------------[ cut here ]------------ WARNING: CPU: 1 PID: 20136 at kernel/events/core.c:2045 perf_group_attach+0x396/0x450 kernel/events/core.c:2045 Modules linked in: CPU: 1 PID: 20136 Comm: syz-executor.4 Not tainted 5.10.109 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:perf_group_attach+0x396/0x450 kernel/events/core.c:2045 Code: 48 c1 e8 03 42 80 3c 20 00 75 5f 48 8b 5b 10 48 83 eb 10 48 39 dd 75 d4 5b 5d 41 5c 41 5d 41 5e e9 8f e5 f2 ff e8 8a e5 f2 ff <0f> 0b e9 b1 fd ff ff 48 c7 c7 bc 50 47 85 e8 67 3e 1e 00 e9 b9 fc RSP: 0018:ffff88806cf09ef0 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff88800fe33000 RCX: ffffffff814cc6bf RDX: ffff88804fe4b280 RSI: ffffffff814cc986 RDI: ffff88800fe33218 RBP: ffff88800fe31000 R08: 0000000000000001 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804c6cd000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806cf3f748 FS: 000055555638d400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa61d11b718 CR3: 0000000041bc8000 CR4: 0000000000350ee0 Call Trace: add_event_to_ctx kernel/events/core.c:2688 [inline] __perf_install_in_context+0x246/0x2d0 kernel/events/core.c:2839 remote_function kernel/events/core.c:88 [inline] remote_function+0x11d/0x1a0 kernel/events/core.c:68 flush_smp_call_function_queue+0x1b4/0x5d0 kernel/smp.c:395 __sysvec_call_function_single+0x92/0x370 arch/x86/kernel/smp.c:248 asm_call_irq_on_stack+0x12/0x20 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline] run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline] sysvec_call_function_single+0x7f/0xa0 arch/x86/kernel/smp.c:243 asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:write_comp_data+0xa/0x80 kernel/kcov.c:217 Code: 65 48 8b 04 25 80 6f 02 00 48 8b 80 58 13 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 f2 65 8b 05 f6 c7 c2 7e <65> 48 8b 34 25 80 6f 02 00 a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b RSP: 0018:ffff8880556a7c30 EFLAGS: 00000206 RAX: 0000000080000000 RBX: 0000000000000006 RCX: ffffffff8134dacb RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000005 RBP: ffffffff84289b00 R08: 00007fa61fd03088 R09: 0000000000000000 R10: 0000000000000006 R11: 0000000000000001 R12: 000000000000000c R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000080 __sanitizer_cov_trace_switch+0x45/0x70 kernel/kcov.c:320 do_futex+0x20b/0x1a50 kernel/futex.c:3730 __do_sys_futex+0x2bb/0x480 kernel/futex.c:3798 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7fa61fbe7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff3926ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa61fbe7b19 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa61fcfb028 RBP: 00007fa61fcfb020 R08: 00007fa61fd03088 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa61fd03b00 R13: 00007fff3926af70 R14: 00007fa61fcfaf60 R15: 000000000028e7e4 irq event stamp: 5044 hardirqs last enabled at (5043): [] syscall_enter_from_user_mode+0x1d/0x50 kernel/entry/common.c:98 hardirqs last disabled at (5044): [] sysvec_call_function_single+0xb/0xa0 arch/x86/kernel/smp.c:243 softirqs last enabled at (4704): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (4521): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace e118eebbcba5c343 ]--- ====================================================== ---------------- Code disassembly (best guess): 0: 65 48 8b 04 25 80 6f mov %gs:0x26f80,%rax 7: 02 00 9: 48 8b 80 58 13 00 00 mov 0x1358(%rax),%rax 10: c3 retq 11: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 18: 00 00 00 00 1c: 0f 1f 40 00 nopl 0x0(%rax) 20: 49 89 f2 mov %rsi,%r10 23: 65 8b 05 f6 c7 c2 7e mov %gs:0x7ec2c7f6(%rip),%eax # 0x7ec2c820 * 2a: 65 48 8b 34 25 80 6f mov %gs:0x26f80,%rsi <-- trapping instruction 31: 02 00 33: a9 00 01 ff 00 test $0xff0100,%eax 38: 74 0f je 0x49 3a: f6 c4 01 test $0x1,%ah 3d: 74 59 je 0x98 3f: 8b .byte 0x8b