------------[ cut here ]------------
WARNING: CPU: 1 PID: 12150 at kernel/events/core.c:1978 perf_group_attach+0x396/0x450 kernel/events/core.c:1978
Modules linked in:
CPU: 1 PID: 12150 Comm: syz-executor.0 Not tainted 5.10.79 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:1978
Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 9f ef f2 ff e8 9a ef f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 3c 2d 47 85 e8 17 33 1e 00 e9 b9 fc
RSP: 0018:ffff88806cf09ef0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff888043dfc000 RCX: ffffffff814ca29f
RDX: ffff8880182a3280 RSI: ffffffff814ca566 RDI: ffff888043dfc220
RBP: ffff888042d03000 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044517000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806cf37748
FS: 000055555702e400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd556cf4d80 CR3: 0000000046e1c000 CR4: 0000000000350ee0
Call Trace:
add_event_to_ctx kernel/events/core.c:2673 [inline]
__perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2824
remote_function kernel/events/core.c:88 [inline]
remote_function+0x11d/0x1a0 kernel/events/core.c:68
flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395
__sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248
asm_call_irq_on_stack+0x12/0x20
__run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline]
run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline]
sysvec_call_function_single+0x7f/0xa0 arch/x86/kernel/smp.c:243
asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643
RIP: 0010:unwind_next_frame+0x61/0x1a90 arch/x86/kernel/unwind_orc.c:418
Code: eb 03 48 c7 44 24 50 50 5c 10 81 49 8d 14 03 4d 89 de c7 02 f1 f1 f1 f1 c7 42 04 00 f3 f3 f3 48 89 fa 48 c1 ea 03 0f b6 04 02 <65> 48 8b 1c 25 28 00 00 00 48 89 9c 24 98 00 00 00 31 db 84 c0 74
RSP: 0018:ffff88804b287820 EFLAGS: 00000212
RAX: 0000000000000000 RBX: ffffffff812f5dd0 RCX: ffffffff857dea01
RDX: 1ffff11009650f1f RSI: ffffffff816f5c75 RDI: ffff88804b2878f8
RBP: ffff88804b287980 R08: 0000000000000007 R09: ffff88804b287e78
R10: 0000000000030041 R11: 1ffff11009650f0c R12: ffff88804b2879b0
R13: ffff88804b2878f8 R14: 1ffff11009650f0c R15: ffff8880092e9bb8
arch_stack_walk+0x83/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:48
kasan_set_track+0x1c/0x30 mm/kasan/common.c:56
kasan_set_free_info+0x1b/0x30 mm/kasan/generic.c:355
__kasan_slab_free+0x110/0x150 mm/kasan/common.c:422
slab_free_hook mm/slub.c:1542 [inline]
slab_free_freelist_hook+0xa9/0x180 mm/slub.c:1576
slab_free mm/slub.c:3149 [inline]
kfree+0xd7/0x380 mm/slub.c:4125
security_perf_event_free+0x44/0x80 security/security.c:2549
_free_event+0x5f/0xc70 kernel/events/core.c:4884
put_event kernel/events/core.c:5005 [inline]
perf_event_release_kernel+0x899/0xc20 kernel/events/core.c:5120
perf_release+0x33/0x40 kernel/events/core.c:5130
__fput+0x285/0x980 fs/file_table.c:281
task_work_run+0xe2/0x1a0 kernel/task_work.c:151
tracehook_notify_resume include/linux/tracehook.h:188 [inline]
exit_to_user_mode_loop kernel/entry/common.c:164 [inline]
exit_to_user_mode_prepare+0x155/0x160 kernel/entry/common.c:191
syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:266
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7fd55977472b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffd7373cbd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fd55977472b
RDX: 00007fd5598dd5b0 RSI: 0000000000000080 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fd5598dbb10
R10: 00007ffd7373ccc0 R11: 0000000000000293 R12: 0000000000235b8a
R13: 00000000000003e8 R14: 00007fd5598d4f60 R15: 0000000000235b0c
irq event stamp: 3230
hardirqs last enabled at (3229): [] slab_free_hook mm/slub.c:1530 [inline]
hardirqs last enabled at (3229): [] slab_free_freelist_hook+0x154/0x180 mm/slub.c:1576
hardirqs last disabled at (3230): [] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243
softirqs last enabled at (3100): [] memcpy include/linux/string.h:399 [inline]
softirqs last enabled at (3100): [] fpu__copy+0x173/0x550 arch/x86/kernel/fpu/core.c:241
softirqs last disabled at (3098): [] fpu__copy+0xa1/0x550 arch/x86/kernel/fpu/core.c:229
---[ end trace 910075f80cd49f27 ]---
======================================================
----------------
Code disassembly (best guess):
0: eb 03 jmp 0x5
2: 48 c7 44 24 50 50 5c movq $0xffffffff81105c50,0x50(%rsp)
9: 10 81
b: 49 8d 14 03 lea (%r11,%rax,1),%rdx
f: 4d 89 de mov %r11,%r14
12: c7 02 f1 f1 f1 f1 movl $0xf1f1f1f1,(%rdx)
18: c7 42 04 00 f3 f3 f3 movl $0xf3f3f300,0x4(%rdx)
1f: 48 89 fa mov %rdi,%rdx
22: 48 c1 ea 03 shr $0x3,%rdx
26: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax
* 2a: 65 48 8b 1c 25 28 00 mov %gs:0x28,%rbx <-- trapping instruction
31: 00 00
33: 48 89 9c 24 98 00 00 mov %rbx,0x98(%rsp)
3a: 00
3b: 31 db xor %ebx,%ebx
3d: 84 c0 test %al,%al
3f: 74 .byte 0x74