Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#1] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3918 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f9650e52700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000140d9000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 pcpu_alloc_noprof+0xaa0/0x1170 perf_trace_event_init+0x366/0xa10 perf_trace_init+0x1a4/0x2f0 perf_tp_event_init+0xa6/0x120 perf_try_init_event+0x140/0x9f0 perf_event_alloc.part.0+0x118e/0x45f0 __do_sys_perf_event_open+0x719/0x2c20 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f96538dcb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9650e52188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007f96539eff60 RCX: 00007f96538dcb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f9653936f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd128673df R14: 00007f9650e52300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f9650e52700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000140d9000 CR4: 0000000000350ef0 note: syz-executor.7[3918] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#2] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 112 Comm: systemd-udevd Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888017def8c0 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016c11b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888017defb30 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 fdget_pos+0x2a8/0x380 __x64_sys_getdents64+0xe0/0x2c0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f64d25d69c7 Code: 0f 1f 00 48 8b 47 20 c3 66 2e 0f 1f 84 00 00 00 00 00 90 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 99 74 0f 00 f7 d8 64 89 02 48 RSP: 002b:00007ffcfc6d6ea8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055816816cd70 RCX: 00007f64d25d69c7 RDX: 0000000000008000 RSI: 000055816816cda0 RDI: 0000000000000010 RBP: 000055816816cda0 R08: 0000000000000030 R09: 00007f64d26cebe0 R10: 0000000000000010 R11: 0000000000000293 R12: fffffffffffffe00 R13: 000055816816cd74 R14: 0000000000000000 R15: 0000558168145f30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 note: systemd-udevd[112] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#3] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 30 Comm: rcu_tasks_trace Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff8880098b7840 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880097ab700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff8880098b7ab0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 rcu_tasks_one_gp+0x31/0xcf0 rcu_tasks_kthread+0x1a6/0x240 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 note: rcu_tasks_trace[30] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#4] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff8880095ff680 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880095dd280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff8880095ff8f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 addrconf_dad_work+0xf6/0x11a0 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 note: kworker/u8:0[12] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#5] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 828 Comm: kworker/u10:7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804577f700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801e1b8000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88804577f970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000a1a8000 CR4: 0000000000350ef0 note: kworker/u10:7[828] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#6] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: mld mld_ifc_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800b2876c0 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800b278000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800b287930 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000001f2c7000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 mld_ifc_work+0x42/0xb60 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000001f2c7000 CR4: 0000000000350ef0 note: kworker/1:1[48] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#7] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 281 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801bed7400 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801be25280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88801bed7670 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000555594efe400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000003d6b7000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 ldt_dup_context+0x46/0x350 dup_mmap+0x178e/0x1d10 copy_process+0x3ad5/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3a7c87e10b Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 RSP: 002b:00007fff04e81b70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3a7c87e10b RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555594efe400 R10: 0000555594efe6d0 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff04e81c50 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000555594efe400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000003d6b7000 CR4: 0000000000350ef0 note: syz-executor.2[281] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#8] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3712 Comm: systemd-udevd Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88803a3d7640 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880457a5280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88803a3d78b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000000e738000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f64d260e0d6 Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24 RSP: 002b:00007ffcfc6d6ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: fffffffffffffffc RBX: 0000558168129e80 RCX: 00007f64d260e0d6 RDX: 0000000000000002 RSI: 000055816813b990 RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000002 R14: 000055815323a2e6 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000000e738000 CR4: 0000000000350ef0 note: