: 85 a8 fd ff ff 48 test %ebp,0x48fffffd(%rax) 9: c1 e8 03 shr $0x3,%eax c: 4c 01 e0 add %r12,%rax f: 48 89 85 c8 fd ff ff mov %rax,-0x238(%rbp) 16: e8 c9 51 ea ff callq 0xffea51e4 1b: 48 8d bb f0 01 00 00 lea 0x1f0(%rbx),%rdi 22: 48 89 f8 mov %rdi,%rax 25: 48 c1 e8 03 shr $0x3,%rax * 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e c5 0b 00 00 jle 0xbff 3a: 44 rex.R 3b: 8b .byte 0x8b 3c: ab stos %eax,%es:(%rdi) 3d: f0 lock 3e: 01 .byte 0x1