audit: type=1400 audit(1665021357.580:8): avc: denied { kernel } for pid=3992 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 loop1: detected capacity change from 0 to 4096 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3994 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 Modules linked in: CPU: 0 PID: 3994 Comm: syz-executor.1 Not tainted 6.0.0-next-20221005 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_group_detach+0x99e/0x12f0 Code: 85 d5 f8 ff ff e8 b2 4e ee ff 65 44 8b 25 56 a8 aa 7e 31 ff 44 89 e6 e8 50 4b ee ff 45 85 e4 0f 84 0a 05 00 00 e8 92 4e ee ff <0f> 0b e9 a9 f8 ff ff e8 86 4e ee ff 65 8b 1d 2b a8 aa 7e 31 ff 89 RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 RAX: 0000000080010002 RBX: ffff8880086605c8 RCX: 0000000000000000 RDX: ffff88803eaf5040 RSI: ffffffff8157cd7e RDI: 0000000000000005 RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: ffff888008660658 R14: ffff88806ce3d2c0 R15: ffff8880086605c8 FS: 00007f99964b6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3120608718 CR3: 000000003e5ce000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:preempt_count_sub+0x14/0x160 Code: e8 d1 42 58 00 e9 38 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 c7 c0 c0 26 06 87 53 89 fb 48 ba 00 00 00 00 00 fc ff df <48> 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 RSP: 0018:ffff88803d4af548 EFLAGS: 00000206 RAX: ffffffff870626c0 RBX: 0000000000000001 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffff88803d4aff48 RDI: 0000000000000001 RBP: ffff88803d4a8000 R08: ffffffff86245ebc R09: ffffffff86245ec0 R10: ffffed1007a95ec8 R11: ffff88803d4af618 R12: ffff88803d4af619 R13: ffff88803d4af638 R14: ffff88803d4af5d8 R15: 0000000000000001 unwind_next_frame+0xe06/0x20b0 arch_stack_walk+0x83/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_slab_alloc+0x58/0x70 kmem_cache_alloc+0x1a9/0x3e0 __create_object+0x3d/0xc10 kmemleak_alloc_percpu+0xa1/0x140 pcpu_alloc+0x7f4/0x10a0 __percpu_counter_init+0x10d/0x2e0 ext4_fill_super+0x7861/0xb4f0 get_tree_bdev+0x428/0x740 vfs_get_tree+0x8e/0x300 path_mount+0x1310/0x1e20 __x64_sys_mount+0x282/0x300 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9998f4204a Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f99964b5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f9998f4204a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f99964b6000 RBP: 00007f99964b6040 R08: 00007f99964b6040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f99964b6000 R15: 0000000020000040 irq event stamp: 2174 hardirqs last enabled at (2173): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (2174): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (2084): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (2077): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3994 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 Modules linked in: CPU: 0 PID: 3994 Comm: syz-executor.1 Tainted: G W 6.0.0-next-20221005 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_group_detach+0x9c7/0x12f0 Code: ff 0f 0b e9 a9 f8 ff ff e8 86 4e ee ff 65 8b 1d 2b a8 aa 7e 31 ff 89 de e8 26 4b ee ff 85 db 0f 84 86 04 00 00 e8 69 4e ee ff <0f> 0b e9 0e fa ff ff e8 5d 4e ee ff 48 8b 7c 24 20 48 81 c7 f8 00 RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88803eaf5040 RSI: ffffffff8157cda7 RDI: 0000000000000005 RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880086605c8 R13: ffff8880086605c8 R14: ffff88806ce3d2c0 R15: ffff8880086605c8 FS: 00007f99964b6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3120608718 CR3: 000000003e5ce000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:preempt_count_sub+0x14/0x160 Code: e8 d1 42 58 00 e9 38 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 c7 c0 c0 26 06 87 53 89 fb 48 ba 00 00 00 00 00 fc ff df <48> 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 RSP: 0018:ffff88803d4af548 EFLAGS: 00000206 RAX: ffffffff870626c0 RBX: 0000000000000001 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffff88803d4aff48 RDI: 0000000000000001 RBP: ffff88803d4a8000 R08: ffffffff86245ebc R09: ffffffff86245ec0 R10: ffffed1007a95ec8 R11: ffff88803d4af618 R12: ffff88803d4af619 R13: ffff88803d4af638 R14: ffff88803d4af5d8 R15: 0000000000000001 unwind_next_frame+0xe06/0x20b0 