Greeting, FYI, we noticed the following commit (built with gcc-11): commit: f3c0eba287049237b23d1300376768293eb89e69 ("perf: Add a few assertions") https://git.kernel.org/cgit/linux/kernel/git/tip/tip.git perf/core in testcase: trinity version: trinity-i386-4d2343bd-1_20200320 with following parameters: runtime: 300s group: group-00 test-description: Trinity is a linux system call fuzz tester. test-url: http://codemonkey.org.uk/projects/trinity/ on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace): If you fix the issue, kindly add following tag Reported-by: kernel test robot Link: https://lore.kernel.org/r/202209130723.5b2c641a-oliver.sang@intel.com [ 61.127651][ T3577] ------------[ cut here ]------------ [ 61.134224][ T3577] WARNING: CPU: 1 PID: 3577 at kernel/events/core.c:2233 perf_iterate_ctx (kernel/events/core.c:2233 kernel/events/core.c:2245 kernel/events/core.c:2242 kernel/events/core.c:7594) [ 61.140456][ T3577] Modules linked in: sr_mod cdrom sg bochs drm_vram_helper ata_generic drm_ttm_helper ttm ppdev intel_rapl_msr ata_piix intel_rapl_common crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel drm_kms_helper rapl libata syscopyarea parport_pc sysfillrect joydev parport sysimgblt serio_raw fb_sys_fops i2c_piix4 ip_tables [ 61.152372][ T3577] CPU: 1 PID: 3577 Comm: trinity-main Not tainted 6.0.0-rc2-00043-gf3c0eba28704 #1 [ 61.155234][ T3577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-4 04/01/2014 [ 61.158149][ T3577] RIP: 0010:perf_iterate_ctx (kernel/events/core.c:2233 kernel/events/core.c:2245 kernel/events/core.c:2242 kernel/events/core.c:7594) [ 61.160778][ T3577] Code: 0f 85 f5 02 00 00 8b 05 36 ca 75 04 85 c0 74 1c 65 8b 05 c7 5e 8c 7e 85 c0 75 11 65 8b 05 b0 5c 8c 7e 85 c0 0f 84 e7 00 00 00 <0f> 0b 49 8d be 90 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f All code ======== 0: 0f 85 f5 02 00 00 jne 0x2fb 6: 8b 05 36 ca 75 04 mov 0x475ca36(%rip),%eax # 0x475ca42 c: 85 c0 test %eax,%eax e: 74 1c je 0x2c 10: 65 8b 05 c7 5e 8c 7e mov %gs:0x7e8c5ec7(%rip),%eax # 0x7e8c5ede 17: 85 c0 test %eax,%eax 19: 75 11 jne 0x2c 1b: 65 8b 05 b0 5c 8c 7e mov %gs:0x7e8c5cb0(%rip),%eax # 0x7e8c5cd2 22: 85 c0 test %eax,%eax 24: 0f 84 e7 00 00 00 je 0x111 2a:* 0f 0b ud2 <-- trapping instruction 2c: 49 8d be 90 00 00 00 lea 0x90(%r14),%rdi 33: 48 89 f8 mov %rdi,%rax 36: 48 c1 e8 03 shr $0x3,%rax 3a: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 49 8d be 90 00 00 00 lea 0x90(%r14),%rdi 9: 48 89 f8 mov %rdi,%rax c: 48 c1 e8 03 shr $0x3,%rax 10: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) 15: 0f .byte 0xf [ 61.167206][ T3577] RSP: 0018:ffffc90004d4f918 EFLAGS: 00010202 [ 61.169972][ T3577] RAX: 0000000000000001 RBX: ffff8881500fc908 RCX: 0000000000000000 [ 61.172750][ T3577] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff856d5bd8 [ 61.175842][ T3577] RBP: 0000000000000000 R08: ffff88814ccddbc0 R09: ffffffff871d2187 [ 61.178698][ T3577] R10: fffffbfff0e3a430 R11: 0000000000000001 R12: ffffffff8177b400 [ 61.181411][ T3577] R13: ffffc90004d4fac0 R14: ffff88814ccdd9a0 R15: dffffc0000000000 [ 61.184115][ T3577] FS: 0000000000000000(0000) GS:ffff88839d500000(0063) knlGS:00000000f7f5cb00 [ 61.186880][ T3577] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 61.189515][ T3577] CR2: 0000000057939010 CR3: 00000001ca68c000 CR4: 00000000000406e0 [ 61.192223][ T3577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.194895][ T3577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.197565][ T3577] Call Trace: [ 61.200001][ T3577] [ 61.202372][ T3577] ? lock_is_held_type (kernel/locking/lockdep.c:5407 kernel/locking/lockdep.c:5709) [ 61.204882][ T3577] ? perf_event_text_poke_output (kernel/events/core.c:8275) [ 61.207454][ T3577] perf_iterate_sb (kernel/events/core.c:7652 (discriminator 2)) [ 61.209949][ T3577] perf_event_mmap_event (kernel/events/core.c:8456) [ 61.212371][ T3577] ? perf_event_task (kernel/events/core.c:8341) [ 61.214770][ T3577] ? change_p4d_range (mm/mprotect.c:437 mm/mprotect.c:458) [ 61.217125][ T3577] perf_event_mmap (kernel/events/core.c:8593) [ 61.219413][ T3577] ? perf_event_namespaces (kernel/events/core.c:8562) [ 61.221755][ T3577] ? vma_set_page_prot (mm/mmap.c:96) [ 61.224070][ T3577] mprotect_fixup (mm/mprotect.c:651) [ 61.226264][ T3577] ? change_protection (mm/mprotect.c:541) [ 61.228497][ T3577] ? rwsem_down_write_slowpath (kernel/locking/rwsem.c:1561) [ 61.230860][ T3577] ? lock_is_held_type (kernel/locking/lockdep.c:5407 kernel/locking/lockdep.c:5709) [ 61.233209][ T3577] do_mprotect_pkey (mm/mprotect.c:781) [ 61.235473][ T3577] ? mprotect_fixup (mm/mprotect.c:663) [ 61.237567][ T3577] ? __lock_release (kernel/locking/lockdep.c:5342) [ 61.239520][ T3577] ? lock_downgrade (kernel/locking/lockdep.c:5318) [ 61.241497][ T3577] __ia32_sys_mprotect (mm/mprotect.c:804) [ 61.243442][ T3577] __do_fast_syscall_32 (arch/x86/entry/common.c:112 arch/x86/entry/common.c:178) [ 61.245343][ T3577] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4526) [ 61.247271][ T3577] ? __do_fast_syscall_32 (arch/x86/entry/common.c:183) [ 61.249089][ T3577] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4526) [ 61.250992][ T3577] ? __do_fast_syscall_32 (arch/x86/entry/common.c:183) [ 61.252846][ T3577] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4526) [ 61.254780][ T3577] ? __do_fast_syscall_32 (arch/x86/entry/common.c:183) [ 61.256627][ T3577] do_fast_syscall_32 (arch/x86/entry/common.c:203) [ 61.258401][ T3577] entry_SYSENTER_compat_after_hwframe (arch/x86/entry/entry_64_compat.S:122) [ 61.260235][ T3577] RIP: 0023:0xf7f61549 [ 61.261956][ T3577] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 All code ======== 0: 03 74 c0 01 add 0x1(%rax,%rax,8),%esi 4: 10 05 03 74 b8 01 adc %al,0x1b87403(%rip) # 0x1b8740d a: 10 06 adc %al,(%rsi) c: 03 74 b4 01 add 0x1(%rsp,%rsi,4),%esi 10: 10 07 adc %al,(%rdi) 12: 03 74 b0 01 add 0x1(%rax,%rsi,4),%esi 16: 10 08 adc %cl,(%rax) 18: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi 1c: 00 00 add %al,(%rax) 1e: 00 00 add %al,(%rax) 20: 00 51 52 add %dl,0x52(%rcx) 23: 55 push %rbp 24: 89 e5 mov %esp,%ebp 26: 0f 34 sysenter 28: cd 80 int $0x80 2a:* 5d pop %rbp <-- trapping instruction 2b: 5a pop %rdx 2c: 59 pop %rcx 2d: c3 retq 2e: 90 nop 2f: 90 nop 30: 90 nop 31: 90 nop 32: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi 39: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi Code starting with the faulting instruction =========================================== 0: 5d pop %rbp 1: 5a pop %rdx 2: 59 pop %rcx 3: c3 retq 4: 90 nop 5: 90 nop 6: 90 nop 7: 90 nop 8: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi f: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi To reproduce: # build kernel cd linux cp config-6.0.0-rc2-00043-gf3c0eba28704 .config make HOSTCC=gcc-11 CC=gcc-11 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage modules make HOSTCC=gcc-11 CC=gcc-11 ARCH=x86_64 INSTALL_MOD_PATH= modules_install cd find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz git clone https://github.com/intel/lkp-tests.git cd lkp-tests bin/lkp qemu -k -m modules.cgz job-script # job-script is attached in this email # if come across any failure that blocks the test, # please remove ~/.lkp and /lkp dir to run from a clean state. -- 0-DAY CI Kernel Test Service https://01.org/lkp