perf_event_alloc.part.0+0x118e/0x45f0
__do_sys_perf_event_open+0x719/0x2c20
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
kmemleak: Automatic memory scanning thread ended
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 113 Comm: systemd-udevd Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f147fd0a8c0(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b44fc28 CR3: 000000000d611000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
fdget_pos+0x2a8/0x380
__x64_sys_getdents64+0xe0/0x2c0
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f14801919c7
Code: 0f 1f 00 48 8b 47 20 c3 66 2e 0f 1f 84 00 00 00 00 00 90 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 99 74 0f 00 f7 d8 64 89 02 48
RSP: 002b:00007ffc415937c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 0000564c3b482700 RCX: 00007f14801919c7
RDX: 0000000000008000 RSI: 0000564c3b482730 RDI: 0000000000000010
RBP: 0000564c3b482730 R08: 0000000000000060 R09: 00007f1480289be0
R10: 0000000000000080 R11: 0000000000000293 R12: fffffffffffffe00
R13: 0000564c3b482704 R14: 0000000000000000 R15: 0000564c3b4408b0
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f147fd0a8c0(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b44fc28 CR3: 000000000d611000 CR4: 0000000000350ef0
note: systemd-udevd[113] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 4025 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880494af340 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000b0e2000
RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880494af5b0 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007fb80a883700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b44fc28 CR3: 00000000486a5000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
register_netdev+0x1a/0x60
loopback_net_init+0x7a/0x180
ops_init+0x1e1/0x650
setup_net+0x10d/0x320
copy_net_ns+0x2e3/0x650
create_new_namespaces+0x3f6/0xab0
copy_namespaces+0x45c/0x580
copy_process+0x2649/0x73c0
kernel_clone+0xea/0x7f0
__do_sys_clone3+0x1f5/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb80d30db19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb80a883188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007fb80d420f60 RCX: 00007fb80d30db19
RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
RBP: 00007fb80d367f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc07532a9f R14: 00007fb80a883300 R15: 0000000000022000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007fb80a883700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b44fc28 CR3: 00000000486a5000 CR4: 0000000000350ef0
note: syz-executor.4[4025] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 4043 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880160d72c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90001a97000
RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880160d7530 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f121b5f7700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b427000 CR3: 000000000dd55000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
pcpu_alloc_noprof+0xaa0/0x1170
alloc_vfsmnt+0x135/0x6e0
clone_mnt+0x6c/0xb70
copy_tree+0x105/0xaf0
copy_mnt_ns+0x1ab/0xab0
create_new_namespaces+0xd6/0xab0
copy_namespaces+0x45c/0x580
copy_process+0x2649/0x73c0
kernel_clone+0xea/0x7f0
__do_sys_clone3+0x1f5/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f121e081b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f121b5f7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007f121e194f60 RCX: 00007f121e081b19
RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880
RBP: 00007f121e0dbf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd9b19774f R14: 00007f121b5f7300 R15: 0000000000022000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f121b5f7700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564c3b427000 CR3: 000000000dd55000 CR4: 0000000000350ef0
note: syz-executor.1[4043] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 290 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888017677440 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880166c3700 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880176776b0 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555589046400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f147fd7c3d0 CR3: 000000003e0b4000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
bdev_open+0x3e9/0xe40
blkdev_open+0x277/0x400
do_dentry_open+0x71c/0x1420
vfs_open+0x82/0x3f0
path_openat+0x1c3f/0x2880
do_filp_open+0x1e8/0x450
do_sys_openat2+0x104/0x1b0
__x64_sys_openat+0x142/0x200
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6a05839a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007ffc8360a670 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc8360a770 RCX: 00007f6a05839a04
RDX: 0000000000000002 RSI: 00007ffc8360a7b0 RDI: 00000000ffffff9c
RBP: 00007ffc8360a7b0 R08: 0000000000000000 R09: 00007ffc8360a580
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000006 R15: 00007ffc8360a7b0
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000555589046400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f147fd7c3d0 CR3: 000000003e0b4000 CR4: 0000000000350ef0
note: syz-executor.2[290] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#5] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 176 Comm: rs:main Q:Reg Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888017887940 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888017f51b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888017887bb0 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007ff709417700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480380190 CR3: 000000000d861000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
fdget_pos+0x2a8/0x380
ksys_write+0x71/0x240
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff70a25afef
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 5c fd ff ff 48
RSP: 002b:00007ff709416830 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 00007ff70a25afef
RDX: 0000000000001000 RSI: 00007ff700002400 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff700002400
R13: 0000000000000000 R14: 000000000000002a R15: 00007ff700002140
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007ff709417700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480380190 CR3: 000000000d861000 CR4: 0000000000350ef0
note: rs:main Q:Reg[176] exited with preempt_count 2
==================================================================
BUG: KASAN: slab-use-after-free in rwsem_down_write_slowpath+0x129d/0x1380
Read of size 4 at addr ffff888047928034 by task syz-executor.2/290
CPU: 0 UID: 0 PID: 290 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xca/0x120
print_report+0xcb/0x610
kasan_report+0xca/0x100
rwsem_down_write_slowpath+0x129d/0x1380
down_write+0x1c2/0x1f0
put_mnt_ns+0x6c/0x120
free_nsproxy+0x3a/0x400
switch_task_namespaces+0xe2/0x100
do_exit+0x841/0x2970
make_task_dead+0x174/0x3b0
rewind_stack_and_make_dead+0x16/0x20
RIP: 0033:0x7f6a05839a04
Code: Unable to access opcode bytes at 0x7f6a058399da.
