------------[ cut here ]------------ WARNING: CPU: 0 PID: 4015 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 Modules linked in: CPU: 0 PID: 4015 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:event_filter_match+0x422/0x660 Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 55 88 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88803fb00000 RCX: 0000000000000000 RDX: ffff888040620000 RSI: ffffffff81550212 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88803fb00220 R13: 0000000000000000 R14: ffff88803fb000a8 R15: ffff88803fb00220 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0b2ed37000 CR3: 000000001b7e4000 CR4: 0000000000350ef0 Call Trace: merge_sched_in+0x107/0x1110 visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:kasan_check_range+0x15a/0x1c0 Code: d0 49 39 c2 0f 85 f3 fe ff ff 4c 89 c8 49 0f be 12 83 e0 07 48 39 d0 0f 8d e0 fe ff ff 41 bb 01 00 00 00 5b 5d 44 89 d8 41 5c d1 b3 e7 02 48 85 d2 74 e9 48 01 ea eb 09 48 83 c0 01 48 39 d0 RSP: 0018:ffff888040647610 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff88801a727700 RCX: ffffffff816e2994 RDX: ffffed10034e4fa4 RSI: 0000000000000004 RDI: ffff88801a727d1c RBP: ffff88803eef6000 R08: 0000000000000000 R09: ffff88801a727d1f R10: ffffed10034e4fa3 R11: 0000000000000001 R12: ffff88801a727d1c R13: 000000003eef6067 R14: dffffc0000000000 R15: 0000000000000000 flush_tlb_batched_pending+0x24/0xd0 unmap_page_range+0x9e3/0x2a10 unmap_single_vma+0x190/0x350 unmap_vmas+0x21e/0x370 exit_mmap+0x154/0x680 mmput+0xd1/0x390 do_exit+0xa2e/0x27f0 do_group_exit+0xd0/0x2a0 get_signal+0x219a/0x22d0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f78e94f5b19 Code: Unable to access opcode bytes at RIP 0x7f78e94f5aef. RSP: 002b:00007f78e6a6b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f78e9608f68 RCX: 00007f78e94f5b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78e9608f68 RBP: 00007f78e9608f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f78e9608f6c R13: 00007ffe74945abf R14: 00007f78e6a6b300 R15: 0000000000022000 irq event stamp: 532 hardirqs last enabled at (531): [] kasan_quarantine_put+0x8b/0x1f0 hardirqs last disabled at (532): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (352): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (341): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4015 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 Modules linked in: CPU: 0 PID: 4015 Comm: syz-executor.6 Tainted: G W 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:merge_sched_in+0xadb/0x1110 Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9 RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88806ce3d100 RCX: 0000000000000000 RDX: ffff888040620000 RSI: ffffffff815700eb RDI: 0000000000000005 RBP: ffff88803fb00000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100 R13: ffff88806ce00000 R14: ffff88803fb000a8 R15: ffff88803fb00220 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0b2ed37000 CR3: 000000001b7e4000 CR4: 0000000000350ef0 Call Trace: visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:kasan_check_range+0x15a/0x1c0 Code: d0 49 39 c2 0f 85 f3 fe ff ff 4c 89 c8 49 0f be 12 83 e0 07 48 39 d0 0f 8d e0 fe ff ff 41 bb 01 00 00 00 5b 5d 44 89 d8 41 5c d1 b3 e7 02 48 85 d2 74 e9 48 01 ea eb 09 48 83 c0 01 48 39 d0 RSP: 0018:ffff888040647610 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff88801a727700 RCX: ffffffff816e2994 RDX: ffffed10034e4fa4 RSI: 0000000000000004 RDI: ffff88801a727d1c RBP: ffff88803eef6000 R08: 0000000000000000 R09: ffff88801a727d1f R10: ffffed10034e4fa3 R11: 0000000000000001 R12: ffff88801a727d1c R13: 000000003eef6067 R14: dffffc0000000000 R15: 0000000000000000 flush_tlb_batched_pending+0x24/0xd0 unmap_page_range+0x9e3/0x2a10 unmap_single_vma+0x190/0x350 unmap_vmas+0x21e/0x370 exit_mmap+0x154/0x680 mmput+0xd1/0x390 do_exit+0xa2e/0x27f0 do_group_exit+0xd0/0x2a0 get_signal+0x219a/0x22d0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f78e94f5b19 Code: Unable to access opcode bytes at RIP 0x7f78e94f5aef. RSP: 002b:00007f78e6a6b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f78e9608f68 RCX: 00007f78e94f5b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78e9608f68 RBP: 00007f78e9608f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f78e9608f6c R13: 00007ffe74945abf R14: 00007f78e6a6b300 R15: 0000000000022000 irq event stamp: 532 hardirqs last enabled at (531): [] kasan_quarantine_put+0x8b/0x1f0 hardirqs last disabled at (532): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (352): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (341): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4065 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 Modules linked in: CPU: 0 PID: 4065 Comm: syz-executor.4 Tainted: G W 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:perf_group_detach+0x99e/0x12f0 Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 96 