audit: type=1400 audit(1665125944.147:8): avc: denied { kernel } for pid=4004 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4012 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 Modules linked in: CPU: 0 PID: 4012 Comm: syz-executor.4 Not tainted 6.0.0-next-20221006 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:event_filter_match+0x422/0x660 Code: 00 00 00 e9 7c fc ff ff e8 4b 2a f1 ff 65 8b 2d 10 83 ad 7e 31 ff 89 ee e8 eb 26 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 2a f1 ff <0f> 0b eb 9f e8 25 9f 23 00 e9 17 fc ff ff e8 1b 2a f1 ff 48 8d 7b RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 RAX: 0000000080010001 RBX: ffff888040520000 RCX: 0000000000000000 RDX: ffff888021013580 RSI: ffffffff8154f2c2 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b601b R12: ffff888040520220 R13: 0000000000000000 R14: ffff8880405200a8 R15: ffff888040520220 FS: 00007f2417a19700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2417a1a000 CR3: 000000004009a000 CR4: 0000000000350ef0 Call Trace: merge_sched_in+0x107/0x1110 visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lockdep_init_map_type+0x197/0x7e0 Code: c1 ea 03 80 3c 02 00 0f 85 d6 05 00 00 48 8d 7d 20 48 89 75 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 06 0f 8e 8b 04 00 00 48 8d 7d 21 44 88 4d 20 48 b8 00 00 RSP: 0018:ffff88804086fad0 EFLAGS: 00000216 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 1ffff11001ab7db7 RSI: ffffffff848fbc00 RDI: ffff88800d5bedb8 RBP: ffff88800d5bed98 R08: 0000000000000002 R09: 0000000000000000 R10: ffff88806c432090 R11: 0000000000000001 R12: ffffffff87082600 R13: 0000000000000000 R14: ffffffff870626c0 R15: ffff88800d5bed80 __raw_spin_lock_init+0x36/0x110 __create_object+0x121/0xc10 kmemleak_alloc_percpu+0xa1/0x140 pcpu_alloc+0x7f4/0x10a0 __percpu_init_rwsem+0x22/0x150 alloc_super+0x27b/0xb00 sget_fc+0x13e/0x7a0 get_tree_nodev+0x24/0x1d0 vfs_get_tree+0x8e/0x300 path_mount+0x1310/0x1e20 __x64_sys_mount+0x282/0x300 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f241a4a504a Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2417a18fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f241a4a504a RDX: 0000000020000200 RSI: 0000000020000240 RDI: 0000000000000000 RBP: 00007f2417a19040 R08: 00007f2417a19040 R09: 0000000020000200 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000200 R13: 0000000020000240 R14: 00007f2417a19000 R15: 00000000200000c0 irq event stamp: 638 hardirqs last enabled at (637): [] ___slab_alloc+0x86e/0x1080 hardirqs last disabled at (638): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (480): [] fpu__clear_user_states+0xdb/0x1e0 softirqs last disabled at (478): [] fpu__clear_user_states+0x24/0x1e0 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4012 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 Modules linked in: CPU: 0 PID: 4012 Comm: syz-executor.4 Tainted: G W 6.0.0-next-20221006 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:merge_sched_in+0xadb/0x1110 Code: ff ff e8 d8 04 ef ff 65 8b 05 9d 5d ab 7e 31 ff 89 c6 89 04 24 e8 75 01 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 b5 04 ef ff <0f> 0b e9 c4 fb ff ff e8 a9 04 ef ff 4c 89 e8 48 05 18 01 00 00 e9 RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 RAX: 0000000080010001 RBX: ffff88806ce3d2c0 RCX: 0000000000000000 RDX: ffff888021013580 RSI: ffffffff8157183b RDI: 0000000000000005 RBP: ffff888040520000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88806ce3d2c0 R13: ffff88806ce00000 R14: ffff8880405200a8 R15: ffff888040520220 FS: 00007f2417a19700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2417a1a000 CR3: 000000004009a000 CR4: 0000000000350ef0 Call Trace: visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 ctx_sched_in+0x2e6/0x770 perf_event_sched_in+0x75/0x80 ctx_resched+0x1ce/0x390 __perf_install_in_context+0x285/0x9c0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x89/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:lockdep_init_map_type+0x197/0x7e0 Code: c1 