systemd-udevd[3712] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: systemd-udevd/3712/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3712 Comm: systemd-udevd Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f64d260e0d6 Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24 RSP: 002b:00007ffcfc6d6ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: fffffffffffffffc RBX: 0000558168129e80 RCX: 00007f64d260e0d6 RDX: 0000000000000002 RSI: 000055816813b990 RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000002 R14: 000055815323a2e6 R15: 0000000000000000 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#9] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3856 Comm: systemd-udevd Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88803a36f640 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801bd8d280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88803a36f8b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000001e25d000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f64d260e0d6 Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24 RSP: 002b:00007ffcfc6d6ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: fffffffffffffffc RBX: 0000558168153f20 RCX: 00007f64d260e0d6 RDX: 0000000000000002 RSI: 00005581680fd370 RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000002 R14: 000055815323a2e6 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f64d214f8c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe5036f9541 CR3: 000000001e25d000 CR4: 0000000000350ef0 note: systemd-udevd[3856] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: systemd-udevd/3856/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3856 Comm: systemd-udevd Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f64d260e0d6 Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 18 48 89 74 24 RSP: 002b:00007ffcfc6d6ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: fffffffffffffffc RBX: 0000558168153f20 RCX: 00007f64d260e0d6 RDX: 0000000000000002 RSI: 00005581680fd370 RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000002 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000002 R14: 000055815323a2e6 R15: 0000000000000000 BUG: Bad page state in process syz-executor.1 pfn:3a3d1 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d1 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f448 ffffea0000e8f448 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d2 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d2 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f488 ffffea0000e8f488 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d3 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d3 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f4c8 ffffea0000e8f4c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d4 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d4 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f508 ffffea0000e8f508 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d5 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d5 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f548 ffffea0000e8f548 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d6 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d6 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f588 ffffea0000e8f588 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 BUG: Bad page state in process syz-executor.1 pfn:3a3d7 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a3d7 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea0000e8f5c8 ffffea0000e8f5c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3932 Comm: syz-executor.1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:tlb_finish_mmu+0x285/0x7e0 Code: 48 c1 ea 03 80 3c 02 00 0f 85 70 04 00 00 49 8b 1c 24 be 04 00 00 00 48 8d bb 30 09 00 00 e8 a2 b0 0f 00 f0 ff 8b 30 09 00 00 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d8 b8 1d 03 e8 53 99 RSP: 0018:ffff888046c4fbc0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888016ba3f00 RCX: ffffffff81a04e0e RDX: ffffed1002d74907 RSI: 0000000000000004 RDI: ffff888016ba4830 RBP: ffff88801cc50000 R08: 0000000000000001 R09: ffffed1002d74906 R10: ffff888016ba4833 R11: ffff88806cf3c540 R12: ffff888046c4fce0 R13: dffffc0000000000 R14: ffff888046c4fd10 R15: 000000000000000c exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe503679b19 Code: Unable to access opcode bytes at 0x7fe503679aef. RSP: 002b:00007fff8f7c90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe503679b19 RDX: 00007fe50362c72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2cd249b8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8f7c9190 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#10] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7f350147a0 CR3: 000000003d6b7000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 BUG: Bad page state in process kworker/u10:3 pfn:3a369 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a369 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36a page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36a flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8da90 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36b page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36b flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8dac8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36c page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36c flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8db08 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36d page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36d flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8db48 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36e page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36e flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8db88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kworker/u10:3 pfn:3a36f page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a36f flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e8dbc8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 184 Comm: