------------[ cut here ]------------ WARNING: CPU: 1 PID: 10964 at kernel/events/core.c:2045 perf_group_attach+0x396/0x450 kernel/events/core.c:2045 Modules linked in: CPU: 1 PID: 10964 Comm: syz-executor.3 Not tainted 5.10.96 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:2045 Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 5f eb f2 ff e8 5a eb f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 bc 42 47 85 e8 47 36 1e 00 e9 b9 fc RSP: 0018:ffff88806cf09ef0 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff8880474dc000 RCX: ffffffff814cb3bf RDX: ffff8880467d1940 RSI: ffffffff814cb686 RDI: ffff8880474dc218 RBP: ffff88804385d000 R08: 0000000000000001 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888047570800 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806cf3f748 FS: 0000555556475400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f34c26a2718 CR3: 0000000048536000 CR4: 0000000000350ee0 Call Trace: add_event_to_ctx kernel/events/core.c:2688 [inline] __perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2839 remote_function kernel/events/core.c:88 [inline] remote_function+0x11d/0x1a0 kernel/events/core.c:68 flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395 __sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248 asm_call_irq_on_stack+0x12/0x20 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline] run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline] sysvec_call_function_single+0x7f/0xa0 arch/x86/kernel/smp.c:243 asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643 RIP: 0010:_raw_spin_unlock_irq+0x27/0x30 kernel/locking/spinlock.c:200 Code: 44 00 00 55 48 8b 74 24 08 48 89 fd 48 8d 7f 18 e8 3e fd 47 fd 48 89 ef e8 26 b4 48 fd e8 61 37 67 fd fb 65 ff 0d a9 c4 23 7c <5d> c3 0f 1f 80 00 00 00 00 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 RSP: 0018:ffff888044b8fdc8 EFLAGS: 00000286 RAX: 0000000000000a7d RBX: ffff8880467d1940 RCX: 1ffffffff0a8dfd9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff83deaa8f RBP: ffff888052aae5c0 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888042f39a04 R13: 0000000000000000 R14: ffff8880467d1d28 R15: 0000000000000000 do_exit+0x18b8/0x2770 kernel/exit.c:790 do_group_exit+0x125/0x310 kernel/exit.c:908 __do_sys_exit_group kernel/exit.c:919 [inline] __se_sys_exit_group kernel/exit.c:917 [inline] __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:917 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f8724ad0b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffe4a00fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8724ad0b19 RDX: 00007f8724a8372b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffe4a010b0 irq event stamp: 2686 hardirqs last enabled at (2685): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (2685): [] _raw_spin_unlock_irq+0x1f/0x30 kernel/locking/spinlock.c:199 hardirqs last disabled at (2686): [] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243 softirqs last enabled at (2332): [] hci_sock_release+0x21a/0x410 net/bluetooth/hci_sock.c:895 softirqs last disabled at (2330): [] spin_lock_bh include/linux/spinlock.h:359 [inline] softirqs last disabled at (2330): [] release_sock+0x1b/0x1b0 net/core/sock.c:3070 ---[ end trace 761b424d0b4e8df7 ]--- ====================================================== ---------------- Code disassembly (best guess): 0: 44 00 00 add %r8b,(%rax) 3: 55 push %rbp 4: 48 8b 74 24 08 mov 0x8(%rsp),%rsi 9: 48 89 fd mov %rdi,%rbp c: 48 8d 7f 18 lea 0x18(%rdi),%rdi 10: e8 3e fd 47 fd callq 0xfd47fd53 15: 48 89 ef mov %rbp,%rdi 18: e8 26 b4 48 fd callq 0xfd48b443 1d: e8 61 37 67 fd callq 0xfd673783 22: fb sti 23: 65 ff 0d a9 c4 23 7c decl %gs:0x7c23c4a9(%rip) # 0x7c23c4d3 * 2a: 5d pop %rbp <-- trapping instruction 2b: c3 retq 2c: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 33: 55 push %rbp 34: 48 89 fd mov %rdi,%rbp 37: 48 83 c7 18 add $0x18,%rdi 3b: 53 push %rbx 3c: 48 89 f3 mov %rsi,%rbx 3f: 48 rex.W