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88803fb01158 RCX: 0000000000000000 RDX: ffff888040290000 RSI: ffffffff8157c03e RDI: 0000000000000005 RBP: ffff88803fb01158 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 R13: ffff88803fb011e8 R14: ffff88806ce3d100 R15: ffff88803fb01158 FS: 0000555555ac0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555ac1c18 CR3: 000000003eef2000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lock_is_held_type+0xf8/0x130 Code: 60 ef 86 84 e8 a9 0c 00 00 b8 ff ff ff ff 65 0f c1 05 0c 41 de 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 46 04 3c 00 45 31 ed eb RSP: 0018:ffff88804029fbe0 EFLAGS: 00000292 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff85406ee0 R08: 0000000000000000 R09: ffffffff85b02f57 R10: fffffbfff0b605ea R11: 0000000000000001 R12: ffff888040290000 R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888040290978 rcu_read_lock_sched_held+0x3e/0x80 lock_release+0x547/0x750 __might_fault+0x142/0x170 kernel_clone+0x4d8/0x890 __do_sys_clone+0xba/0x100 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdee1fa6f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffd3cc0b1d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fdedf51b700 RCX: 00007fdee1fa6f41 RDX: 00007fdedf51b9d0 RSI: 00007fdedf51b2f0 RDI: 00000000003d0f00 RBP: 00007ffd3cc0b410 R08: 00007fdedf51b700 R09: 00007fdedf51b700 R10: 00007fdedf51b9d0 R11: 0000000000000206 R12: 00007ffd3cc0b28e R13: 00007ffd3cc0b28f R14: 00007fdedf51b300 R15: 0000000000022000 irq event stamp: 1890 hardirqs last enabled at (1889): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (1890): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1862): [] fpu_clone+0x3c2/0xb00 softirqs last disabled at (1860): [] fpu_clone+0x335/0xb00 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4065 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 Modules linked in: CPU: 0 PID: 4065 Comm: syz-executor.4 Tainted: G W 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:perf_group_detach+0x9c7/0x12f0 Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888040290000 RSI: ffffffff8157c067 RDI: 0000000000000005 RBP: ffff88803fb01158 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88803fb01158 R13: ffff88803fb01158 R14: ffff88806ce3d100 R15: ffff88803fb01158 FS: 0000555555ac0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555ac1c18 CR3: 000000003eef2000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lock_is_held_type+0xf8/0x130 Code: 60 ef 86 84 e8 a9 0c 00 00 b8 ff ff ff ff 65 0f c1 05 0c 41 de 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 46 04 3c 00 45 31 ed eb RSP: 0018:ffff88804029fbe0 EFLAGS: 00000292 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff85406ee0 R08: 0000000000000000 R09: ffffffff85b02f57 R10: fffffbfff0b605ea R11: 0000000000000001 R12: ffff888040290000 R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888040290978 rcu_read_lock_sched_held+0x3e/0x80 lock_release+0x547/0x750 __might_fault+0x142/0x170 kernel_clone+0x4d8/0x890 __do_sys_clone+0xba/0x100 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdee1fa6f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffd3cc0b1d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fdedf51b700 RCX: 00007fdee1fa6f41 RDX: 00007fdedf51b9d0 RSI: 00007fdedf51b2f0 RDI: 00000000003d0f00 RBP: 00007ffd3cc0b410 R08: 00007fdedf51b700 R09: 00007fdedf51b700 R10: 00007fdedf51b9d0 R11: 0000000000000206 R12: 00007ffd3cc0b28e R13: 00007ffd3cc0b28f R14: 00007fdedf51b300 R15: 0000000000022000 irq event stamp: 1890 hardirqs last enabled at (1889): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (1890): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1862): [] fpu_clone+0x3c2/0xb00 softirqs last disabled at (1860): [] fpu_clone+0x335/0xb00 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4065 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 Modules linked in: CPU: 0 PID: 4065 Comm: syz-executor.4 Tainted: G W 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d cd 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888040290000 RSI: ffffffff81555205 RDI: 0000000000000005 RBP: ffff88803fb01158 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 R13: ffff88803fb01200 R14: 0000000000000001 R15: 0000000000000001 FS: 0000555555ac0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555ac1c18 CR3: 000000003eef2000 CR4: 0000000000350ef0 Call Trace: list_del_event+0x524/0x860 __perf_remove_from_context+0xd2/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lock_is_held_type+0xf8/0x130 Code: 60 ef 86 84 e8 a9 0c 00 00 b8 ff ff ff ff 65 0f c1 05 0c 41 de 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 46 04 3c 00 45 31 ed eb RSP: 0018:ffff88804029fbe0 EFLAGS: 00000292 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff85406ee0 R08: 0000000000000000 R09: ffffffff85b02f57 R10: fffffbfff0b605ea R11: 0000000000000001 R12: ffff888040290000 R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888040290978 