audit: type=1400 audit(1664749621.660:8): avc: denied { kernel } for pid=4025 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 13 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 Modules linked in: CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:event_filter_match+0x422/0x660 Code: 00 00 00 e9 7c fc ff ff e8 7b 33 f1 ff 65 8b 2d 00 9d ad 7e 31 ff 89 ee e8 1b 30 f1 ff 85 ed 0f 84 ef 00 00 00 e8 5e 33 f1 ff <0f> 0b eb 9f e8 d5 a1 23 00 e9 17 fc ff ff e8 4b 33 f1 ff 48 8d 7b RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff88803e370000 RCX: 0000000000000100 RDX: ffff888008638000 RSI: ffffffff8154d8d2 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803e370220 R13: 0000000000000000 R14: ffff88803e3700a8 R15: ffff88803e370220 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555addc18 CR3: 00000000200ea000 CR4: 0000000000350ef0 Call Trace: merge_sched_in+0x107/0x1110 visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:unwind_next_frame+0x99c/0x20b0 Code: 24 20 4c 89 4c 24 18 e8 52 cf 66 00 4c 8b 44 24 20 4c 8b 4c 24 18 e9 d0 f9 ff ff 0f 1f 44 00 00 e9 46 fa ff ff 48 8b 44 24 18 08 00 00 00 4c 89 f7 4c 89 4c 24 30 4c 89 44 24 28 48 8d 70 f8 RSP: 0018:ffff8880086478e0 EFLAGS: 00000246 RAX: ffff888008647cd0 RBX: 0000000000000001 RCX: ffff888008647cc0 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffff8880086479b8 R08: ffffffff85ee0570 R09: ffffffff85ee0574 R10: ffffed10010c8f39 R11: 000000000003603d R12: ffff8880086479a1 R13: ffff8880086479c0 R14: ffff888008647960 R15: ffffffff85ee0575 arch_stack_walk+0x83/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x50 __kasan_slab_free+0x106/0x190 kmem_cache_free+0xf7/0x610 rcu_core+0x7e2/0x2080 __do_softirq+0x1c3/0x8f5 run_ksoftirqd+0x31/0x60 smpboot_thread_fn+0x66f/0xa10 kthread+0x2ed/0x3a0 ret_from_fork+0x22/0x30 irq event stamp: 4036647 hardirqs last enabled at (4036646): [] rcu_core+0x6ed/0x2080 hardirqs last disabled at (4036647): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (4036634): [] run_ksoftirqd+0x31/0x60 softirqs last disabled at (4036639): [] run_ksoftirqd+0x31/0x60 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 13 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 Modules linked in: CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc7-next-20220930 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:merge_sched_in+0xadb/0x1110 Code: ff ff e8 08 0e ef ff 65 8b 05 8d 77 ab 7e 31 ff 89 c6 89 04 24 e8 a5 0a ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 e5 0d ef ff <0f> 0b e9 c4 fb ff ff e8 d9 0d ef ff 4c 89 e8 48 05 18 01 00 00 e9 RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff88806ce3d2c0 RCX: 0000000000000100 RDX: ffff888008638000 RSI: ffffffff8156fe4b RDI: 0000000000000005 RBP: ffff88803e370000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d2c0 R13: ffff88806ce00000 R14: ffff88803e3700a8 R15: ffff88803e370220 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555addc18 CR3: 00000000200ea000 CR4: 0000000000350ef0 Call Trace: visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:unwind_next_frame+0x99c/0x20b0 Code: 24 20 4c 89 4c 24 18 e8 52 cf 66 00 4c 8b 44 24 20 4c 8b 4c 24 18 e9 d0 f9 ff ff 0f 1f 44 00 00 e9 46 fa ff ff 48 8b 44 24 18 08 00 00 00 4c 89 f7 4c 89 4c 24 30 4c 89 44 24 28 48 8d 70 f8 RSP: 0018:ffff8880086478e0 EFLAGS: 00000246 RAX: ffff888008647cd0 RBX: 0000000000000001 RCX: ffff888008647cc0 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffff8880086479b8 R08: ffffffff85ee0570 R09: ffffffff85ee0574 R10: ffffed10010c8f39 R11: 000000000003603d R12: ffff8880086479a1 R13: ffff8880086479c0 R14: ffff888008647960 R15: ffffffff85ee0575 arch_stack_walk+0x83/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x50 __kasan_slab_free+0x106/0x190 kmem_cache_free+0xf7/0x610 rcu_core+0x7e2/0x2080 __do_softirq+0x1c3/0x8f5 run_ksoftirqd+0x31/0x60 smpboot_thread_fn+0x66f/0xa10 kthread+0x2ed/0x3a0 ret_from_fork+0x22/0x30 irq event stamp: 4036647 hardirqs last enabled at (4036646): [] rcu_core+0x6ed/0x2080 hardirqs last disabled at (4036647): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (4036634): [] run_ksoftirqd+0x31/0x60 softirqs last disabled at (4036639): [] run_ksoftirqd+0x31/0x60 ---[ end trace 0000000000000000 ]--- loop6: detected capacity change from 0 to 2048 ------------[ cut here ]------------ ====================================================== ---------------- Code disassembly (best guess): 0: 24 20 and $0x20,%al 2: 4c 89 4c 24 18 mov %r9,0x18(%rsp) 7: e8 52 cf 66 00 callq 0x66cf5e c: 4c 8b 44 24 20 mov 0x20(%rsp),%r8 11: 4c 8b 4c 24 18 mov 0x18(%rsp),%r9 16: e9 d0 f9 ff ff jmpq 0xfffff9eb 1b: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 20: e9 46 fa ff ff jmpq 0xfffffa6b 25: 48 8b 44 24 18 mov 0x18(%rsp),%rax * 2a: ba 08 00 00 00 mov $0x8,%edx <-- trapping instruction 2f: 4c 89 f7 mov %r14,%rdi 32: 4c 89 4c 24 30 mov %r9,0x30(%rsp) 37: 4c 89 44 24 28 mov %r8,0x28(%rsp) 3c: 48 8d 70 f8 lea -0x8(%rax),%rsi