RSP: 002b:00007ffc8360a670 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc8360a770 RCX: 00007f6a05839a04
RDX: 0000000000000002 RSI: 00007ffc8360a7b0 RDI: 00000000ffffff9c
RBP: 00007ffc8360a7b0 R08: 0000000000000000 R09: 00007ffc8360a580
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000006 R15: 00007ffc8360a7b0
Allocated by task 4042:
kasan_save_stack+0x24/0x50
kasan_save_track+0x14/0x30
__kasan_slab_alloc+0x59/0x70
kmem_cache_alloc_node_noprof+0x21a/0x690
copy_process+0x461/0x73c0
kernel_clone+0xea/0x7f0
__do_sys_clone+0xce/0x120
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
Freed by task 294:
kasan_save_stack+0x24/0x50
kasan_save_track+0x14/0x30
__kasan_save_free_info+0x3a/0x60
__kasan_slab_free+0x3f/0x50
kmem_cache_free+0x2a1/0x540
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
Last potentially related work creation:
kasan_save_stack+0x24/0x50
kasan_record_aux_stack+0x89/0xa0
__call_rcu_common.constprop.0+0x70/0x960
delayed_put_task_struct+0xde/0x260
rcu_core+0x7c8/0x1800
handle_softirqs+0x1b1/0x770
__irq_exit_rcu+0xc4/0x100
irq_exit_rcu+0x9/0x20
sysvec_apic_timer_interrupt+0x70/0x80
asm_sysvec_apic_timer_interrupt+0x1a/0x20
Second to last potentially related work creation:
kasan_save_stack+0x24/0x50
kasan_record_aux_stack+0x89/0xa0
__call_rcu_common.constprop.0+0x70/0x960
put_task_struct_rcu_user+0x75/0xc0
__schedule+0xe86/0x3590
__cond_resched+0x4c/0x80
unmap_page_range+0x1090/0x36d0
unmap_single_vma.constprop.0+0x153/0x230
unmap_vmas+0x1d6/0x430
exit_mmap+0x181/0xaa0
mmput+0xd5/0x390
do_exit+0x79d/0x2970
make_task_dead+0x174/0x3b0
rewind_stack_and_make_dead+0x16/0x20
The buggy address belongs to the object at ffff888047928000
which belongs to the cache task_struct of size 6784
The buggy address is located 52 bytes inside of
freed 6784-byte region [ffff888047928000, ffff888047929a80)
The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47928
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
memcg:ffff88800fd37041
anon flags: 0x100000000000040(head|node=0|zone=1)
page_type: f5(slab)
raw: 0100000000000040 ffff888008ff7640 0000000000000000 dead000000000001
raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88800fd37041
head: 0100000000000040 ffff888008ff7640 0000000000000000 dead000000000001
head: 0000000000000000 0000000000040004 00000000f5000000 ffff88800fd37041
head: 0100000000000003 ffffea00011e4a01 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff888047927f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff888047927f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888047928000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff888047928080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff888047928100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#6] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 4033 Comm: systemd-udevd Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880494b7900 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888048265280 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880494b7b70 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f147fd0a8c0(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000e62f000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
inotify_update_watch+0x3a/0xad0
__x64_sys_inotify_add_watch+0x2c5/0x360
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f14801c98f7
Code: f0 ff ff 73 01 c3 48 8b 0d 96 f5 0b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 fe 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 69 f5 0b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc415937c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000fe
RAX: ffffffffffffffda RBX: 0000564c3abc1270 RCX: 00007f14801c98f7
RDX: 0000000000000008 RSI: 0000564c3b45dbe0 RDI: 0000000000000009
RBP: 0000564c3b46bd80 R08: 0000564c23e8d660 R09: 0000000000000000
R10: 00007f147fd0a6c0 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000809 R15: 00007ffc41593890
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f147fd0a8c0(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000e62f000 CR4: 0000000000350ef0
note: systemd-udevd[4033] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#7] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 3930 Comm: kworker/0:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events bpf_prog_free_deferred
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888016e17540 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888047831b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888016e177b0 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000e62f000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
_vm_unmap_aliases+0xc4/0x7c0
vfree+0x6c7/0xb60
bpf_prog_free_deferred+0x2e5/0x420
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000e62f000 CR4: 0000000000350ef0
note: kworker/0:3[3930] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#8] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 40 Comm: kworker/u9:2 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800a28f700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888009ca9b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88800a28f970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000044523000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000044523000 CR4: 0000000000350ef0
note: kworker/u9:2[40] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#9] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 34 Comm: kworker/u9:1 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888009a97700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888009a7b700 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888009a97970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 00000000486a5000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 00000000486a5000 CR4: 0000000000350ef0