rcu_read_lock_sched_held+0x3e/0x80 lock_release+0x547/0x750 __might_fault+0x142/0x170 kernel_clone+0x4d8/0x890 __do_sys_clone+0xba/0x100 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdee1fa6f41 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffd3cc0b1d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fdedf51b700 RCX: 00007fdee1fa6f41 RDX: 00007fdedf51b9d0 RSI: 00007fdedf51b2f0 RDI: 00000000003d0f00 RBP: 00007ffd3cc0b410 R08: 00007fdedf51b700 R09: 00007fdedf51b700 R10: 00007fdedf51b9d0 R11: 0000000000000206 R12: 00007ffd3cc0b28e R13: 00007ffd3cc0b28f R14: 00007fdedf51b300 R15: 0000000000022000 irq event stamp: 1890 hardirqs last enabled at (1889): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (1890): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1862): [] fpu_clone+0x3c2/0xb00 softirqs last disabled at (1860): [] fpu_clone+0x335/0xb00 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4084 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 Modules linked in: CPU: 0 PID: 4084 Comm: syz-executor.7 Tainted: G W 6.0.0-rc5-next-20220915 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:group_sched_out.part.0+0x2c7/0x460 Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 RSP: 0018:ffff88806ce09e48 EFLAGS: 00010046 RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888040309ac0 RSI: ffffffff81566027 RDI: 0000000000000005 RBP: ffff88803fb02878 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100 R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f67cb98e000 CR3: 00000000103da000 CR4: 0000000000350ef0 Call Trace: ctx_sched_out+0x8f1/0xc10 ctx_resched+0x2f3/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:finish_task_switch.isra.0+0x237/0x8a0 Code: 89 ff 48 c7 03 00 00 00 00 e8 55 b5 3f 03 4d 85 e4 75 ba 4c 89 ff e8 48 b6 05 03 e8 e3 6b 2c 00 fb 65 48 8b 1c 25 c0 6e 02 00 <48> 8d bb 10 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 RSP: 0018:ffff8880403677b0 EFLAGS: 00000206 RAX: 0000000000000c93 RBX: ffff888040309ac0 RCX: ffffffff812999ff RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8880403677f0 R08: 0000000000000001 R09: ffffffff86ccb7ef R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88806ce37cd8 R13: ffff88801b42d040 R14: ffff888040309f70 R15: ffff88806ce37cc0 __schedule+0x89b/0x2470 preempt_schedule_common+0x45/0xc0 __cond_resched+0x17/0x30 unmap_page_range+0xd89/0x2a10 unmap_single_vma+0x190/0x350 unmap_vmas+0x21e/0x370 exit_mmap+0x154/0x680 mmput+0xd1/0x390 do_exit+0xa2e/0x27f0 do_group_exit+0xd0/0x2a0 __x64_sys_exit_group+0x3a/0x50 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2775453b19 Code: Unable to access opcode bytes at RIP 0x7f2775453aef. RSP: 002b:00007ffd2e625368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f2775453b19 RDX: 00007f277540672b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2e0238b4 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd2e625450 irq event stamp: 3220 hardirqs last enabled at (3219): [] finish_task_switch.isra.0+0x22d/0x8a0 hardirqs last disabled at (3220): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (3208): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (3203): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- loop0: detected capacity change from 0 to 40 hrtimer: interrupt took 28453 ns loop0: detected capacity change from 0 to 40 Process accounting resumed Process accounting resumed loop0: detected capacity change from 0 to 40 loop1: detected capacity change from 0 to 40 loop7: detected capacity change from 0 to 40 loop4: detected capacity change from 0 to 40 loop2: detected capacity change from 0 to 40 Process accounting resumed loop3: detected capacity change from 0 to 40 Process accounting resumed loop1: detected capacity change from 0 to 40 loop0: detected capacity change from 0 to 40 Process accounting resumed Process accounting resumed Process accounting resumed Process accounting resumed Process accounting resumed Process accounting resumed loop0: detected capacity change from 0 to 40 loop2: detected capacity change from 0 to 40 loop4: detected capacity change from 0 to 40 loop7: detected capacity change from 0 to 40 loop3: detected capacity change from 0 to 40 loop1: detected capacity change from 0 to 40 ------------[ cut here ]------------ ====================================================== ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 49 39 c2 cmp %rax,%r10 3: 0f 85 f3 fe ff ff jne 0xfffffefc 9: 4c 89 c8 mov %r9,%rax c: 49 0f be 12 movsbq (%r10),%rdx 10: 83 e0 07 and $0x7,%eax 13: 48 39 d0 cmp %rdx,%rax 16: 0f 8d e0 fe ff ff jge 0xfffffefc 1c: 41 bb 01 00 00 00 mov $0x1,%r11d 22: 5b pop %rbx 23: 5d pop %rbp 24: 44 89 d8 mov %r11d,%eax 27: 41 5c pop %r12 * 29: e9 d1 b3 e7 02 jmpq 0x2e7b3ff <-- trapping instruction 2e: 48 85 d2 test %rdx,%rdx 31: 74 e9 je 0x1c 33: 48 01 ea add %rbp,%rdx 36: eb 09 jmp 0x41 38: 48 83 c0 01 add $0x1,%rax 3c: 48 39 d0 cmp %rdx,%rax