------------[ cut here ]------------
WARNING: CPU: 1 PID: 6327 at kernel/events/core.c:3752 ctx_sched_in+0x12e/0x3ee kernel/events/core.c:3752
Modules linked in:
CPU: 1 PID: 6327 Comm: syz-executor.0 Not tainted 5.12.0-rc8-syzkaller-00011-g18a3c5f7abfd #0
Hardware name: riscv-virtio,qemu (DT)
epc : ctx_sched_in+0x12e/0x3ee kernel/events/core.c:3752
 ra : ctx_sched_in+0x12e/0x3ee kernel/events/core.c:3752
epc : ffffffe00027a674 ra : ffffffe00027a674 sp : ffffffe028d8f340
 gp : ffffffe0045883c0 tp : ffffffe008b217c0 t0 : 0000000000000000
 t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe028d8f3b0
 s1 : ffffffe00f527400 a0 : ffffffe066d76fa8 a1 : 00000000000f0000
 a2 : 0000000000000002 a3 : ffffffe00027a674 a4 : ffffffe008b227c0
 a5 : 0000000040000002 a6 : 0000000000f00000 a7 : ffffffe000281354
 s2 : 0000000000000007 s3 : ffffffe00f527540 s4 : ffffffe008b217c0
 s5 : 0000000000000002 s6 : ffffffe00458c0d0 s7 : ffffffe066d76e00
 s8 : 0000000000000007 s9 : ffffffe066d76fa8 s10: ffffffe00f527400
 s11: ffffffe00f527408 t3 : ccef2e0cec428000 t4 : ffffffc404ae27b2
 t5 : ffffffc404ae27ba t6 : 0000000000040000
status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003
Call Trace:
[<ffffffe00027a674>] ctx_sched_in+0x12e/0x3ee kernel/events/core.c:3752
[<ffffffe00027a96c>] perf_event_sched_in+0x38/0x74 kernel/events/core.c:2680
[<ffffffe00028142e>] perf_event_context_sched_in kernel/events/core.c:3817 [inline]
[<ffffffe00028142e>] __perf_event_task_sched_in+0x4ea/0x680 kernel/events/core.c:3860
[<ffffffe0000850ce>] perf_event_task_sched_in include/linux/perf_event.h:1210 [inline]
[<ffffffe0000850ce>] finish_task_switch.isra.0+0x284/0x318 kernel/sched/core.c:4189
[<ffffffe002a932b0>] context_switch kernel/sched/core.c:4325 [inline]
[<ffffffe002a932b0>] __schedule+0x484/0xe8c kernel/sched/core.c:5073
[<ffffffe002a93f48>] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:5233
[<ffffffe002a9400c>] preempt_schedule+0x34/0x36 kernel/sched/core.c:5258
[<ffffffe002a9a7a8>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
[<ffffffe002a9a7a8>] _raw_spin_unlock_irqrestore+0x8c/0x98 kernel/locking/spinlock.c:191
[<ffffffe00099e0b4>] __debug_check_no_obj_freed lib/debugobjects.c:997 [inline]
[<ffffffe00099e0b4>] debug_check_no_obj_freed+0x14c/0x23a lib/debugobjects.c:1018
[<ffffffe0003b2d3e>] slab_free_hook mm/slub.c:1554 [inline]
[<ffffffe0003b2d3e>] slab_free_freelist_hook+0x17a/0x18a mm/slub.c:1600
[<ffffffe0003b6702>] slab_free mm/slub.c:3161 [inline]
[<ffffffe0003b6702>] kfree+0xd2/0x3d0 mm/slub.c:4213
[<ffffffe0007bb09e>] tomoyo_realpath_from_path+0x158/0x3f4 security/tomoyo/realpath.c:291
[<ffffffe0007b42e8>] tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
[<ffffffe0007b42e8>] tomoyo_path_number_perm+0x10a/0x33c security/tomoyo/file.c:723
[<ffffffe0007bc396>] tomoyo_path_mknod+0xb6/0x124 security/tomoyo/tomoyo.c:240
[<ffffffe000797de4>] security_path_mknod+0x94/0xde security/security.c:1087
[<ffffffe000415060>] may_o_create fs/namei.c:3040 [inline]
[<ffffffe000415060>] lookup_open.isra.0+0x29e/0xad0 fs/namei.c:3184
[<ffffffe00041aec4>] open_last_lookups fs/namei.c:3291 [inline]
[<ffffffe00041aec4>] path_openat+0x7b2/0x1690 fs/namei.c:3497
[<ffffffe00041efe2>] do_filp_open+0xa4/0x1a0 fs/namei.c:3527
[<ffffffe0003f6dbc>] do_sys_openat2+0x102/0x26a fs/open.c:1187
[<ffffffe0003f75be>] do_sys_open fs/open.c:1203 [inline]
[<ffffffe0003f75be>] __do_sys_openat fs/open.c:1219 [inline]
[<ffffffe0003f75be>] sys_openat+0x80/0xee fs/open.c:1214
[<ffffffe000005578>] ret_from_syscall+0x0/0x2
irq event stamp: 156
hardirqs last  enabled at (155): [<ffffffe0000055c8>] restore_all+0x12/0x6e
hardirqs last disabled at (156): [<ffffffe002a93338>] __schedule+0x50c/0xe8c kernel/sched/core.c:4972
softirqs last  enabled at (154): [<ffffffe002a9b578>] __do_softirq+0x5e0/0x8c4 kernel/softirq.c:372
softirqs last disabled at (137): [<ffffffe00003507e>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (137): [<ffffffe00003507e>] invoke_softirq kernel/softirq.c:228 [inline]
softirqs last disabled at (137): [<ffffffe00003507e>] __irq_exit_rcu kernel/softirq.c:422 [inline]
softirqs last disabled at (137): [<ffffffe00003507e>] irq_exit+0x1a0/0x1b6 kernel/softirq.c:446
---[ end trace 3023e5e9d739abd2 ]---