kworker/u10:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:console_flush_all+0x8c1/0xb70 Code: 01 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 6c 02 00 00 49 89 6f 58 e9 3a ff ff ff e8 98 6e 1f 00 e8 83 b3 27 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 30 00 0f 84 19 ff ff ff 4c 89 ef e8 18 7e 5b RSP: 0018:ffff88800f8af150 EFLAGS: 00000246 RAX: ffffffff85f37a58 RBX: 0000000000000001 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff815478ed RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000065646f43 R12: 0000000000000000 R13: ffffffff85f37a58 R14: dffffc0000000000 R15: ffffffff85f37a00 console_unlock+0xc2/0x1f0 vprintk_emit+0x3f6/0x630 _printk+0xbe/0xf0 show_opcodes+0xb3/0xd0 show_iret_regs+0x31/0x60 __show_regs+0x2a/0x750 oops_end+0x7d/0xe0 exc_general_protection+0x1a2/0x330 asm_exc_general_protection+0x26/0x30 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8af700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f5e0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8af970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7f350147a0 CR3: 000000003d6b7000 CR4: 0000000000350ef0 note: kworker/u10:3[184] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#11] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801772f6c0 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888018cb0000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88801772f930 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 000055557e45d400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001733a000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 __set_oom_adj.isra.0+0x68/0xf40 oom_score_adj_write+0x1ba/0x200 vfs_write+0x2b7/0x1150 ksys_write+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fced09b85ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 000055557e45d400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001733a000 CR4: 0000000000350ef0 note: syz-executor.0[3952] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#12] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3956 Comm: journal-offline Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046fe7880 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880167a1b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046fe7af0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f39bef0f700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000f371000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 __x64_sys_exit+0x42/0x50 x64_sys_call+0x18ca/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f39bff15f56 Code: 00 00 0f 84 3d 01 00 00 48 8b 44 24 08 f6 80 08 03 00 00 40 0f 85 41 01 00 00 ba 3c 00 00 00 0f 1f 44 00 00 31 ff 89 d0 0f 05 f8 ff d0 48 98 e9 46 ff ff ff 48 8b 44 24 08 45 31 d2 ba 01 00 RSP: 002b:00007f39bef0ed40 EFLAGS: 00000246 ORIG_RAX: 000000000000003c RAX: ffffffffffffffda RBX: 00007f39bef0f700 RCX: 00007f39bff15f56 RDX: 000000000000003c RSI: 00000000007fb000 RDI: 0000000000000000 RBP: 00007f39be70f000 R08: 00007f39bef0f700 R09: 00007f39bef0f700 R10: 0000000000000014 R11: 0000000000000246 R12: 00007ffc87d17b4e R13: 00007ffc87d17b4f R14: 00007f39bef0ee00 R15: 000055c839de8310 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f39bef0f700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000f371000 CR4: 0000000000350ef0 note: journal-offline[3956] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: journal-offline/3956/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3956 Comm: journal-offline Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f39bff15f56 Code: 00 00 0f 84 3d 01 00 00 48 8b 44 24 08 f6 80 08 03 00 00 40 0f 85 41 01 00 00 ba 3c 00 00 00 0f 1f 44 00 00 31 ff 89 d0 0f 05 f8 ff d0 48 98 e9 46 ff ff ff 48 8b 44 24 08 45 31 d2 ba 01 00 RSP: 002b:00007f39bef0ed40 EFLAGS: 00000246 ORIG_RAX: 000000000000003c RAX: ffffffffffffffda RBX: 00007f39bef0f700 RCX: 00007f39bff15f56 RDX: 000000000000003c RSI: 00000000007fb000 RDI: 0000000000000000 RBP: 00007f39be70f000 R08: 00007f39bef0f700 R09: 00007f39bef0f700 R10: 0000000000000014 R11: 0000000000000246 R12: 00007ffc87d17b4e R13: 00007ffc87d17b4f R14: 00007f39bef0ee00 R15: 000055c839de8310 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#13] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 57 Comm: kworker/u10:2 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800a587700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800a5f9b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800a587970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000f371000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000f371000 CR4: 0000000000350ef0 note: kworker/u10:2[57] exited with preempt_count 2 BUG: Bad page state in process syz-executor.0 pfn:46fe1 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe1 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf848 ffffea00011bf848 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe2 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe2 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf888 ffffea00011bf888 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe3 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe3 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf8c8 ffffea00011bf8c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe4 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe4 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf908 ffffea00011bf908 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe5 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe5 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf948 ffffea00011bf948 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe6 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe6 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf988 ffffea00011bf988 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 BUG: Bad page state in process syz-executor.0 pfn:46fe7 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46fe7 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011bf9c8 ffffea00011bf9c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 Code: 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 88 