note: kworker/u9:1[34] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#10] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 478 Comm: kworker/u9:4 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888016b4f700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016f2d280 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888016b4f970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000004859e000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000004859e000 CR4: 0000000000350ef0
note: kworker/u9:4[478] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#11] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 107 Comm: kworker/u9:3 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff888018d37700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016603700 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888018d37970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
note: kworker/u9:3[107] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#12] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880095476c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880094f8000 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff888009547930 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f822ccd0900(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000fd61000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
ep_send_events+0xff/0xaa0
do_epoll_wait+0x42e/0xee0
__x64_sys_epoll_wait+0x15b/0x280
do_syscall_64+0xbf/0x360
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f822d4ad116
Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
RSP: 002b:00007ffd8ef303e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 0000564ddd37ab70 RCX: 00007f822d4ad116
RDX: 000000000000002d RSI: 0000564dddc80270 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: 21b421cfb37a7847
R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
R13: 000000000000002d R14: 0000000000000000 R15: 0000564db015eb4e
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 00007f822ccd0900(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000000fd61000 CR4: 0000000000350ef0
note: systemd[1] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#13] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 485 Comm: kworker/u9:5 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880163f7700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880472a0000 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880163f7970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 00000000486a5000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 00000000486a5000 CR4: 0000000000350ef0
note: kworker/u9:5[485] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#14] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 498 Comm: kworker/u9:6 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff8880471af700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff88804729d280 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff8880471af970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
note: kworker/u9:6[498] exited with preempt_count 2
kworker/u9:3 (107) used greatest stack depth: 23920 bytes left
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#15] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 1503 Comm: kworker/u9:7 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801bc8f700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff8880482d3700 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801bc8f970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000004859e000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 000000004859e000 CR4: 0000000000350ef0
note: kworker/u9:7[1503] exited with preempt_count 2
Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#16] SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
CPU: 0 UID: 0 PID: 25 Comm: kworker/u9:0 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88800976f700 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888009751b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88800976f970 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
Call Trace:
perf_trace_run_bpf_submit+0xef/0x180
perf_trace_contention_end+0x235/0x3e0
trace_contention_end+0xae/0x110
__mutex_lock+0x166/0x1020
cfg80211_wiphy_work+0x7e/0x480
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:perf_tp_event+0x175/0xe70
Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
RSP: 0018:ffff88801788f8c0 EFLAGS: 00010212
RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
RDX: ffff888016509b80 RSI: ffffffff818995b7 RDI: 0000000100000190
RBP: ffff88801788fb30 R08: ffff88806ce31340 R09: ffffe8ffffc156f8
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1480122ae0 CR3: 0000000045ed1000 CR4: 0000000000350ef0
note: kworker/u9:0[25] exited with preempt_count 2
----------------
Code disassembly (best guess), 1 bytes skipped:
0: df 48 89 fisttps -0x77(%rax)
3: 85 a8 fd ff ff 48 test %ebp,0x48fffffd(%rax)
9: c1 e8 03 shr $0x3,%eax
c: 4c 01 e0 add %r12,%rax
f: 48 89 85 c8 fd ff ff mov %rax,-0x238(%rbp)
16: e8 c9 51 ea ff callq 0xffea51e4
1b: 48 8d bb f0 01 00 00 lea 0x1f0(%rbx),%rdi
22: 48 89 f8 mov %rdi,%rax
25: 48 c1 e8 03 shr $0x3,%rax
* 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 74 08 je 0x3a
32: 3c 03 cmp $0x3,%al
34: 0f 8e c5 0b 00 00 jle 0xbff
3a: 44 rex.R
3b: 8b .byte 0x8b
3c: ab stos %eax,%es:(%rdi)
3d: f0 lock
3e: 01 .byte 0x1