------------[ cut here ]------------
WARNING: CPU: 1 PID: 9148 at kernel/events/core.c:2045 perf_group_attach+0x396/0x450 kernel/events/core.c:2045
Modules linked in:
CPU: 1 PID: 9148 Comm: syz-executor.0 Not tainted 5.10.96 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:2045
Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 5f eb f2 ff e8 5a eb f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 bc 42 47 85 e8 47 36 1e 00 e9 b9 fc
RSP: 0018:ffff88806cf09ef0 EFLAGS: 00010046
RAX: 0000000080010003 RBX: ffff88800f86b000 RCX: ffffffff814cb3bf
RDX: ffff888017dc8000 RSI: ffffffff814cb686 RDI: ffff88800f86b218
RBP: ffff88804e205000 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016f5e400
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806cf3f748
FS: 0000555556afc400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f15ded86000 CR3: 0000000048e62000 CR4: 0000000000350ee0
Call Trace:
add_event_to_ctx kernel/events/core.c:2688 [inline]
__perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2839
remote_function kernel/events/core.c:88 [inline]
remote_function+0x11d/0x1a0 kernel/events/core.c:68
flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395
__sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248
asm_call_irq_on_stack+0x12/0x20
__run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline]
run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline]
sysvec_call_function_single+0x7f/0xa0 arch/x86/kernel/smp.c:243
asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643
RIP: 0010:__preempt_count_sub arch/x86/include/asm/preempt.h:84 [inline]
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x40 kernel/locking/spinlock.c:191
Code: 80 00 00 00 00 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 0a fd 47 fd 48 89 ef e8 f2 b3 48 fd f6 c7 02 75 0c 53 9d <65> ff 0d 74 c4 23 7c 5b 5d c3 e8 1c 37 67 fd eb ed 66 2e 0f 1f 84
RSP: 0018:ffff8880499dfd68 EFLAGS: 00000246
RAX: 0000000000000a37 RBX: 0000000000000246 RCX: 1ffffffff0a8dfd9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff83deaad4
RBP: ffffffff84ea3cc0 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804a84b7a0
R13: ffff88804a84b638 R14: ffff888007fec000 R15: ffff88800fb2fb60
find_and_remove_object+0xe4/0x120 mm/kmemleak.c:553
delete_object_full mm/kmemleak.c:684 [inline]
kmemleak_free+0x1f/0x30 mm/kmemleak.c:961
kmemleak_free_recursive include/linux/kmemleak.h:49 [inline]
slab_free_hook mm/slub.c:1517 [inline]
slab_free_freelist_hook+0x13a/0x180 mm/slub.c:1576
slab_free mm/slub.c:3149 [inline]
kmem_cache_free+0xa7/0x310 mm/slub.c:3165
security_file_free+0xaa/0xd0 security/security.c:1476
file_free fs/file_table.c:55 [inline]
__fput+0x3d5/0x980 fs/file_table.c:299
task_work_run+0xe2/0x1a0 kernel/task_work.c:151
tracehook_notify_resume include/linux/tracehook.h:188 [inline]
exit_to_user_mode_loop kernel/entry/common.c:164 [inline]
exit_to_user_mode_prepare+0x155/0x160 kernel/entry/common.c:191
syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:266
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f190cd4372b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffccd7a3750 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f190cd4372b
RDX: 00007f190ceab8c8 RSI: 0000000000000081 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f190ceab8c8
R13: 00007ffccd7a3870 R14: 00007f190cea3f60 R15: 000000000017bc00
irq event stamp: 2616
hardirqs last enabled at (2615): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last enabled at (2615): [] _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:191
hardirqs last disabled at (2616): [] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243
softirqs last enabled at (2444): [] memcpy include/linux/string.h:399 [inline]
softirqs last enabled at (2444): [] fpu__copy+0x173/0x550 arch/x86/kernel/fpu/core.c:241
softirqs last disabled at (2442): [] fpu__copy+0xa1/0x550 arch/x86/kernel/fpu/core.c:229
---[ end trace fcc1abf0f3af6f67 ]---
======================================================
----------------
Code disassembly (best guess):
0: 80 00 00 addb $0x0,(%rax)
3: 00 00 add %al,(%rax)
5: 55 push %rbp
6: 48 89 fd mov %rdi,%rbp
9: 48 83 c7 18 add $0x18,%rdi
d: 53 push %rbx
e: 48 89 f3 mov %rsi,%rbx
11: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
16: e8 0a fd 47 fd callq 0xfd47fd25
1b: 48 89 ef mov %rbp,%rdi
1e: e8 f2 b3 48 fd callq 0xfd48b415
23: f6 c7 02 test $0x2,%bh
26: 75 0c jne 0x34
28: 53 push %rbx
29: 9d popfq
* 2a: 65 ff 0d 74 c4 23 7c decl %gs:0x7c23c474(%rip) # 0x7c23c4a5 <-- trapping instruction
31: 5b pop %rbx
32: 5d pop %rbp
33: c3 retq
34: e8 1c 37 67 fd callq 0xfd673755
39: eb ed jmp 0x28
3b: 66 data16
3c: 2e cs
3d: 0f .byte 0xf
3e: 1f (bad)
3f: 84 .byte 0x84