------------[ cut here ]------------
WARNING: CPU: 0 PID: 5421 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 5421 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220914 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 25 80 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff888039420000 RCX: 0000000000000000
RDX: ffff888037cad040 RSI: ffffffff81550212 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888039420220
R13: 0000000000000000 R14: ffff8880394200a8 R15: ffff888039420220
FS: 0000555556bc5400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556c2bfbe788 CR3: 00000000375c6000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60
Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ea 0a 04 fd 48 89 ef e8 42 80 04 fd 80 e7 02 74 06 e8 e8 c2 26 fd fb bf 01 00 00 00 8d 0b fa fc 65 8b 05 b6 41 dc 7b 85 c0 74 07 5b 5d e9 2b 0e 3a
RSP: 0018:ffff888037cc78b0 EFLAGS: 00000202
RAX: 0000000000000b07 RBX: 0000000000000202 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff88800dcfaa20 R08: 0000000000000001 R09: ffffffff86ccb7ef
R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88800dcfaab0
R13: ffff88800dcfaa60 R14: ffff888007c75000 R15: ffff88803692cc00
__delete_object+0xb3/0x100
kmem_cache_free_bulk.part.0+0x305/0x770
mas_destroy+0x380/0x560
mas_store_prealloc+0xf0/0x160
__vma_adjust+0x76b/0x1aa0
__split_vma+0x2a1/0x5d0
split_vma+0x9f/0xe0
mprotect_fixup+0x710/0x8c0
do_mprotect_pkey+0x6fb/0xa70
__x64_sys_mprotect+0x74/0xb0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff771aeec27
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff13f6b028 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007ff771aeec27
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff76f024000
RBP: 00007fff13f6b100 R08: 00000000ffffffff R09: 00007ff76f043700
R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff13f6b210
R13: 00007ff76f043700 R14: 0000000000000000 R15: 0000000000022000
irq event stamp: 2826
hardirqs last enabled at (2825): [] asm_sysvec_apic_timer_interrupt+0x16/0x20
hardirqs last disabled at (2826): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (2754): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (2747): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5421 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 5421 Comm: syz-executor.6 Tainted: G W 6.0.0-rc5-next-20220914 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88806ce3ef00 RCX: 0000000000000000
RDX: ffff888037cad040 RSI: ffffffff815700eb RDI: 0000000000000005
RBP: ffff888039420000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3ef00
R13: 0000000000000001 R14: ffff8880394200a8 R15: ffff888039420220
FS: 0000555556bc5400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556c2bfbe788 CR3: 00000000375c6000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60
Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ea 0a 04 fd 48 89 ef e8 42 80 04 fd 80 e7 02 74 06 e8 e8 c2 26 fd fb bf 01 00 00 00 8d 0b fa fc 65 8b 05 b6 41 dc 7b 85 c0 74 07 5b 5d e9 2b 0e 3a
RSP: 0018:ffff888037cc78b0 EFLAGS: 00000202
RAX: 0000000000000b07 RBX: 0000000000000202 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff88800dcfaa20 R08: 0000000000000001 R09: ffffffff86ccb7ef
R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88800dcfaab0
R13: ffff88800dcfaa60 R14: ffff888007c75000 R15: ffff88803692cc00
__delete_object+0xb3/0x100
kmem_cache_free_bulk.part.0+0x305/0x770
mas_destroy+0x380/0x560
mas_store_prealloc+0xf0/0x160
__vma_adjust+0x76b/0x1aa0
__split_vma+0x2a1/0x5d0
split_vma+0x9f/0xe0
mprotect_fixup+0x710/0x8c0
do_mprotect_pkey+0x6fb/0xa70