48 10 06 65 8b 05 99 48 10 06 a9 00 01 ff 00 74 27 RSP: 0018:ffff88801772f8b8 EFLAGS: 00000246 RAX: ffff88800d48baa8 RBX: ffffea0000f71f80 RCX: dffffc0000000000 RDX: ffff888018cb0000 RSI: ffffffff819cebac RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940001ee3f0 R10: 0000000000000001 R11: 0000000000000000 R12: 0400000000000040 R13: 00007fcecef55000 R14: ffff88801772fd20 R15: 800000003dc7e007 unmap_page_range+0xc2c/0x36d0 unmap_single_vma.constprop.0+0x153/0x230 unmap_vmas+0x1d6/0x430 exit_mmap+0x181/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fced09b85ff Code: Unable to access opcode bytes at 0x7fced09b85d5. RSP: 002b:00007ffc34d29260 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fced09b85ff RDX: 0000000000000004 RSI: 00007ffc34d292b0 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc34d29200 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fced0a5fff5 R13: 00007ffc34d292b0 R14: 0000000000000000 R15: 00007ffc34d29850 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#14] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.7 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f8ef640 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880167a3700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f8ef8b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f9650def700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000140d9000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 ret_from_fork+0x3ac/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f9650def700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000140d9000 CR4: 0000000000350ef0 note: syz-executor.7[3960] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: syz-executor.7/3960/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.7 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f96538ddf41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007f9650def2f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: 0000000000000000 RBX: 00007f9650def700 RCX: 00007f96538ddf41 RDX: 00007f9650def9d0 RSI: 00007f9650def2f0 RDI: 00000000003d0f00 RBP: 00007ffd12867560 R08: 00007f9650def700 R09: 00007f9650def700 R10: 00007f9650def9d0 R11: 0000000000000206 R12: 00007ffd128673de R13: 00007ffd128673df R14: 00007f9650def300 R15: 0000000000022000 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#15] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.4 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88803a057640 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801bc73700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88803a0578b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f7f325d6700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7f35060b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7f325d6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f7f35173f68 RCX: 00007f7f35060b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f35173f68 RBP: 00007f7f35173f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f35173f6c R13: 00007ffeea85abdf R14: 00007f7f325d6300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f7f325d6700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 note: syz-executor.4[3955] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: syz-executor.4/3955/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.4 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7f7f35060b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7f325d6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f7f35173f68 RCX: 00007f7f35060b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f35173f68 RBP: 00007f7f35173f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f35173f6c R13: 00007ffeea85abdf R14: 00007f7f325d6300 R15: 0000000000022000 BUG: Bad page state in process kmemleak pfn:0f8e9 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8e9 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8ea page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8ea flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3a90 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8eb page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8eb flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3ac8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8ec page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8ec flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3b08 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8ed page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8ed flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3b48 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8ee page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8ee flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3b88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process kmemleak pfn:0f8ef page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf8ef flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00003e3bc8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 67 Comm: kmemleak Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 f5 93 fc 48 89 ef e8 4e 40 94 fc 80 e7 02 74 06 e8 b4 48 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f RSP: 0018:ffff88800f8c7df0 EFLAGS: 00000286 RAX: 0000000000000001 RBX: 0000000000000246 RCX: ffffffff817c2b86 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff84bde3bc RBP: ffffffff886eb218 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff8643ac57 R11: 0000000000000000 R12: ffff88800a775280 R13: ffff8880723e6000 R14: 0000000000000246 R15: ffff888072400000 scan_gray_list+0x213/0x290 kmemleak_scan+0x574/0xe00 kmemleak_scan_thread+0x78/0xc0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a051 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a051 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 00000000ffffffff 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a052 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a052 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea0000e81490 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a053 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a053 