general protection fault in perf_output

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
android-49	general protection fault in perf_output_read	2	C			162	2054d	2285d	0/3	public: reported C repro on 2019/04/11 08:44
linux-4.14	general protection fault in perf_output_read	2	C			1	876d	1733d	0/1	upstream: reported C repro on 2020/10/14 09:13

kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI Modules linked in: CPU: 0 PID: 20343 Comm: syz-executor.2 Not tainted 4.14.123+ #5 task: 000000008717b6c9 task.stack: 000000003f002f04 RIP: 0010:primary_event_id kernel/events/core.c:1318 [inline] RIP: 0010:perf_output_read_group kernel/events/core.c:5882 [inline] RIP: 0010:perf_output_read+0x603/0xfc0 kernel/events/core.c:5917 RSP: 0018:ffff888188b7f0f8 EFLAGS: 00010202 RAX: 00000000000000d0 RBX: ffff888188b7f3d8 RCX: 0000000000040000 RDX: ffffffff813eb0e4 RSI: ffffc90006579000 RDI: 0000000000000680 RBP: ffff88818a30a0d0 R08: ffff88821fffd01c R09: ffffed10358d8943 R10: ffffed10358d8942 R11: ffff8881ac6c4a17 R12: 00000000000001f0 R13: dead4ead00000000 R14: dffffc0000000000 R15: ffff888188b7f1e0 FS: 00007f9e8be8f700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002029e13f CR3: 000000018881c004 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: perf_output_sample+0xcea/0x1700 kernel/events/core.c:5959 __perf_event_output kernel/events/core.c:6269 [inline] perf_event_output_forward+0x10b/0x220 kernel/events/core.c:6282 __perf_event_overflow+0x116/0x320 kernel/events/core.c:7520 perf_swevent_overflow+0x17b/0x210 kernel/events/core.c:7596 perf_swevent_event+0x19c/0x270 kernel/events/core.c:7629 do_perf_sw_event kernel/events/core.c:7737 [inline] ___perf_sw_event+0x2a4/0x4a0 kernel/events/core.c:7768 __perf_sw_event+0x42/0x80 kernel/events/core.c:7780 perf_sw_event include/linux/perf_event.h:1046 [inline] __do_page_fault+0x785/0xb80 arch/x86/mm/fault.c:1464 page_fault+0x22/0x50 arch/x86/entry/entry_64.S:1120 RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:614 [inline] RIP: 0010:iov_iter_fault_in_readable+0x29c/0x350 lib/iov_iter.c:421 RSP: 0018:ffff888188b7f9d0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 000000000000007f RCX: 0000000000040000 RDX: ffffffff81b740b6 RSI: ffffc90006579000 RDI: ffff888188b7fd18 RBP: 1ffff1103116ff3b R08: ffff8881c3230f18 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000 R13: 0000000000000000 R14: 000000002029e13f R15: ffff888188b7fd10 generic_perform_write+0x158/0x450 mm/filemap.c:3100 __generic_file_write_iter+0x32e/0x550 mm/filemap.c:3235 ext4_file_write_iter+0x551/0xd60 fs/ext4/file.c:264 call_write_iter include/linux/fs.h:1785 [inline] new_sync_write fs/read_write.c:471 [inline] __vfs_write+0x401/0x5a0 fs/read_write.c:484 vfs_write+0x17f/0x4d0 fs/read_write.c:546 SYSC_write fs/read_write.c:593 [inline] SyS_write+0xc0/0x1a0 fs/read_write.c:585 do_syscall_64+0x19b/0x510 arch/x86/entry/common.c:292 Code: 42 80 3c 30 00 0f 85 66 08 00 00 4d 85 e4 4c 8b ad 90 04 00 00 74 27 e8 bc 1f f2 ff 49 8d bc 24 90 04 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 4f 08 00 00 4d 8b ac 24 90 04 00 00 e8 95 RIP: primary_event_id kernel/events/core.c:1318 [inline] RSP: ffff888188b7f0f8 RIP: perf_output_read_group kernel/events/core.c:5882 [inline] RSP: ffff888188b7f0f8 RIP: perf_output_read+0x603/0xfc0 kernel/events/core.c:5917 RSP: ffff888188b7f0f8 ---[ end trace 577c862526445730 ]---