------------[ cut here ]------------ WARNING: CPU: 0 PID: 82976 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 Modules linked in: CPU: 0 PID: 82976 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220914 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:event_filter_match+0x422/0x660 Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 25 80 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b RSP: 0000:ffff88806ce09c70 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88803aa4a2b0 RCX: 0000000000000000 RDX: ffff88803a690000 RSI: ffffffff81550212 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88803aa4a4d0 R13: 0000000000000000 R14: ffff88803aa4a358 R15: ffff88803aa4a4d0 FS: 00005555563a0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdb30c86f64 CR3: 0000000019f2c000 CR4: 0000000000350ef0 Call Trace: merge_sched_in+0x107/0x1110 visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:do_wp_page+0x618/0x2050 Code: df 48 89 ca 48 c1 ea 03 0f b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 48 89 cf e8 9d 22 0f 00 41 8b 44 24 34 03 00 00 00 89 c6 89 44 24 18 e8 38 b4 dc ff 8b 44 24 18 83 f8 RSP: 0000:ffff88803ca17cb8 EFLAGS: 00000246 RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffea0000cbb174 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000cbb174 RBP: ffff88803ca17d88 R08: 0000000000000000 R09: ffffea0000cbb177 R10: fffff9400019762e R11: 0000000000000001 R12: ffffea0000cbb140 R13: ffff888039bb3410 R14: ffff88803ca17dd8 R15: ffff88803ca17db0 __handle_mm_fault+0x11eb/0x35e0 handle_mm_fault+0x2e6/0xa20 do_user_addr_fault+0x536/0x1300 exc_page_fault+0x98/0x1a0 asm_exc_page_fault+0x22/0x30 RIP: 0033:0x7fdb30b1f742 Code: 49 83 ff 10 0f 84 cf 00 00 00 49 69 c7 c0 00 00 00 80 7b f8 00 44 89 7c 24 70 48 8d 6b f4 48 89 5c 24 28 48 89 44 24 38 75 bc 43 f8 01 31 c0 b9 40 42 0f 00 ba 81 00 00 00 44 89 7b f4 48 89 RSP: 002b:00007ffd2bdf5360 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007fdb30c86f6c RCX: 0000000000000000 RDX: 00007ffd2bdf54b8 RSI: 0000000000000000 RDI: 00007ffd2bdf54e8 RBP: 00007fdb30c86f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000016 R12: 00007fdb30c8b330 R13: 00007ffd2bdf5460 R14: 00007fdb30c86f60 R15: 0000000000000000 irq event stamp: 1518 hardirqs last enabled at (1517): [] handle_mm_fault+0x6fd/0xa20 hardirqs last disabled at (1518): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1056): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1033): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 82976 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 Modules linked in: CPU: 0 PID: 82976 Comm: syz-executor.2 Tainted: G W 6.0.0-rc5-next-20220914 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:merge_sched_in+0xadb/0x1110 Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9 RSP: 0000:ffff88806ce09cb0 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88806ce3ef00 RCX: 0000000000000000 RDX: ffff88803a690000 RSI: ffffffff815700eb RDI: 0000000000000005 RBP: ffff88803aa4a2b0 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3ef00 R13: 0000000000000001 R14: ffff88803aa4a358 R15: ffff88803aa4a4d0 FS: 00005555563a0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdb30c86f64 CR3: 0000000019f2c000 CR4: 0000000000350ef0 Call Trace: visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:do_wp_page+0x618/0x2050 Code: df 48 89 ca 48 c1 ea 03 0f b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 48 89 cf e8 9d 22 0f 00 41 8b 44 24 34 03 00 00 00 89 c6 89 44 24 18 e8 38 b4 dc ff 8b 44 24 18 83 f8 RSP: 0000:ffff88803ca17cb8 EFLAGS: 00000246 RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffea0000cbb174 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000cbb174 RBP: ffff88803ca17d88 R08: 0000000000000000 R09: ffffea0000cbb177 R10: fffff9400019762e R11: 0000000000000001 R12: ffffea0000cbb140 R13: ffff888039bb3410 R14: ffff88803ca17dd8 R15: ffff88803ca17db0 __handle_mm_fault+0x11eb/0x35e0 handle_mm_fault+0x2e6/0xa20 do_user_addr_fault+0x536/0x1300 exc_page_fault+0x98/0x1a0 asm_exc_page_fault+0x22/0x30 RIP: 0033:0x7fdb30b1f742 Code: 49 83 ff 10 0f 84 cf 00 00 00 49 69 c7 c0 00 00 00 80 7b f8 00 44 89 7c 24 70 48 8d 6b f4 48 89 5c 24 28 48 89 44 24 38 75 bc 43 f8 01 31 c0 b9 40 42 0f 00 ba 81 00 00 00 44 89 7b f4 48 89 RSP: 002b:00007ffd2bdf5360 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007fdb30c86f6c RCX: 0000000000000000 RDX: 00007ffd2bdf54b8 RSI: 0000000000000000 RDI: 00007ffd2bdf54e8 RBP: 00007fdb30c86f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000016 R12: 00007fdb30c8b330 R13: 00007ffd2bdf5460 R14: 00007fdb30c86f60 R15: 0000000000000000 irq event stamp: 1518 hardirqs last enabled at (1517): [] handle_mm_fault+0x6fd/0xa20 hardirqs last disabled at (1518): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1056): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1033): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- loop0: detected capacity change from 0 to 14 loop5: detected capacity change from 0 to 14 loop6: detected capacity change from 0 to 14 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 48 89 ca mov %rcx,%rdx 3: 48 c1 ea 03 shr $0x3,%rdx 7: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx b: 48 89 c8 mov %rcx,%rax e: 83 e0 07 and $0x7,%eax 11: 83 c0 03 add $0x3,%eax 14: 38 d0 cmp %dl,%al 16: 7c 0c jl 0x24 18: 84 d2 test %dl,%dl 1a: 74 08 je 0x24 1c: 48 89 cf mov %rcx,%rdi 1f: e8 9d 22 0f 00 callq 0xf22c1 24: 41 8b 44 24 34 mov 0x34(%r12),%eax * 29: bf 03 00 00 00 mov $0x3,%edi <-- trapping instruction 2e: 89 c6 mov %eax,%esi 30: 89 44 24 18 mov %eax,0x18(%rsp) 34: e8 38 b4 dc ff callq 0xffdcb471 39: 8b 44 24 18 mov 0x18(%rsp),%eax 3d: 83 .byte 0x83 3e: f8 clc