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a054 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a054 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a055 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a055 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a056 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a056 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: Bad page state in process ksoftirqd/1 pfn:3a057 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a057 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x41d/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#16] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 393 Comm: kworker/u10:6 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88804583f700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888045a7d280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88804583f970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 note: kworker/u10:6[393] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#17] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 26 Comm: kworker/u10:0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888009777700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888009753700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888009777970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ca93000 CR4: 0000000000350ef0 note: kworker/u10:0[26] exited with preempt_count 2 kworker/u10:0 (26) used greatest stack depth: 23968 bytes left Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#18] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 328 Comm: kworker/u9:6 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888017cef700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016c13700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888017cef970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000453df000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000453df000 CR4: 0000000000350ef0 note: kworker/u9:6[328] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#19] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 321 Comm: kworker/u9:4 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801752f700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016288000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88801752f970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000448ac000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000448ac000 CR4: 0000000000350ef0 note: kworker/u9:4[321] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#20] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 2732 Comm: kworker/u9:8 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800ef8f700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801e5f1b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800ef8f970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 0000000041eac000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 0000000041eac000 CR4: 0000000000350ef0 note: kworker/u9:8[2732] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#21] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 47 Comm: kworker/u9:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800b247700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800b205280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800b247970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 note: kworker/u9:3[47] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#22] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 324 Comm: kworker/u9:5 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88801b967700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016c15280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88801b967970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 note: kworker/u9:5[324] exited with preempt_count 2 kworker/u9:5 (324) used greatest stack depth: 23792 bytes left Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#23] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 25 Comm: kworker/u9:0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800976f700 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888009751b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800976f970 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000453df000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 cfg80211_wiphy_work+0x7e/0x480 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 00000000453df000 CR4: 0000000000350ef0 note: kworker/u9:0[25] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#24] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3923 Comm: syz-executor.3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046bef640 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016a11b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046bef8b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fa54757d700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001e277000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 perf_event_exit_task+0x46/0x510 do_exit+0x626/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa54a028b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa54757d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fa54a13c028 RCX: 00007fa54a028b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa54a13c028 RBP: 00007fa54a13c020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa54a13c02c R13: 00007ffd34d0d3ff R14: 00007fa54757d300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fa54757d700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001e277000 CR4: 0000000000350ef0 note: syz-executor.3[3923] exited with preempt_count 2 Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: syz-executor.3/3923/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 1 UID: 0 PID: 3923 Comm: syz-executor.3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa54a028b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa54757d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fa54a13c028 RCX: 00007fa54a028b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa54a13c028 RBP: 00007fa54a13c020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa54a13c02c