ea 03 80 3c 02 00 0f 85 d6 05 00 00 48 8d 7d 20 48 89 75 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 06 0f 8e 8b 04 00 00 48 8d 7d 21 44 88 4d 20 48 b8 00 00 RSP: 0018:ffff88804086fad0 EFLAGS: 00000216 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 1ffff11001ab7db7 RSI: ffffffff848fbc00 RDI: ffff88800d5bedb8 RBP: ffff88800d5bed98 R08: 0000000000000002 R09: 0000000000000000 R10: ffff88806c432090 R11: 0000000000000001 R12: ffffffff87082600 R13: 0000000000000000 R14: ffffffff870626c0 R15: ffff88800d5bed80 __raw_spin_lock_init+0x36/0x110 __create_object+0x121/0xc10 kmemleak_alloc_percpu+0xa1/0x140 pcpu_alloc+0x7f4/0x10a0 __percpu_init_rwsem+0x22/0x150 alloc_super+0x27b/0xb00 sget_fc+0x13e/0x7a0 get_tree_nodev+0x24/0x1d0 vfs_get_tree+0x8e/0x300 path_mount+0x1310/0x1e20 __x64_sys_mount+0x282/0x300 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f241a4a504a Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2417a18fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f241a4a504a RDX: 0000000020000200 RSI: 0000000020000240 RDI: 0000000000000000 RBP: 00007f2417a19040 R08: 00007f2417a19040 R09: 0000000020000200 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000200 R13: 0000000020000240 R14: 00007f2417a19000 R15: 00000000200000c0 irq event stamp: 638 hardirqs last enabled at (637): [] ___slab_alloc+0x86e/0x1080 hardirqs last disabled at (638): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (480): [] fpu__clear_user_states+0xdb/0x1e0 softirqs last disabled at (478): [] fpu__clear_user_states+0x24/0x1e0 ---[ end trace 0000000000000000 ]--- Bluetooth: MGMT ver 1.22 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4016 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 Modules linked in: CPU: 0 PID: 4016 Comm: syz-executor.3 Tainted: G W 6.0.0-next-20221006 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_group_detach+0x99e/0x12f0 Code: 85 d5 f8 ff ff e8 82 45 ee ff 65 44 8b 25 46 9e aa 7e 31 ff 44 89 e6 e8 20 42 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 62 45 ee ff <0f> 0b e9 a9 f8 ff ff e8 56 45 ee ff 65 8b 1d 1b 9e aa 7e 31 ff 89 RSP: 0018:ffff88806ce09b58 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880405205c8 RCX: 0000000000000100 RDX: ffff888021588000 RSI: ffffffff8157d78e RDI: 0000000000000005 RBP: ffff8880405205c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b601b R12: 0000000000000000 R13: ffff888040520658 R14: ffff88806ce3d2c0 R15: ffff8880405205c8 FS: 00007f223119c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a2af638e0 CR3: 0000000017768000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x3b/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:refill_obj_stock+0x319/0x680 Code: 02 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 c2 78 7a 81 4c 89 ef e8 f7 b3 af ff 48 83 3c 24 00 74 06 e8 7b 85 d2 ff fb 4d 85 f6 <74> 08 4c 89 f7 e8 ad 9e ff ff 45 85 ff 0f 85 8e 00 00 00 48 83 c4 RSP: 0018:ffff88806ce09db8 EFLAGS: 00000246 RAX: 00000000000008cc RBX: ffff88806ce34be0 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffff88806ce34c08 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800efc2500 R13: ffff88806ce34be0 R14: 0000000000000000 R15: 0000000000000000 kmem_cache_free+0x49d/0x610 rcu_core+0x7e2/0x2080 __do_softirq+0x1c3/0x8f5 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x5/0x20 sysvec_apic_timer_interrupt+0x8e/0xc0 asm_sysvec_apic_timer_interrupt+0x16/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ea 7d 02 fd 48 89 ef e8 52 f3 02 fd 80 e7 02 74 06 e8 68 4f 25 fd fb bf 01 00 00 00 9d 97 f8 fc 65 8b 05 76 bf da 7b 85 c0 74 07 5b 5d e9 2b 8c 38 RSP: 0018:ffff888018997a10 EFLAGS: 00000202 RAX: 000000000000070b RBX: 0000000000000246 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffffffff854cf840 R08: 0000000000000001 R09: 0000000000000001 R10: fffffbfff0a99f08 R11: 0000000000000001 R12: ffff88800843d280 R13: 0000000000000dc0 R14: 0000000000000dc0 R15: 0000000000000000 kmem_cache_alloc+0x235/0x3e0 security_file_alloc+0x34/0x170 __alloc_file+0xb6/0x240 alloc_empty_file+0x6d/0x170 path_openat+0xd4/0x27b0 do_filp_open+0x1b6/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2233bfaa04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f223119c0b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f2233d5b020 RCX: 00007f2233bfaa04 RDX: 0000000000000000 RSI: 00007f2233ca0f82 RDI: 00000000ffffff9c RBP: 00007f2233ca0f82 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffd937718bf R14: 00007f223119c300 R15: 0000000000022000 irq event stamp: 2253 hardirqs last enabled at (2252): [] refill_obj_stock+0x315/0x680 hardirqs last disabled at (2253): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1680): [] hci_sock_ioctl+0x2ae/0x860 softirqs last disabled at (1805): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4016 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 Modules linked in: CPU: 0 PID: 4016 Comm: syz-executor.3 Tainted: G W 6.0.0-next-20221006 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_group_detach+0x9c7/0x12f0 Code: ff 0f 0b e9 a9 f8 ff ff e8 56 45 ee ff 65 8b 1d 1b 9e aa 7e 31 ff 89 de e8 f6 41 ee ff 85 db 0f 84 86 04 00 00 e8 39 45 ee ff <0f> 0b e9 0e fa ff ff e8 2d 45 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 RSP: 0018:ffff88806ce09b58 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 RDX: ffff888021588000 RSI: ffffffff8157d7b7 RDI: 0000000000000005 RBP: ffff8880405205c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b601b R12: ffff8880405205c8 R13: ffff8880405205c8 R14: ffff88806ce3d2c0 R15: ffff8880405205c8 FS: 00007f223119c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a2af638e0 CR3: 0000000017768000 CR4: 0000000000350ef0 Call Trace: __perf_remove_from_context+0x71e/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x3b/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:refill_obj_stock+0x319/0x680 Code: 02 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 c2 78 7a 81 4c 89 ef e8 f7 b3 af ff 48 83 3c 24 00 74 06 e8 7b 85 d2 ff fb 4d 85 f6 <74> 08 4c 89 f7 e8 ad 9e ff ff 45 85 ff 0f 85 8e 00 00 00 48 83 c4 RSP: 0018:ffff88806ce09db8 EFLAGS: 00000246 RAX: 00000000000008cc RBX: ffff88806ce34be0 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffff88806ce34c08 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800efc2500 R13: ffff88806ce34be0 R14: 0000000000000000 R15: 0000000000000000 kmem_cache_free+0x49d/0x610 rcu_core+0x7e2/0x2080 __do_softirq+0x1c3/0x8f5 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x5/0x20 sysvec_apic_timer_interrupt+0x8e/0xc0 asm_sysvec_apic_timer_interrupt+0x16/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ea 7d 02 fd 48 89 ef e8 52 f3 02 fd 80 e7 02 74 06 e8 68 4f 25 fd fb bf 01 00 00 00 9d 97 f8 fc 65 8b 05 76 bf da 7b 85 c0 74 07 5b 5d e9 2b 8c 38 RSP: 0018:ffff888018997a10 EFLAGS: 00000202 RAX: 000000000000070b RBX: 0000000000000246 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffffffff854cf840 R08: 0000000000000001 R09: 0000000000000001 R10: fffffbfff0a99f08 R11: 0000000000000001 R12: ffff88800843d280 R13: 0000000000000dc0 R14: 0000000000000dc0 R15: 0000000000000000 kmem_cache_alloc+0x235/0x3e0 security_file_alloc+0x34/0x170 __alloc_file+0xb6/0x240 alloc_empty_file+0x6d/0x170 path_openat+0xd4/0x27b0 do_filp_open+0x1b6/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2233bfaa04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f223119c0b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f2233d5b020 RCX: 00007f2233bfaa04 RDX: 0000000000000000 RSI: 00007f2233ca0f82 RDI: 00000000ffffff9c RBP: 00007f2233ca0f82 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffd937718bf R14: 00007f223119c300 R15: 0000000000022000 irq event stamp: 2253 hardirqs last enabled at (2252): [] refill_obj_stock+0x315/0x680 hardirqs last disabled at (2253): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1680): [] hci_sock_ioctl+0x2ae/0x860 softirqs last disabled at (1805): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4016 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 