__x64_sys_mprotect+0x74/0xb0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff771aeec27
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff13f6b028 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007ff771aeec27
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff76f024000
RBP: 00007fff13f6b100 R08: 00000000ffffffff R09: 00007ff76f043700
R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff13f6b210
R13: 00007ff76f043700 R14: 0000000000000000 R15: 0000000000022000
irq event stamp: 2826
hardirqs last enabled at (2825): [] asm_sysvec_apic_timer_interrupt+0x16/0x20
hardirqs last disabled at (2826): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (2754): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (2747): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0
Modules linked in:
CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc5-next-20220914 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_detach+0x99e/0x12f0
Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 96 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89
RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff888039420000 RCX: 0000000000000100
RDX: ffff888008638000 RSI: ffffffff8157c03e RDI: 0000000000000005
RBP: ffff888039420000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffff888039420090 R14: ffff88806ce3ef00 R15: ffff888039420000
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50482458e0 CR3: 000000001ac66000 CR4: 0000000000350ef0
Call Trace:
__perf_remove_from_context+0x71e/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:unwind_next_frame+0x14cd/0x20b0
Code: 02 00 0f 85 3c 08 00 00 4d 89 66 50 e9 1e f9 ff ff 48 b9 00 00 00 00 00 fc ff df 49 8d 78 02 48 89 f8 48 c1 e8 03 0f b6 14 08 <49> 8d 40 03 48 89 c6 48 c1 ee 03 0f b6 0c 0e 48 89 fe 83 e6 07 40
RSP: 0018:ffff888008647888 EFLAGS: 00000216
RAX: 1ffffffff0bc5cb8 RBX: 0000000000000001 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: ffff8880086479f8 RDI: ffffffff85e2e5c0
RBP: ffff8880086479b0 R08: ffffffff85e2e5be R09: ffffffff85e2e5c2
R10: ffffed10010c8f38 R11: ffff888008647998 R12: ffff888008647999
R13: ffff8880086479b8 R14: ffff888008647958 R15: 0000000000000003
__unwind_start+0x50f/0x7c0
arch_stack_walk+0x5f/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
kasan_save_free_info+0x2a/0x50
__kasan_slab_free+0x106/0x190
kmem_cache_free+0xf7/0x610
rcu_core+0x7e2/0x2080
__do_softirq+0x1c8/0x8d0
run_ksoftirqd+0x31/0x60
smpboot_thread_fn+0x66f/0xa10
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 2870099
hardirqs last enabled at (2870098): [] kasan_quarantine_put+0x8b/0x1f0
hardirqs last disabled at (2870099): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (2869992): [] run_ksoftirqd+0x31/0x60
softirqs last disabled at (2869997): [] run_ksoftirqd+0x31/0x60
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0
Modules linked in:
CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc5-next-20220914 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_detach+0x9c7/0x12f0
Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00
RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff888008638000 RSI: ffffffff8157c067 RDI: 0000000000000005
RBP: ffff888039420000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888039420000
R13: ffff888039420000 R14: ffff88806ce3ef00 R15: ffff888039420000
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50482458e0 CR3: 000000001ac66000 CR4: 0000000000350ef0
Call Trace:
__perf_remove_from_context+0x71e/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:unwind_next_frame+0x14cd/0x20b0
Code: 02 00 0f 85 3c 08 00 00 4d 89 66 50 e9 1e f9 ff ff 48 b9 00 00 00 00 00 fc ff df 49 8d 78 02 48 89 f8 48 c1 e8 03 0f b6 14 08 <49> 8d 40 03 48 89 c6 48 c1 ee 03 0f b6 0c 0e 48 89 fe 83 e6 07 40