R13: 00007ffd34d0d3ff R14: 00007fa54757d300 R15: 0000000000022000 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#25] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 101 PID: 126 Comm: systemd-timesyn Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff88800f78f6c0 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88800f928000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff88800f78f930 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f6bed149900(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ea27000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 ep_send_events+0xff/0xaa0 do_epoll_wait+0x42e/0xee0 __x64_sys_epoll_wait+0x15b/0x280 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6beda3e116 Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44 RSP: 002b:00007ffcb1b2e140 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 0000563f0887c310 RCX: 00007f6beda3e116 RDX: 0000000000000008 RSI: 0000563f08881e50 RDI: 0000000000000004 RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000563f0887bb60 R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 R13: 0000000000000008 R14: 0000000000000065 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007f6bed149900(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000ea27000 CR4: 0000000000350ef0 note: systemd-timesyn[126] exited with preempt_count 2 BUG: Bad page state in process swapper/1 pfn:46be9 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46be9 flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afa48 ffffea00011afa48 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46bea page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bea flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afa88 ffffea00011afa88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46beb page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46beb flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afac8 ffffea00011afac8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46bec page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bec flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afb08 ffffea00011afb08 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46bed page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bed flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afb48 ffffea00011afb48 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46bee page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bee flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afb88 ffffea00011afb88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 BUG: Bad page state in process swapper/1 pfn:46bef page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46bef flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 ffffea00011afbc8 ffffea00011afbc8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: nonzero mapcount Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 bad_page+0x8c/0x1c0 __free_frozen_pages+0xaf9/0xe10 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:pv_native_safe_halt+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 RSP: 0018:ffff888009717e58 EFLAGS: 00000246 RAX: ffff8880e56dd000 RBX: 0000000000000001 RCX: ffffffff84bb95f7 RDX: ffffed100d9e630b RSI: 0000000000000004 RDI: ffffffff814c8304 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100d9e630a R10: ffff88806cf31853 R11: 1ffff1100d9e6f7b R12: ffffffff8643ac50 R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle+0xe/0x20 default_idle_call+0x6d/0xb0 do_idle+0x344/0x490 cpu_startup_entry+0x4f/0x60 start_secondary+0x1bd/0x210 common_startup_64+0x13e/0x148 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#26] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 175 Comm: rs:main Q:Reg Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888016d4f940 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff88801bcab700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888016d4fbb0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fbd6cee1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001cd0f000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 fdget_pos+0x2a8/0x380 ksys_write+0x71/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbd6dd24fef Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 5c fd ff ff 48 RSP: 002b:00007fbd6cee0860 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fbd64021e80 RCX: 00007fbd6dd24fef RDX: 0000000000000e33 RSI: 00007fbd64022120 RDI: 0000000000000007 RBP: 0000000000000e33 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007fbd64022120 R13: 0000000000000000 R14: 000000000000003a R15: 00007fbd64021e80 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fbd6cee1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001cd0f000 CR4: 0000000000350ef0 note: rs:main Q:Reg[175] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#27] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 389 Comm: kworker/u10:5 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: 0x0 (flush-8:0) RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888045a8f780 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888045a79b80 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888045a8f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 worker_attach_to_pool+0x25/0x3c0 create_worker+0x2a9/0x800 worker_thread+0x956/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 note: kworker/u10:5[389] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#28] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 3965 Comm: kworker/u9:9 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888045a8f880 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888017795280 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888045a8faf0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 worker_thread+0x58/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000003da28000 CR4: 0000000000350ef0 note: kworker/u9:9[3965] exited with preempt_count 2 ================================================================== BUG: KASAN: slab-use-after-free in kick_pool+0x5fe/0x660 Read of size 4 at