netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6898 at kernel/events/core.c:1978 perf_group_attach+0x396/0x450 kernel/events/core.c:1978
Modules linked in:
CPU: 0 PID: 6898 Comm: syz-executor.5 Not tainted 5.10.79 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:1978
Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 9f ef f2 ff e8 9a ef f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 3c 2d 47 85 e8 17 33 1e 00 e9 b9 fc
RSP: 0018:ffff88806ce09c98 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff888044b32000 RCX: ffffffff814ca29f
RDX: ffff88804b78e500 RSI: ffffffff814ca566 RDI: ffff888044b32220
RBP: ffff88804b7cf000 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e6cf000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806ce37748
FS: 000055555650c400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555650e098 CR3: 0000000043be2000 CR4: 0000000000350ef0
Call Trace:
add_event_to_ctx kernel/events/core.c:2673 [inline]
__perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2824
remote_function kernel/events/core.c:88 [inline]
remote_function+0x11d/0x1a0 kernel/events/core.c:68
flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395
__sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248
run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:91 [inline]
sysvec_call_function_single+0x3e/0xa0 arch/x86/kernel/smp.c:243
asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643
RIP: 0010:__preempt_count_sub arch/x86/include/asm/preempt.h:84 [inline]
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x40 kernel/locking/spinlock.c:191
Code: 80 00 00 00 00 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 8a b4 48 fd 48 89 ef e8 72 6b 49 fd f6 c7 02 75 0c 53 9d <65> ff 0d b4 ff 23 7c 5b 5d c3 e8 1c e5 67 fd eb ed 66 2e 0f 1f 84
RSP: 0018:ffff88806ce09e68 EFLAGS: 00000246
RAX: 0000000000001364 RBX: 0000000000000246 RCX: 1ffffffff0a8dd29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff83ddef94
RBP: ffffffff84dffd60 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffffffff84dfe900 R14: ffffffff84dfe940 R15: 0000000000000246
rcu_report_qs_rdp kernel/rcu/tree.c:2292 [inline]
rcu_check_quiescent_state kernel/rcu/tree.c:2329 [inline]
rcu_core+0xa6d/0x1660 kernel/rcu/tree.c:2705
__do_softirq+0x1b8/0x867 kernel/softirq.c:298
asm_call_irq_on_stack+0x12/0x20
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:393 [inline]
__irq_exit_rcu kernel/softirq.c:423 [inline]
irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435
sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1095
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:call_rcu+0x266/0xa20 kernel/rcu/tree.c:3037
Code: 85 4e 06 00 00 8b 85 28 01 00 00 65 ff 0d 62 10 d4 7e a8 02 0f 84 77 01 00 00 48 83 7c 24 08 00 0f 85 d0 00 00 00 ff 34 24 9d <48> 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 4c 89 c7 4c 89 44 24
RSP: 0018:ffff88804522fcc0 EFLAGS: 00000246
RAX: 000000000000135b RBX: ffff88801d796218 RCX: 1ffffffff0a8dd29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff812de04e
RBP: ffff88806ce34030 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000000da
R13: ffff88806ce33f40 R14: ffff88806ce34020 R15: ffff88806ce33fd8
destroy_inode+0x12b/0x1b0 fs/inode.c:289
iput_final fs/inode.c:1656 [inline]
iput.part.0+0x4eb/0x780 fs/inode.c:1682
iput+0x58/0x70 fs/inode.c:1672
dentry_unlink_inode+0x2b4/0x3e0 fs/dcache.c:374
__dentry_kill+0x36f/0x5c0 fs/dcache.c:579
dentry_kill fs/dcache.c:705 [inline]
dput+0x76a/0xc40 fs/dcache.c:878
__fput+0x3aa/0x980 fs/file_table.c:294
task_work_run+0xe2/0x1a0 kernel/task_work.c:151
tracehook_notify_resume include/linux/tracehook.h:188 [inline]
exit_to_user_mode_loop kernel/entry/common.c:164 [inline]
exit_to_user_mode_prepare+0x155/0x160 kernel/entry/common.c:191
syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:266
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f1099a6172b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe7488bdc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f1099a6172b
RDX: 00007f1099bcab58 RSI: 0000000000000081 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1099bcab58
R13: 00007ffe7488bee0 R14: 00007f1099bc1f60 R15: 00000000000ceb23
irq event stamp: 4965
hardirqs last enabled at (4964): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last enabled at (4964): [] _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:191
hardirqs last disabled at (4965): [] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243
softirqs last enabled at (4946): [] read_pnet include/net/net_namespace.h:337 [inline]
softirqs last enabled at (4946): [] sock_net include/net/sock.h:2552 [inline]
softirqs last enabled at (4946): [] netlink_release+0xd78/0x1d30 net/netlink/af_netlink.c:805
softirqs last disabled at (4957): [] asm_call_irq_on_stack+0x12/0x20
---[ end trace 13cdc6c80e65a652 ]---
======================================================
----------------
Code disassembly (best guess):
0: 80 00 00 addb $0x0,(%rax)
3: 00 00 add %al,(%rax)
5: 55 push %rbp
6: 48 89 fd mov %rdi,%rbp
9: 48 83 c7 18 add $0x18,%rdi
d: 53 push %rbx
e: 48 89 f3 mov %rsi,%rbx
11: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
16: e8 8a b4 48 fd callq 0xfd48b4a5
1b: 48 89 ef mov %rbp,%rdi
1e: e8 72 6b 49 fd callq 0xfd496b95
23: f6 c7 02 test $0x2,%bh
26: 75 0c jne 0x34
28: 53 push %rbx
29: 9d popfq
* 2a: 65 ff 0d b4 ff 23 7c decl %gs:0x7c23ffb4(%rip) # 0x7c23ffe5 <-- trapping instruction
31: 5b pop %rbx
32: 5d pop %rbp
33: c3 retq
34: e8 1c e5 67 fd callq 0xfd67e555
39: eb ed jmp 0x28
3b: 66 data16
3c: 2e cs
3d: 0f .byte 0xf
3e: 1f (bad)
3f: 84 .byte 0x84