Invalid ELF header magic: != ELF Invalid ELF header magic: != ELF Invalid ELF header magic: != ELF Invalid ELF header magic: != ELF Invalid ELF header magic: != ELF Oops: general protection fault, probably for non-canonical address 0xdffffc0003c540c0: 0000 [#1] SMP KASAN NOPTI KASAN: probably user-memory-access in range [0x000000001e2a0600-0x000000001e2a0607] CPU: 0 UID: 0 PID: 4008 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:destroy_workqueue+0x5a2/0xa00 Code: 3f 0f 87 24 01 00 00 e8 0c 58 31 00 89 de 48 89 ef e8 52 6b fe ff 49 89 c7 48 85 c0 74 41 e8 f5 57 31 00 4c 89 fa 48 c1 ea 03 <42> 80 3c 22 00 0f 85 89 03 00 00 49 8b 3f e8 bb 50 7b 03 4c 89 ff RSP: 0018:ffff888047167d40 EFLAGS: 00010216 RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000b252000 RDX: 0000000003c540c0 RSI: ffffffff81428f8b RDI: 0000000000000005 RBP: ffff888047542800 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 R13: ffffffff85852560 R14: ffffed1008ea8539 R15: 000000001e2a0600 FS: 00007fb6b74c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557b5421a4c8 CR3: 000000001e9a8000 CR4: 0000000000350ef0 Call Trace: lo_free_disk+0x6b/0xb0 disk_release+0x25d/0x420 device_release+0xa6/0x240 kobject_put+0x162/0x260 put_device+0x1f/0x30 put_disk+0x48/0x60 loop_control_ioctl+0x4d9/0x640 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb6b9f52b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb6b74c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb6ba065f60 RCX: 00007fb6b9f52b19 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 RBP: 00007fb6b9facf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb5f4596f R14: 00007fb6b74c8300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:destroy_workqueue+0x5a2/0xa00 Code: 3f 0f 87 24 01 00 00 e8 0c 58 31 00 89 de 48 89 ef e8 52 6b fe ff 49 89 c7 48 85 c0 74 41 e8 f5 57 31 00 4c 89 fa 48 c1 ea 03 <42> 80 3c 22 00 0f 85 89 03 00 00 49 8b 3f e8 bb 50 7b 03 4c 89 ff kmemleak: Automatic memory scanning thread ended RSP: 0018:ffff888047167d40 EFLAGS: 00010216 RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000b252000 RDX: 0000000003c540c0 RSI: ffffffff81428f8b RDI: 0000000000000005 RBP: ffff888047542800 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 R13: ffffffff85852560 R14: ffffed1008ea8539 R15: 000000001e2a0600 FS: 00007fb6b74c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557b5421a4c8 CR3: 000000001e9a8000 CR4: 0000000000350ef0 BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4008, name: syz-executor.7 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 0 UID: 0 PID: 4008 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __might_resched+0x2f3/0x510 exit_signals+0x25/0x940 do_exit+0x2db/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fb6b9f52b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb6b74c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb6ba065f60 RCX: 00007fb6b9f52b19 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 RBP: 00007fb6b9facf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb5f4596f R14: 00007fb6b74c8300 R15: 0000000000022000 kmemleak: Found object by alias at 0x607f1a62ba8c CPU: 1 UID: 0 PID: 4003 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc0283d7b19 Code: Unable to access opcode bytes at 0x7fc0283d7aef. RSP: 002b:00007ffc4a8e5ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc0283d7b19 RDX: 00007fc02838a72b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc4a8e5ba0 kmemleak: Object (percpu) 0x607f1a62ba88 (size 8): kmemleak: comm "syz-executor.0", pid 3991, jiffies 4294817617 kmemleak: min_count = 1 kmemleak: count = 1 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 __alloc_workqueue+0x74b/0x1820 alloc_workqueue_noprof+0xc7/0x200 loop_configure+0xf73/0x1590 lo_ioctl+0x66d/0x1c70 blkdev_ioctl+0x27c/0x6c0 __x64_sys_ioctl+0x18f/0x210 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 0f 87 24 01 00 00 ja 0x12a 6: e8 0c 58 31 00 callq 0x315817 b: 89 de mov %ebx,%esi d: 48 89 ef mov %rbp,%rdi 10: e8 52 6b fe ff callq 0xfffe6b67 15: 49 89 c7 mov %rax,%r15 18: 48 85 c0 test %rax,%rax 1b: 74 41 je 0x5e 1d: e8 f5 57 31 00 callq 0x315817 22: 4c 89 fa mov %r15,%rdx 25: 48 c1 ea 03 shr $0x3,%rdx * 29: 42 80 3c 22 00 cmpb $0x0,(%rdx,%r12,1) <-- trapping instruction 2e: 0f 85 89 03 00 00 jne 0x3bd 34: 49 8b 3f mov (%r15),%rdi 37: e8 bb 50 7b 03 callq 0x37b50f7 3c: 4c 89 ff mov %r15,%rdi