audit: type=1400 audit(1663325583.123:8): avc: denied { kernel } for pid=3929 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 329 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 329 Comm: kworker/u4:4 Not tainted 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Workqueue: events_unbound call_usermodehelper_exec_work
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 05 92 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88801ba08000 RCX: 0000000000000000
RDX: ffff888015d99ac0 RSI: ffffffff81550212 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88801ba08220
R13: 0000000000000000 R14: ffff88801ba080a8 R15: ffff88801ba08220
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f02d16188e0 CR3: 000000001d94e000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60
Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a fe 03 fd 48 89 ef e8 d2 73 04 fd 80 e7 02 74 06 e8 78 b6 26 fd fb bf 01 00 00 00 1d ff f9 fc 65 8b 05 46 35 dc 7b 85 c0 74 07 5b 5d e9 bb 01 3a
RSP: 0018:ffff88803d76f8e0 EFLAGS: 00000206
RAX: 000000000000eb03 RBX: 0000000000000246 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffffff854ced80 R08: 0000000000000001 R09: ffffffff86ccb81f
R10: fffffbfff0d99703 R11: 0000000000000001 R12: ffff888008478640
R13: 0000000000000cc0 R14: 0000000000000cc0 R15: 0000000000000cc0
kmem_cache_alloc+0x23c/0x3e0
copy_process+0x2227/0x6e20
kernel_clone+0xe7/0x890
user_mode_thread+0xad/0xf0
call_usermodehelper_exec_work+0x69/0x180
process_one_work+0xa17/0x16a0
worker_thread+0x637/0x1260
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 60164
hardirqs last enabled at (60163): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (60164): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (59994): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (59985): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 329 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 329 Comm: kworker/u4:4 Tainted: G W 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Workqueue: events_unbound call_usermodehelper_exec_work
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88806ce3d100 RCX: 0000000000000000
RDX: ffff888015d99ac0 RSI: ffffffff815700eb RDI: 0000000000000005
RBP: ffff88801ba08000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100
R13: ffff88806ce00000 R14: ffff88801ba080a8 R15: ffff88801ba08220
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f02d16188e0 CR3: 000000001d94e000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60
Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a fe 03 fd 48 89 ef e8 d2 73 04 fd 80 e7 02 74 06 e8 78 b6 26 fd fb bf 01 00 00 00 1d ff f9 fc 65 8b 05 46 35 dc 7b 85 c0 74 07 5b 5d e9 bb 01 3a
RSP: 0018:ffff88803d76f8e0 EFLAGS: 00000206
RAX: 000000000000eb03 RBX: 0000000000000246 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffffff854ced80 R08: 0000000000000001 R09: ffffffff86ccb81f
R10: fffffbfff0d99703 R11: 0000000000000001 R12: ffff888008478640
R13: 0000000000000cc0 R14: 0000000000000cc0 R15: 0000000000000cc0
kmem_cache_alloc+0x23c/0x3e0
copy_process+0x2227/0x6e20
kernel_clone+0xe7/0x890
user_mode_thread+0xad/0xf0
call_usermodehelper_exec_work+0x69/0x180
process_one_work+0xa17/0x16a0
worker_thread+0x637/0x1260
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 60164
hardirqs last enabled at (60163): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (60164): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (59994): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (59985): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
======================================================
----------------
Code disassembly (best guess):
0: 48 83 c7 18 add $0x18,%rdi
4: 53 push %rbx
5: 48 89 f3 mov %rsi,%rbx
8: 48 8b 74 24 10 mov 0x10(%rsp),%rsi
d: e8 7a fe 03 fd callq 0xfd03fe8c
12: 48 89 ef mov %rbp,%rdi
15: e8 d2 73 04 fd callq 0xfd0473ec
1a: 80 e7 02 and $0x2,%bh
1d: 74 06 je 0x25
1f: e8 78 b6 26 fd callq 0xfd26b69c
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 1d ff f9 fc callq 0xfcf9ff4c <-- trapping instruction
2f: 65 8b 05 46 35 dc 7b mov %gs:0x7bdc3546(%rip),%eax # 0x7bdc357c
36: 85 c0 test %eax,%eax
38: 74 07 je 0x41
3a: 5b pop %rbx
3b: 5d pop %rbp
3c: e9 .byte 0xe9
3d: bb .byte 0xbb
3e: 01 3a add %edi,(%rdx)