hrtimer: interrupt took 34991 ns
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 6676 Comm: syz-executor4 Not tainted 4.9.141+ #71
task: ffff8801c8b8df00 task.stack: ffff8801c4668000
RIP: 0010:[<ffffffff813be36d>]  [<ffffffff813be36d>] perf_event_count kernel/events/core.c:3583 [inline]
RIP: 0010:[<ffffffff813be36d>]  [<ffffffff813be36d>] perf_output_read_group kernel/events/core.c:5734 [inline]
RIP: 0010:[<ffffffff813be36d>]  [<ffffffff813be36d>] perf_output_read+0x62d/0x12e0 kernel/events/core.c:5771
RSP: 0018:ffff8801c466f270  EFLAGS: 00010206
RAX: 000000000000001b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff813be35f RDI: 00000000000000d8
RBP: ffff8801c466f3d0 R08: ffffed00395139a6 R09: ffffed00395139a4
R10: ffffed00395139a5 R11: ffff8801ca89cd2f R12: ffff8801c7e8cdb8
R13: ffff8801c466f598 R14: dffffc0000000000 R15: ffff8801c7e8cd40
FS:  00007fc7b4d88700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000204f4000 CR3: 00000001ca3f4000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 000000000002dd38 000000000002dce8 ffff8801c466f5a0 ffffed00388cdeb4
 0000000000000010 0000000000000004 ffff8801c8658880 ffffed00388cdeb7
 1ffff100388cde5d ffff8801c865aaa0 ffff8801c466f5b8 ffff8801c466f5b0
Call Trace:
 [<ffffffff813deb06>] perf_output_sample+0xc96/0x1850 kernel/events/core.c:5813
 [<ffffffff813e0726>] __perf_event_output kernel/events/core.c:6085 [inline]
 [<ffffffff813e0726>] perf_event_output_forward+0x126/0x230 kernel/events/core.c:6098
 [<ffffffff813cb63f>] __perf_event_overflow+0x11f/0x320 kernel/events/core.c:7198
 [<ffffffff813cbd01>] perf_swevent_overflow+0x161/0x1f0 kernel/events/core.c:7274
 [<ffffffff813cbf30>] perf_swevent_event+0x1a0/0x270 kernel/events/core.c:7307
 [<ffffffff813e30a5>] do_perf_sw_event kernel/events/core.c:7415 [inline]
 [<ffffffff813e30a5>] ___perf_sw_event+0x285/0x490 kernel/events/core.c:7446
 [<ffffffff813e32f6>] __perf_sw_event+0x46/0x80 kernel/events/core.c:7458
 [<ffffffff810b2e06>] perf_sw_event include/linux/perf_event.h:1040 [inline]
 [<ffffffff810b2e06>] __do_page_fault+0x6d6/0xa60 arch/x86/mm/fault.c:1447
 [<ffffffff810b31e7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469
 [<ffffffff82818c35>] page_fault+0x25/0x30 arch/x86/entry/entry_64.S:951
 [<ffffffff815acd6e>] pipe_to_user+0xae/0x160 fs/splice.c:1256
 [<ffffffff815ad926>] splice_from_pipe_feed fs/splice.c:521 [inline]
 [<ffffffff815ad926>] __splice_from_pipe+0x316/0x710 fs/splice.c:645
 [<ffffffff815adedd>] vmsplice_to_user+0x1bd/0x1e0 fs/splice.c:1291
 [<ffffffff815af6a0>] SYSC_vmsplice fs/splice.c:1370 [inline]
 [<ffffffff815af6a0>] SyS_vmsplice+0x120/0x140 fs/splice.c:1353
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817c13>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 74 08 3c 03 0f 8e 52 0a 00 00 41 83 bf 88 00 00 00 01 0f 84 14 07 00 00 e8 01 d7 f5 ff 48 8d bb d8 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 12 0a 00 00 48 8b 9b d8 00 00 00 48 85 db 
RIP  [<ffffffff813be36d>] perf_event_count kernel/events/core.c:3583 [inline]
RIP  [<ffffffff813be36d>] perf_output_read_group kernel/events/core.c:5734 [inline]
RIP  [<ffffffff813be36d>] perf_output_read+0x62d/0x12e0 kernel/events/core.c:5771
 RSP <ffff8801c466f270>
---[ end trace 5d40cff820f2f1fb ]---