------------[ cut here ]------------
WARNING: CPU: 0 PID: 3967 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 3967 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 4b 2a f1 ff 65 8b 2d 10 83 ad 7e 31 ff 89 ee e8 eb 26 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 2a f1 ff <0f> 0b eb 9f e8 25 9f 23 00 e9 17 fc ff ff e8 1b 2a f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff8880401b85c8 RCX: 0000000000000000
RDX: ffff88803eeb0000 RSI: ffffffff8154f2c2 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b601b R12: ffff8880401b87e8
R13: 0000000000000000 R14: ffff8880401b8670 R15: ffff8880401b87e8
FS: 00005555568e5400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7c2fc1e004 CR3: 000000003eeec000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:stack_access_ok+0xde/0x1d0
Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e5 00 00 00 48 8b 73 28 48 89 da 48 89 ef e8 0d 9a f6 ff 85 c0 74 13 31 c0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e e9 66 8a 4e 03 48 b8 00 00 00 00 00 fc ff df
RSP: 0018:ffff88803ffff7b8 EFLAGS: 00000292
RAX: ffff888040000001 RBX: 0000000000000001 RCX: 0000000000000001
RDX: ffff88803ffffe01 RSI: ffff88803ffffe58 RDI: ffff88803ffff870
RBP: ffff88803ffffe58 R08: ffffffff85ef15b8 R09: ffffffff85ef15bc
R10: ffffed1007ffff19 R11: 000000000003603d R12: 0000000000000008
R13: ffff88803fff8000 R14: ffff88803ffff860 R15: ffffffff85ef15bd
unwind_next_frame+0x9bc/0x20b0
arch_stack_walk+0x83/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
__kasan_slab_alloc+0x58/0x70
kmem_cache_alloc+0x1a9/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_lru+0x2d8/0x740
__d_alloc+0x31/0x9c0
d_alloc+0x46/0x1c0
__lookup_hash+0xcc/0x190
filename_create+0x1d6/0x4a0
do_symlinkat+0xc4/0x2a0
__x64_sys_symlink+0x75/0x90
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2f1f026427
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff024870f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f1f026427
RDX: ffffffffffffffbc RSI: 00007f2f1f08100e RDI: 00007f2f1f0801dd
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff02486b70
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff024871c0
irq event stamp: 1124
hardirqs last enabled at (1123): [] obj_cgroup_charge+0x24d/0x870
hardirqs last disabled at (1124): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (226): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (217): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3967 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 3967 Comm: syz-executor.6 Tainted: G W 6.0.0-next-20221006 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 d8 04 ef ff 65 8b 05 9d 5d ab 7e 31 ff 89 c6 89 04 24 e8 75 01 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 b5 04 ef ff <0f> 0b e9 c4 fb ff ff e8 a9 04 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88806ce3d2c0 RCX: 0000000000000000
RDX: ffff88803eeb0000 RSI: ffffffff8157183b RDI: 0000000000000005
RBP: ffff8880401b85c8 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88806ce3d2c0
R13: ffff88806ce00000 R14: ffff8880401b8670 R15: ffff8880401b87e8
FS: 00005555568e5400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7c2fc1e004 CR3: 000000003eeec000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:stack_access_ok+0xde/0x1d0
Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e5 00 00 00 48 8b 73 28 48 89 da 48 89 ef e8 0d 9a f6 ff 85 c0 74 13 31 c0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e e9 66 8a 4e 03 48 b8 00 00 00 00 00 fc ff df
RSP: 0018:ffff88803ffff7b8 EFLAGS: 00000292
RAX: ffff888040000001 RBX: 0000000000000001 RCX: 0000000000000001
RDX: ffff88803ffffe01 RSI: ffff88803ffffe58 RDI: ffff88803ffff870
RBP: ffff88803ffffe58 R08: ffffffff85ef15b8 R09: ffffffff85ef15bc
R10: ffffed1007ffff19 R11: 000000000003603d R12: 0000000000000008
R13: ffff88803fff8000 R14: ffff88803ffff860 R15: ffffffff85ef15bd
unwind_next_frame+0x9bc/0x20b0
arch_stack_walk+0x83/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
__kasan_slab_alloc+0x58/0x70
kmem_cache_alloc+0x1a9/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_lru+0x2d8/0x740
__d_alloc+0x31/0x9c0
d_alloc+0x46/0x1c0
__lookup_hash+0xcc/0x190
filename_create+0x1d6/0x4a0
do_symlinkat+0xc4/0x2a0
__x64_sys_symlink+0x75/0x90
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2f1f026427
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff024870f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f1f026427
RDX: ffffffffffffffbc RSI: 00007f2f1f08100e RDI: 00007f2f1f0801dd
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff02486b70
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff024871c0
irq event stamp: 1124
hardirqs last enabled at (1123): [] obj_cgroup_charge+0x24d/0x870
hardirqs last disabled at (1124): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (226): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (217): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
======================================================
----------------
Code disassembly (best guess):
0: 89 fa mov %edi,%edx
2: 48 c1 ea 03 shr $0x3,%rdx
6: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
a: 0f 85 e5 00 00 00 jne 0xf5
10: 48 8b 73 28 mov 0x28(%rbx),%rsi
14: 48 89 da mov %rbx,%rdx
17: 48 89 ef mov %rbp,%rdi
1a: e8 0d 9a f6 ff callq 0xfff69a2c
1f: 85 c0 test %eax,%eax
21: 74 13 je 0x36
23: 31 c0 xor %eax,%eax
25: 48 83 c4 08 add $0x8,%rsp
29: 5b pop %rbx
* 2a: 5d pop %rbp <-- trapping instruction
2b: 41 5c pop %r12
2d: 41 5d pop %r13
2f: 41 5e pop %r14
31: e9 66 8a 4e 03 jmpq 0x34e8a9c
36: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
3d: fc ff df