------------[ cut here ]------------
WARNING: CPU: 0 PID: 297 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 297 Comm: syz-executor.2 Not tainted 6.0.0-rc6-next-20220920 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 2b 1b f1 ff 65 8b 2d a0 74 ad 7e 31 ff 89 ee e8 cb 17 f1 ff 85 ed 0f 84 ef 00 00 00 e8 0e 1b f1 ff <0f> 0b eb 9f e8 e5 88 23 00 e9 17 fc ff ff e8 fb 1a f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88803d898000 RCX: 0000000000000000
RDX: ffff8880174b0000 RSI: ffffffff81550132 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88803d898220
R13: 0000000000000000 R14: ffff88803d8980a8 R15: ffff88803d898220
FS: 00005555555f3400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0e76fd004 CR3: 0000000017c5a000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:insert_vmap_area.constprop.0+0xd1/0x430
Code: 00 0f 85 bc 02 00 00 48 8b 5d 00 e8 a9 61 d7 ff 48 8d 7b f0 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 aa 02 00 00 48 8b 6b f0 <4c> 89 ef 48 89 ee e8 d4 5d d7 ff 49 39 ed 76 89 e8 7a 61 d7 ff 48
RSP: 0018:ffff88801c107838 EFLAGS: 00000246
RAX: 1ffff110011b7a0c RBX: ffff888008dbd070 RCX: 0000000000000000
RDX: ffff8880174b0000 RSI: ffffffff816eba97 RDI: ffff888008dbd060
RBP: ffffc900006f3000 R08: ffffc900006e5000 R09: ffffc9000077b000
R10: ffffc900006e5000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffffc9000077d000 R14: ffff88803c568ba0 R15: ffff888008dbd070
alloc_vmap_area+0xa2a/0x1c90
__get_vm_area_node+0x13c/0x350
__vmalloc_node_range+0x247/0x1400
__vmalloc_node+0xa8/0xf0
do_ipt_get_ctl+0x59a/0x950
nf_getsockopt+0x78/0xd0
ip_getsockopt+0x18c/0x1e0
tcp_getsockopt+0x9f/0x100
__sys_getsockopt+0x14c/0x250
__x64_sys_getsockopt+0xba/0x160
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f27ca5e913a
Code: 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc4e8e15b8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27ca5e913a
RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffc4e8e15e0 R08: 00007ffc4e8e15dc R09: ffffffffffff0000
R10: 00007ffc4e8e1640 R11: 0000000000000216 R12: 00007ffc4e8e1640
R13: 0000000000000003 R14: 00007ffc4e8e15dc R15: 00007f27ca6cad20
irq event stamp: 144062
hardirqs last enabled at (144061): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (144062): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (144046): [] do_ip_getsockopt+0x12be/0x1e70
softirqs last disabled at (144044): [] release_sock+0x1b/0x1b0
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 297 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 297 Comm: syz-executor.2 Tainted: G W 6.0.0-rc6-next-20220920 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 f8 18 ef ff 65 8b 05 6d 72 ab 7e 31 ff 89 c6 89 04 24 e8 95 15 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 d5 18 ef ff <0f> 0b e9 c4 fb ff ff e8 c9 18 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88806ce3d140 RCX: 0000000000000000
RDX: ffff8880174b0000 RSI: ffffffff8157036b RDI: 0000000000000005
RBP: ffff88803d898000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff88806ce3d140
R13: ffff88806ce00000 R14: ffff88803d8980a8 R15: ffff88803d898220
FS: 00005555555f3400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0e76fd004 CR3: 0000000017c5a000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:insert_vmap_area.constprop.0+0xd1/0x430
Code: 00 0f 85 bc 02 00 00 48 8b 5d 00 e8 a9 61 d7 ff 48 8d 7b f0 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 aa 02 00 00 48 8b 6b f0 <4c> 89 ef 48 89 ee e8 d4 5d d7 ff 49 39 ed 76 89 e8 7a 61 d7 ff 48
RSP: 0018:ffff88801c107838 EFLAGS: 00000246
RAX: 1ffff110011b7a0c RBX: ffff888008dbd070 RCX: 0000000000000000
RDX: ffff8880174b0000 RSI: ffffffff816eba97 RDI: ffff888008dbd060
RBP: ffffc900006f3000 R08: ffffc900006e5000 R09: ffffc9000077b000
R10: ffffc900006e5000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffffc9000077d000 R14: ffff88803c568ba0 R15: ffff888008dbd070
alloc_vmap_area+0xa2a/0x1c90
__get_vm_area_node+0x13c/0x350
__vmalloc_node_range+0x247/0x1400
__vmalloc_node+0xa8/0xf0
do_ipt_get_ctl+0x59a/0x950
nf_getsockopt+0x78/0xd0
ip_getsockopt+0x18c/0x1e0
tcp_getsockopt+0x9f/0x100
__sys_getsockopt+0x14c/0x250
__x64_sys_getsockopt+0xba/0x160
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f27ca5e913a
Code: 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc4e8e15b8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27ca5e913a
RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffc4e8e15e0 R08: 00007ffc4e8e15dc R09: ffffffffffff0000
R10: 00007ffc4e8e1640 R11: 0000000000000216 R12: 00007ffc4e8e1640
R13: 0000000000000003 R14: 00007ffc4e8e15dc R15: 00007f27ca6cad20
irq event stamp: 144062
hardirqs last enabled at (144061): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (144062): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (144046): [] do_ip_getsockopt+0x12be/0x1e70
softirqs last disabled at (144044): [] release_sock+0x1b/0x1b0
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
======================================================
----------------
Code disassembly (best guess):
0: 00 0f add %cl,(%rdi)
2: 85 bc 02 00 00 48 8b test %edi,-0x74b80000(%rdx,%rax,1)
9: 5d pop %rbp
a: 00 e8 add %ch,%al
c: a9 61 d7 ff 48 test $0x48ffd761,%eax
11: 8d 7b f0 lea -0x10(%rbx),%edi
14: 48 89 f8 mov %rdi,%rax
17: 48 c1 e8 03 shr $0x3,%rax
1b: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1)
20: 0f 85 aa 02 00 00 jne 0x2d0
26: 48 8b 6b f0 mov -0x10(%rbx),%rbp
* 2a: 4c 89 ef mov %r13,%rdi <-- trapping instruction
2d: 48 89 ee mov %rbp,%rsi
30: e8 d4 5d d7 ff callq 0xffd75e09
35: 49 39 ed cmp %rbp,%r13
38: 76 89 jbe 0xffffffc3
3a: e8 7a 61 d7 ff callq 0xffd761b9
3f: 48 rex.W