audit: type=1400 audit(1664753090.927:8): avc: denied { kernel } for pid=3903 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 297 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 297 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 7b 33 f1 ff 65 8b 2d 00 9d ad 7e 31 ff 89 ee e8 1b 30 f1 ff 85 ed 0f 84 ef 00 00 00 e8 5e 33 f1 ff <0f> 0b eb 9f e8 d5 a1 23 00 e9 17 fc ff ff e8 4b 33 f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff888040e28000 RCX: 0000000000000000
RDX: ffff88800e0c3580 RSI: ffffffff8154d8d2 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888040e28220
R13: 0000000000000000 R14: ffff888040e280a8 R15: ffff888040e28220
FS: 0000555555db0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f62e0394438 CR3: 00000000103f2000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:unwind_next_frame+0x299/0x20b0
Code: 3f c0 e5 e1 85 83 c2 01 49 81 f8 3c 30 27 86 0f 83 bf 06 00 00 89 d7 48 8d 3c 7f 48 8d bc 3f c0 e5 e1 85 48 81 ff 3c 30 27 86 <0f> 87 a4 06 00 00 29 ca 4c 89 c6 48 8d 3c 85 18 b4 b3 85 4c 89 f9
RSP: 0018:ffff88800e04f918 EFLAGS: 00000293
RAX: 0000000000021f90 RBX: 0000000000000001 RCX: 0000000000021f90
RDX: 0000000000021f91 RSI: 0000000000007de2 RDI: ffffffff85eea326
RBP: ffff88800e04f9f0 R08: ffffffff85eea320 R09: ffffffff85f1f0ee
R10: ffffed1001c09f40 R11: 000000000003603d R12: ffff88800e04f9d9
R13: ffff88800e04f9f8 R14: ffff88800e04f998 R15: ffffffff817de212
arch_stack_walk+0x83/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
__kasan_record_aux_stack+0x95/0xb0
call_rcu+0x6a/0xa30
__kmem_cache_free+0x91/0x400
free_rb_tree_fname+0x7c/0xe0
ext4_release_dir+0x41/0x60
__fput+0x263/0xa40
task_work_run+0x170/0x280
exit_to_user_mode_prepare+0x199/0x1a0
syscall_exit_to_user_mode+0x19/0x40
do_syscall_64+0x48/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fb8d889e4b7
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffecebec028 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fb8d889e4b7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffecebec0f0 R08: 0000000000000000 R09: 00007ffecebebec0
R10: 0000555555db1cdb R11: 0000000000000206 R12: 00007fb8d88f8105
R13: 00007ffecebed1b0 R14: 0000555555db1c20 R15: 00007ffecebed1f0
irq event stamp: 148794
hardirqs last enabled at (148793): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (148794): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (148564): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (148543): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 297 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 297 Comm: syz-executor.5 Tainted: G W 6.0.0-rc7-next-20220930 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 08 0e ef ff 65 8b 05 8d 77 ab 7e 31 ff 89 c6 89 04 24 e8 a5 0a ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 e5 0d ef ff <0f> 0b e9 c4 fb ff ff e8 d9 0d ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff88806ce3d2c0 RCX: 0000000000000000
RDX: ffff88800e0c3580 RSI: ffffffff8156fe4b RDI: 0000000000000005
RBP: ffff888040e28000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d2c0
R13: ffff88806ce00000 R14: ffff888040e280a8 R15: ffff888040e28220
FS: 0000555555db0400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f62e0394438 CR3: 00000000103f2000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:unwind_next_frame+0x299/0x20b0
Code: 3f c0 e5 e1 85 83 c2 01 49 81 f8 3c 30 27 86 0f 83 bf 06 00 00 89 d7 48 8d 3c 7f 48 8d bc 3f c0 e5 e1 85 48 81 ff 3c 30 27 86 <0f> 87 a4 06 00 00 29 ca 4c 89 c6 48 8d 3c 85 18 b4 b3 85 4c 89 f9
RSP: 0018:ffff88800e04f918 EFLAGS: 00000293
RAX: 0000000000021f90 RBX: 0000000000000001 RCX: 0000000000021f90
RDX: 0000000000021f91 RSI: 0000000000007de2 RDI: ffffffff85eea326
RBP: ffff88800e04f9f0 R08: ffffffff85eea320 R09: ffffffff85f1f0ee
R10: ffffed1001c09f40 R11: 000000000003603d R12: ffff88800e04f9d9
R13: ffff88800e04f9f8 R14: ffff88800e04f998 R15: ffffffff817de212
arch_stack_walk+0x83/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
__kasan_record_aux_stack+0x95/0xb0
call_rcu+0x6a/0xa30
__kmem_cache_free+0x91/0x400
free_rb_tree_fname+0x7c/0xe0
ext4_release_dir+0x41/0x60
__fput+0x263/0xa40
task_work_run+0x170/0x280
exit_to_user_mode_prepare+0x199/0x1a0
syscall_exit_to_user_mode+0x19/0x40
do_syscall_64+0x48/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fb8d889e4b7
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffecebec028 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fb8d889e4b7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffecebec0f0 R08: 0000000000000000 R09: 00007ffecebebec0
R10: 0000555555db1cdb R11: 0000000000000206 R12: 00007fb8d88f8105
R13: 00007ffecebed1b0 R14: 0000555555db1c20 R15: 00007ffecebed1f0
irq event stamp: 148794
hardirqs last enabled at (148793): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (148794): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (148564): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (148543): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure
loop5: detected capacity change from 0 to 264192
loop5: detected capacity change from 0 to 264192
loop4: detected capacity change from 0 to 264192
loop4: detected capacity change from 0 to 264192
----------------
Code disassembly (best guess), 3 bytes skipped:
0: e1 85 loope 0xffffff87
2: 83 c2 01 add $0x1,%edx
5: 49 81 f8 3c 30 27 86 cmp $0xffffffff8627303c,%r8
c: 0f 83 bf 06 00 00 jae 0x6d1
12: 89 d7 mov %edx,%edi
14: 48 8d 3c 7f lea (%rdi,%rdi,2),%rdi
18: 48 8d bc 3f c0 e5 e1 lea -0x7a1e1a40(%rdi,%rdi,1),%rdi
1f: 85
20: 48 81 ff 3c 30 27 86 cmp $0xffffffff8627303c,%rdi
* 27: 0f 87 a4 06 00 00 ja 0x6d1 <-- trapping instruction
2d: 29 ca sub %ecx,%edx
2f: 4c 89 c6 mov %r8,%rsi
32: 48 8d 3c 85 18 b4 b3 lea -0x7a4c4be8(,%rax,4),%rdi
39: 85
3a: 4c 89 f9 mov %r15,%rcx