RSP: 0018:ffff888008647888 EFLAGS: 00000216
RAX: 1ffffffff0bc5cb8 RBX: 0000000000000001 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: ffff8880086479f8 RDI: ffffffff85e2e5c0
RBP: ffff8880086479b0 R08: ffffffff85e2e5be R09: ffffffff85e2e5c2
R10: ffffed10010c8f38 R11: ffff888008647998 R12: ffff888008647999
R13: ffff8880086479b8 R14: ffff888008647958 R15: 0000000000000003
__unwind_start+0x50f/0x7c0
arch_stack_walk+0x5f/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
kasan_save_free_info+0x2a/0x50
__kasan_slab_free+0x106/0x190
kmem_cache_free+0xf7/0x610
rcu_core+0x7e2/0x2080
__do_softirq+0x1c8/0x8d0
run_ksoftirqd+0x31/0x60
smpboot_thread_fn+0x66f/0xa10
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 2870099
hardirqs last enabled at (2870098): [] kasan_quarantine_put+0x8b/0x1f0
hardirqs last disabled at (2870099): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (2869992): [] run_ksoftirqd+0x31/0x60
softirqs last disabled at (2869997): [] run_ksoftirqd+0x31/0x60
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0
Modules linked in:
CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc5-next-20220914 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0
Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d cd 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff
RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff888008638000 RSI: ffffffff81555205 RDI: 0000000000000005
RBP: ffff888039420000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffff8880394200a8 R14: 0000000000000001 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f50482458e0 CR3: 000000001ac66000 CR4: 0000000000350ef0
Call Trace:
list_del_event+0x524/0x860
__perf_remove_from_context+0xd2/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:unwind_next_frame+0x14cd/0x20b0
Code: 02 00 0f 85 3c 08 00 00 4d 89 66 50 e9 1e f9 ff ff 48 b9 00 00 00 00 00 fc ff df 49 8d 78 02 48 89 f8 48 c1 e8 03 0f b6 14 08 <49> 8d 40 03 48 89 c6 48 c1 ee 03 0f b6 0c 0e 48 89 fe 83 e6 07 40
RSP: 0018:ffff888008647888 EFLAGS: 00000216
RAX: 1ffffffff0bc5cb8 RBX: 0000000000000001 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: ffff8880086479f8 RDI: ffffffff85e2e5c0
RBP: ffff8880086479b0 R08: ffffffff85e2e5be R09: ffffffff85e2e5c2
R10: ffffed10010c8f38 R11: ffff888008647998 R12: ffff888008647999
R13: ffff8880086479b8 R14: ffff888008647958 R15: 0000000000000003
__unwind_start+0x50f/0x7c0
arch_stack_walk+0x5f/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
kasan_save_free_info+0x2a/0x50
__kasan_slab_free+0x106/0x190
kmem_cache_free+0xf7/0x610
rcu_core+0x7e2/0x2080
__do_softirq+0x1c8/0x8d0
run_ksoftirqd+0x31/0x60
smpboot_thread_fn+0x66f/0xa10
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 2870099
hardirqs last enabled at (2870098): [] kasan_quarantine_put+0x8b/0x1f0
hardirqs last disabled at (2870099): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (2869992): [] run_ksoftirqd+0x31/0x60
softirqs last disabled at (2869997): [] run_ksoftirqd+0x31/0x60
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
0: 48 83 c7 18 add $0x18,%rdi
4: 53 push %rbx
5: 48 89 f3 mov %rsi,%rbx
8: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
d: e8 ea 0a 04 fd callq 0xfd040afc
12: 48 89 ef mov %rbp,%rdi
15: e8 42 80 04 fd callq 0xfd04805c
1a: 80 e7 02 and $0x2,%bh
1d: 74 06 je 0x25
1f: e8 e8 c2 26 fd callq 0xfd26c30c
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 8d 0b fa fc callq 0xfcfa0bbc <-- trapping instruction
2f: 65 8b 05 b6 41 dc 7b mov %gs:0x7bdc41b6(%rip),%eax # 0x7bdc41ec
36: 85 c0 test %eax,%eax
38: 74 07 je 0x41
3a: 5b pop %rbx
3b: 5d pop %rbp
3c: e9 .byte 0xe9
3d: 2b 0e sub (%rsi),%ecx
3f: 3a .byte 0x3a