arch_stack_walk+0x83/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_slab_alloc+0x58/0x70 kmem_cache_alloc+0x1a9/0x3e0 __create_object+0x3d/0xc10 kmemleak_alloc_percpu+0xa1/0x140 pcpu_alloc+0x7f4/0x10a0 __percpu_counter_init+0x10d/0x2e0 ext4_fill_super+0x7861/0xb4f0 get_tree_bdev+0x428/0x740 vfs_get_tree+0x8e/0x300 path_mount+0x1310/0x1e20 __x64_sys_mount+0x282/0x300 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9998f4204a Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f99964b5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f9998f4204a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f99964b6000 RBP: 00007f99964b6040 R08: 00007f99964b6040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f99964b6000 R15: 0000000020000040 irq event stamp: 2174 hardirqs last enabled at (2173): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (2174): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (2084): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (2077): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3994 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 Modules linked in: CPU: 0 PID: 3994 Comm: syz-executor.1 Tainted: G W 6.0.0-next-20221005 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 Code: 5e 41 5f e9 0d f0 f0 ff e8 08 f0 f0 ff 65 8b 1d ad 49 ad 7e 31 ff 89 de e8 a8 ec f0 ff 85 db 0f 84 d3 02 00 00 e8 eb ef f0 ff <0f> 0b eb 97 e8 e2 ef f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88803eaf5040 RSI: ffffffff81552c25 RDI: 0000000000000005 RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: ffff888008660670 R14: 0000000000000001 R15: 0000000000000001 FS: 00007f99964b6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3120608718 CR3: 000000003e5ce000 CR4: 0000000000350ef0 Call Trace: list_del_event+0x524/0x860 __perf_remove_from_context+0xd2/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:preempt_count_sub+0x14/0x160 Code: e8 d1 42 58 00 e9 38 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 c7 c0 c0 26 06 87 53 89 fb 48 ba 00 00 00 00 00 fc ff df <48> 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 RSP: 0018:ffff88803d4af548 EFLAGS: 00000206 RAX: ffffffff870626c0 RBX: 0000000000000001 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffff88803d4aff48 RDI: 0000000000000001 RBP: ffff88803d4a8000 R08: ffffffff86245ebc R09: ffffffff86245ec0 R10: ffffed1007a95ec8 R11: ffff88803d4af618 R12: ffff88803d4af619 R13: ffff88803d4af638 R14: ffff88803d4af5d8 R15: 0000000000000001 unwind_next_frame+0xe06/0x20b0 arch_stack_walk+0x83/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_slab_alloc+0x58/0x70 kmem_cache_alloc+0x1a9/0x3e0 __create_object+0x3d/0xc10 kmemleak_alloc_percpu+0xa1/0x140 pcpu_alloc+0x7f4/0x10a0 __percpu_counter_init+0x10d/0x2e0 ext4_fill_super+0x7861/0xb4f0 get_tree_bdev+0x428/0x740 vfs_get_tree+0x8e/0x300 path_mount+0x1310/0x1e20 __x64_sys_mount+0x282/0x300 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9998f4204a Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f99964b5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f9998f4204a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f99964b6000 RBP: 00007f99964b6040 R08: 00007f99964b6040 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f99964b6000 R15: 0000000020000040 irq event stamp: 2174 hardirqs last enabled at (2173): [] _raw_spin_unlock_irqrestore+0x28/0x60 hardirqs last disabled at (2174): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (2084): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (2077): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- loop7: detected capacity change from 0 to 4096 EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop1): unmounting filesystem. ---------------- Code disassembly (best guess): 0: e8 d1 42 58 00 callq 0x5842d6 5: e9 38 fe ff ff jmpq 0xfffffe42 a: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 11: 00 00 00 00 15: 90 nop 16: 48 c7 c0 c0 26 06 87 mov $0xffffffff870626c0,%rax 1d: 53 push %rbx 1e: 89 fb mov %edi,%ebx 20: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 27: fc ff df * 2a: 48 89 c1 mov %rax,%rcx <-- trapping instruction 2d: 83 e0 07 and $0x7,%eax 30: 48 c1 e9 03 shr $0x3,%rcx 34: 83 c0 03 add $0x3,%eax 37: 0f b6 14 11 movzbl (%rcx,%rdx,1),%edx 3b: 38 d0 cmp %dl,%al 3d: 7c 08 jl 0x47 3f: 84 .byte 0x84