------------[ cut here ]------------
WARNING: CPU: 1 PID: 9845 at kernel/events/core.c:2045 perf_group_attach+0x396/0x450 kernel/events/core.c:2045
Modules linked in:
CPU: 1 PID: 9845 Comm: syz-executor.0 Not tainted 5.10.105 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:2045
Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 8f e5 f2 ff e8 8a e5 f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 fc 4d 47 85 e8 77 3e 1e 00 e9 b9 fc
RSP: 0018:ffff88806cf09ef0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff8880495f7000 RCX: ffffffff814cc17f
RDX: ffff888057c14bc0 RSI: ffffffff814cc446 RDI: ffff8880495f7218
RBP: ffff888045cd2000 R08: 0000000000000001 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888047700800
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806cf3f748
FS:  0000555555bcb400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc721c34d58 CR3: 00000000570cc000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 add_event_to_ctx kernel/events/core.c:2688 [inline]
 __perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2839
 remote_function kernel/events/core.c:88 [inline]
 remote_function+0x11d/0x1a0 kernel/events/core.c:68
 flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395
 __sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248
 asm_call_irq_on_stack+0x12/0x20
 </IRQ>
 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline]
 run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline]
 sysvec_call_function_single+0x7f/0xa0 arch/x86/kernel/smp.c:243
 asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643
RIP: 0010:call_rcu+0x266/0xa00 kernel/rcu/tree.c:3038
Code: 85 33 06 00 00 8b 85 28 01 00 00 65 ff 0d 52 8c d4 7e a8 02 0f 84 77 01 00 00 48 83 7c 24 08 00 0f 85 d0 00 00 00 ff 34 24 9d <48> 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 4c 89 c7 4c 89 44 24
RSP: 0018:ffff888057737cb8 EFLAGS: 00000246
RAX: 0000000000001d95 RBX: ffff88800d39b670 RCX: 1ffffffff0a8e141
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff812de45e
RBP: ffff88806cf3c030 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000020
R13: ffff88806cf3bf40 R14: ffff88806cf3c020 R15: ffff88806cf3bfd8
 kmemleak_free_recursive include/linux/kmemleak.h:49 [inline]
 slab_free_hook mm/slub.c:1517 [inline]
 slab_free_freelist_hook+0x13a/0x180 mm/slub.c:1576
 slab_free mm/slub.c:3149 [inline]
 kmem_cache_free+0xa7/0x310 mm/slub.c:3165
 __d_free fs/dcache.c:271 [inline]
 dentry_free+0xde/0x160 fs/dcache.c:348
 __dentry_kill+0x47d/0x5c0 fs/dcache.c:593
 dentry_kill fs/dcache.c:705 [inline]
 dput+0x76a/0xc40 fs/dcache.c:878
 __fput+0x3aa/0x980 fs/file_table.c:294
 task_work_run+0xe2/0x1a0 kernel/task_work.c:151
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:164 [inline]
 exit_to_user_mode_prepare+0x155/0x160 kernel/entry/common.c:191
 syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:266
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f4795f4372b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffff1164eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f4795f4372b
RDX: 00007f47960ab7e0 RSI: 0000000000000081 RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f47960ab7e0
R13: 00007ffff1164fd0 R14: 00007f47960a3f60 R15: 000000000017f115
irq event stamp: 7574
hardirqs last  enabled at (7573): [<ffffffff812de45e>] __call_rcu kernel/rcu/tree.c:2996 [inline]
hardirqs last  enabled at (7573): [<ffffffff812de45e>] call_rcu+0x3be/0xa00 kernel/rcu/tree.c:3037
hardirqs last disabled at (7574): [<ffffffff83dd124b>] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243
softirqs last  enabled at (7544): [<ffffffff83e00f92>] asm_call_irq_on_stack+0x12/0x20
softirqs last disabled at (7533): [<ffffffff83e00f92>] asm_call_irq_on_stack+0x12/0x20
---[ end trace 5f88758fe95b9373 ]---

======================================================
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	33 06                	xor    (%rsi),%eax
   2:	00 00                	add    %al,(%rax)
   4:	8b 85 28 01 00 00    	mov    0x128(%rbp),%eax
   a:	65 ff 0d 52 8c d4 7e 	decl   %gs:0x7ed48c52(%rip)        # 0x7ed48c63
  11:	a8 02                	test   $0x2,%al
  13:	0f 84 77 01 00 00    	je     0x190
  19:	48 83 7c 24 08 00    	cmpq   $0x0,0x8(%rsp)
  1f:	0f 85 d0 00 00 00    	jne    0xf5
  25:	ff 34 24             	pushq  (%rsp)
  28:	9d                   	popfq
* 29:	48 83 c4 28          	add    $0x28,%rsp <-- trapping instruction
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	41 5d                	pop    %r13
  33:	41 5e                	pop    %r14
  35:	41 5f                	pop    %r15
  37:	c3                   	retq
  38:	4c 89 c7             	mov    %r8,%rdi
  3b:	4c                   	rex.WR
  3c:	89                   	.byte 0x89
  3d:	44                   	rex.R
  3e:	24                   	.byte 0x24