audit: type=1400 audit(1664000198.105:8): avc: denied { kernel } for pid=3896 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3887 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 Modules linked in: CPU: 0 PID: 3887 Comm: modprobe Not tainted 6.0.0-rc6-next-20220923 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:event_filter_match+0x422/0x660 Code: 00 00 00 e9 7c fc ff ff e8 1b 1e f1 ff 65 8b 2d e0 88 ad 7e 31 ff 89 ee e8 bb 1a f1 ff 85 ed 0f 84 ef 00 00 00 e8 fe 1d f1 ff <0f> 0b eb 9f e8 c5 80 23 00 e9 17 fc ff ff e8 eb 1d f1 ff 48 8d 7b RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 RAX: 0000000080010001 RBX: ffff888041310000 RCX: 0000000000000000 RDX: ffff88800d853580 RSI: ffffffff8154ecf2 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888041310220 R13: 0000000000000000 R14: ffff8880413100a8 R15: ffff888041310220 FS: 00007fd30c633540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff01715c10 CR3: 0000000009320000 CR4: 0000000000350ef0 Call Trace: merge_sched_in+0x107/0x1110 visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lock_is_held_type+0x51/0x130 Code: dd 7b 85 c0 0f 85 c3 00 00 00 65 4c 8b 24 25 c0 6e 02 00 41 8b 94 24 74 09 00 00 85 d2 0f 85 aa 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 00 f3 86 84 4d 8d ac 24 78 09 00 00 31 db e8 RSP: 0018:ffff8880175af8d0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff88800b9a6040 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff854073e0 RBP: ffffffff854073e0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d853580 R13: 00000000ffffffff R14: 00000000ffffffff R15: ffff8880175afc40 __d_lookup_rcu+0x374/0x4a0 lookup_fast+0x91/0x530 walk_component+0x5e/0x5b0 link_path_walk.part.0+0x76e/0xe50 path_openat+0x245/0x2800 do_filp_open+0x1b6/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd30c74abe7 Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25 RSP: 002b:00007fff01715ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000559bf8c3f560 RCX: 00007fd30c74abe7 RDX: 0000000000080000 RSI: 00007fff01715c50 RDI: 00000000ffffff9c RBP: 00007fff01715c50 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 0000559bf8c3f560 R14: 0000000000000001 R15: 0000000000000000 irq event stamp: 19064 hardirqs last enabled at (19063): [] set_root+0x397/0x560 hardirqs last disabled at (19064): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (18904): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (18591): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3887 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 Modules linked in: CPU: 0 PID: 3887 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220923 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:merge_sched_in+0xadb/0x1110 Code: ff ff e8 c8 1a ef ff 65 8b 05 8d 85 ab 7e 31 ff 89 c6 89 04 24 e8 65 17 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 a5 1a ef ff <0f> 0b e9 c4 fb ff ff e8 99 1a ef ff 4c 89 e8 48 05 18 01 00 00 e9 RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 RAX: 0000000080010001 RBX: ffff88806ce3d140 RCX: 0000000000000000 RDX: ffff88800d853580 RSI: ffffffff8156f04b RDI: 0000000000000005 RBP: ffff888041310000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88806ce3d140 R13: ffff88806ce00000 R14: ffff8880413100a8 R15: ffff888041310220 FS: 00007fd30c633540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff01715c10 CR3: 0000000009320000 CR4: 0000000000350ef0 Call Trace: visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lock_is_held_type+0x51/0x130 Code: dd 7b 85 c0 0f 85 c3 00 00 00 65 4c 8b 24 25 c0 6e 02 00 41 8b 94 24 74 09 00 00 85 d2 0f 85 aa 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 00 f3 86 84 4d 8d ac 24 78 09 00 00 31 db e8 RSP: 0018:ffff8880175af8d0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff88800b9a6040 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff854073e0 RBP: ffffffff854073e0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d853580 R13: 00000000ffffffff R14: 00000000ffffffff R15: ffff8880175afc40 __d_lookup_rcu+0x374/0x4a0 lookup_fast+0x91/0x530 walk_component+0x5e/0x5b0 link_path_walk.part.0+0x76e/0xe50 path_openat+0x245/0x2800 do_filp_open+0x1b6/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd30c74abe7 Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25 RSP: 002b:00007fff01715ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000559bf8c3f560 RCX: 00007fd30c74abe7 RDX: 0000000000080000 RSI: 00007fff01715c50 RDI: 00000000ffffff9c RBP: 00007fff01715c50 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 0000559bf8c3f560 R14: 0000000000000001 R15: 0000000000000000 irq event stamp: 19064 hardirqs last enabled at (19063): [] set_root+0x397/0x560 hardirqs last disabled at (19064): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (18904): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (18591): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ ====================================================== ---------------- Code disassembly (best guess): 0: dd 7b 85 fnstsw -0x7b(%rbx) 3: c0 0f 85 rorb $0x85,(%rdi) 6: c3 retq 7: 00 00 add %al,(%rax) 9: 00 65 4c add %ah,0x4c(%rbp) c: 8b 24 25 c0 6e 02 00 mov 0x26ec0,%esp 13: 41 8b 94 24 74 09 00 mov 0x974(%r12),%edx 1a: 00 1b: 85 d2 test %edx,%edx 1d: 0f 85 aa 00 00 00 jne 0xcd 23: 48 89 fd mov %rdi,%rbp 26: 41 89 f6 mov %esi,%r14d 29: 9c pushfq * 2a: 8f 04 24 popq (%rsp) <-- trapping instruction 2d: fa cli 2e: 48 c7 c7 00 f3 86 84 mov $0xffffffff8486f300,%rdi 35: 4d 8d ac 24 78 09 00 lea 0x978(%r12),%r13 3c: 00 3d: 31 db xor %ebx,%ebx 3f: e8 .byte 0xe8