addr ffff8880177952e4 by task kworker/u9:7/2195 CPU: 0 UID: 0 PID: 2195 Comm: kworker/u9:7 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: dump_stack_lvl+0xca/0x120 print_report+0xcb/0x610 kasan_report+0xca/0x100 kick_pool+0x5fe/0x660 process_one_work+0x632/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Allocated by task 2: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_node_noprof+0x21a/0x690 copy_process+0x461/0x73c0 kernel_clone+0xea/0x7f0 kernel_thread+0xd7/0x120 kthreadd+0x4ab/0x760 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 Freed by task 0: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x3f/0x50 kmem_cache_free+0x2a1/0x540 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 Last potentially related work creation: kasan_save_stack+0x24/0x50 kasan_record_aux_stack+0x89/0xa0 __call_rcu_common.constprop.0+0x70/0x960 delayed_put_task_struct+0xde/0x260 rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 Second to last potentially related work creation: kasan_save_stack+0x24/0x50 kasan_record_aux_stack+0x89/0xa0 __call_rcu_common.constprop.0+0x70/0x960 put_task_struct_rcu_user+0x75/0xc0 __schedule+0xe86/0x3590 schedule+0xdb/0x390 syslog_print+0x1c4/0x5c0 do_syslog.part.0+0x20b/0x5b0 do_syslog+0xcd/0x110 kmsg_read+0x8e/0xc0 proc_reg_read+0x120/0x310 vfs_read+0x1eb/0xc70 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff888017795280 which belongs to the cache task_struct of size 6784 The buggy address is located 100 bytes inside of freed 6784-byte region [ffff888017795280, ffff888017796d00) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17790 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88800d633741 anon flags: 0x100000000000040(head|node=0|zone=1) page_type: f5(slab) raw: 0100000000000040 ffff888008ff7640 0000000000000000 dead000000000001 raw: 0000000000000000 0000000080040004 00000000f5000000 ffff88800d633741 head: 0100000000000040 ffff888008ff7640 0000000000000000 dead000000000001 head: 0000000000000000 0000000080040004 00000000f5000000 ffff88800d633741 head: 0100000000000003 ffffea00005de401 00000000ffffffff 00000000ffffffff head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888017795180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888017795200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff888017795280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888017795300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888017795380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#29] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 174 Comm: in:imklog Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888009f37440 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff888016a13700 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888009f376b0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fbd6d2e2700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001cd0f000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 syslog_print+0x244/0x5c0 do_syslog.part.0+0x20b/0x5b0 do_syslog+0xcd/0x110 kmsg_read+0x8e/0xc0 proc_reg_read+0x120/0x310 vfs_read+0x1eb/0xc70 ksys_read+0x121/0x240 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbd6dd2508c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf fc ff ff 48 RSP: 002b:00007fbd6d2c14d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd6dd2508c RDX: 0000000000001fa0 RSI: 00007fbd6d2c1d00 RDI: 0000000000000005 RBP: 000055cc1b6724c0 R08: 0000000000000000 R09: 0000000000000000 R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007fbd6d2c1d00 R13: 0000000000001fa0 R14: 00007fbd6d2c1d00 R15: 00007fbd6d2c1d9b Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fbd6d2e2700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000001cd0f000 CR4: 0000000000350ef0 note: in:imklog[174] exited with preempt_count 2 Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#30] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888009547480 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 RDX: ffff8880094f8000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff8880095476f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fa28f80a900(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000fba4000 CR4: 0000000000350ef0 Call Trace: perf_trace_run_bpf_submit+0xef/0x180 perf_trace_contention_begin+0x235/0x3e0 trace_contention_begin+0xae/0x110 __mutex_lock+0x14b/0x1020 kernfs_fop_open+0x6bd/0xdd0 do_dentry_open+0x71c/0x1420 vfs_open+0x82/0x3f0 path_openat+0x1c3f/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa28ffd7c64 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 36 61 f9 ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 68 61 f9 ff 8b 44 RSP: 002b:00007ffc3d4aefc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000560915b646e0 RCX: 00007fa28ffd7c64 RDX: 0000000000080000 RSI: 0000560915afd1c0 RDI: 00000000ffffff9c RBP: 0000560915afd1c0 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080000 R13: 0000560915b646e0 R14: 0000000000000001 R15: 00007ffc3d4af3d0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:perf_tp_event+0x175/0xe70 Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 RSP: 0018:ffff888046ba7580 EFLAGS: 00010213 RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: ffffc90000a8f000 RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 000000010000018f RBP: ffff888046ba77f0 R08: ffff88806cf31340 R09: ffffe8ffffd16238 R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 FS: 00007fa28f80a900(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fced0a60019 CR3: 000000000fba4000 CR4: 0000000000350ef0 note: systemd[1] exited with preempt_count 2 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: 85 a8 fd ff ff 48 test %ebp,0x48fffffd(%rax) 9: c1 e8 03 shr $0x3,%eax c: 4c 01 e0 add %r12,%rax f: 48 89 85 c8 fd ff ff mov %rax,-0x238(%rbp) 16: e8 c9 51 ea ff callq 0xffea51e4 1b: 48 8d bb f0 01 00 00 lea 0x1f0(%rbx),%rdi 22: 48 89 f8 mov %rdi,%rax 25: 48 c1 e8 03 shr $0x3,%rax * 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e c5 0b 00 00 jle 0xbff 3a: 44 rex.R 3b: 8b .byte 0x8b 3c: ab stos %eax,%es:(%rdi) 3d: f0 lock 3e: 01 .byte 0x1