Modules linked in: CPU: 0 PID: 4016 Comm: syz-executor.3 Tainted: G W 6.0.0-next-20221006 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 Code: 5e 41 5f e9 dd e6 f0 ff e8 d8 e6 f0 ff 65 8b 1d 9d 3f ad 7e 31 ff 89 de e8 78 e3 f0 ff 85 db 0f 84 d3 02 00 00 e8 bb e6 f0 ff <0f> 0b eb 97 e8 b2 e6 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff88806ce09b50 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 RDX: ffff888021588000 RSI: ffffffff81553635 RDI: 0000000000000005 RBP: ffff8880405205c8 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865b601b R12: 0000000000000000 R13: ffff888040520670 R14: 0000000000000001 R15: 0000000000000001 FS: 00007f223119c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a2af638e0 CR3: 0000000017768000 CR4: 0000000000350ef0 Call Trace: list_del_event+0x524/0x860 __perf_remove_from_context+0xd2/0xb20 event_function+0x297/0x3d0 remote_function+0x125/0x1b0 __flush_smp_call_function_queue+0x1df/0x5a0 __sysvec_call_function_single+0x92/0x3a0 sysvec_call_function_single+0x3b/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:refill_obj_stock+0x319/0x680 Code: 02 00 00 49 c7 45 28 00 00 00 00 48 c7 c6 c2 78 7a 81 4c 89 ef e8 f7 b3 af ff 48 83 3c 24 00 74 06 e8 7b 85 d2 ff fb 4d 85 f6 <74> 08 4c 89 f7 e8 ad 9e ff ff 45 85 ff 0f 85 8e 00 00 00 48 83 c4 RSP: 0018:ffff88806ce09db8 EFLAGS: 00000246 RAX: 00000000000008cc RBX: ffff88806ce34be0 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffff88806ce34c08 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800efc2500 R13: ffff88806ce34be0 R14: 0000000000000000 R15: 0000000000000000 kmem_cache_free+0x49d/0x610 rcu_core+0x7e2/0x2080 __do_softirq+0x1c3/0x8f5 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x5/0x20 sysvec_apic_timer_interrupt+0x8e/0xc0 asm_sysvec_apic_timer_interrupt+0x16/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ea 7d 02 fd 48 89 ef e8 52 f3 02 fd 80 e7 02 74 06 e8 68 4f 25 fd fb bf 01 00 00 00 9d 97 f8 fc 65 8b 05 76 bf da 7b 85 c0 74 07 5b 5d e9 2b 8c 38 RSP: 0018:ffff888018997a10 EFLAGS: 00000202 RAX: 000000000000070b RBX: 0000000000000246 RCX: 1ffffffff0b60b69 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffffffff854cf840 R08: 0000000000000001 R09: 0000000000000001 R10: fffffbfff0a99f08 R11: 0000000000000001 R12: ffff88800843d280 R13: 0000000000000dc0 R14: 0000000000000dc0 R15: 0000000000000000 kmem_cache_alloc+0x235/0x3e0 security_file_alloc+0x34/0x170 __alloc_file+0xb6/0x240 alloc_empty_file+0x6d/0x170 path_openat+0xd4/0x27b0 do_filp_open+0x1b6/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2233bfaa04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f223119c0b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f2233d5b020 RCX: 00007f2233bfaa04 RDX: 0000000000000000 RSI: 00007f2233ca0f82 RDI: 00000000ffffff9c RBP: 00007f2233ca0f82 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffd937718bf R14: 00007f223119c300 R15: 0000000000022000 irq event stamp: 2253 hardirqs last enabled at (2252): [] refill_obj_stock+0x315/0x680 hardirqs last disabled at (2253): [] sysvec_call_function_single+0xb/0xc0 softirqs last enabled at (1680): [] hci_sock_ioctl+0x2ae/0x860 softirqs last disabled at (1805): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- audit: type=1400 audit(1665125944.820:9): avc: denied { write } for pid=4004 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 ---------------- Code disassembly (best guess): 0: c1 ea 03 shr $0x3,%edx 3: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 7: 0f 85 d6 05 00 00 jne 0x5e3 d: 48 8d 7d 20 lea 0x20(%rbp),%rdi 11: 48 89 75 18 mov %rsi,0x18(%rbp) 15: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 1c: fc ff df 1f: 48 89 fa mov %rdi,%rdx 22: 48 c1 ea 03 shr $0x3,%rdx 26: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax * 2a: 84 c0 test %al,%al <-- trapping instruction 2c: 74 06 je 0x34 2e: 0f 8e 8b 04 00 00 jle 0x4bf 34: 48 8d 7d 21 lea 0x21(%rbp),%rdi 38: 44 88 4d 20 mov %r9b,0x20(%rbp) 3c: 48 rex.W 3d: b8 .byte 0xb8