audit: type=1400 audit(1663329273.414:8): avc: denied { kernel } for pid=3743 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3745 at arch/x86/events/core.c:1200 collect_events+0x500/0x870
Modules linked in:
CPU: 0 PID: 3745 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:collect_events+0x500/0x870
Code: 85 db 0f 85 4d fe ff ff e8 ad 65 45 00 65 8b 1d 22 c4 01 7f 31 ff 89 de e8 4d 62 45 00 85 db 0f 84 4c 02 00 00 e8 90 65 45 00 <0f> 0b e9 24 fe ff ff e8 84 65 45 00 49 8d bc 24 48 13 00 00 48 b8
RSP: 0018:ffff88803ec17bd8 EFLAGS: 00010216
RAX: 0000000000001b94 RBX: 0000000000000001 RCX: ffffc900045ea000
RDX: 0000000000040000 RSI: ffffffff8100b1b0 RDI: 0000000000000005
RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803afe4000
R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000001
FS: 00007f2341d7e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe791e47ec8 CR3: 0000000009a72000 CR4: 0000000000350ef0
Call Trace:
x86_pmu_event_init+0x4b9/0xbc0
perf_try_init_event+0x202/0x570
perf_event_alloc.part.0+0xff8/0x3bc0
__do_sys_perf_event_open+0x4c6/0x32c0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2344808b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2341d7e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f234491bf60 RCX: 00007f2344808b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280
RBP: 00007f2344862f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdc09f1e7f R14: 00007f2341d7e300 R15: 0000000000022000
irq event stamp: 1465
hardirqs last enabled at (1477): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (1488): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (1158): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (1153): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3756 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0
Modules linked in:
CPU: 0 PID: 3756 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_detach+0x99e/0x12f0
Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 96 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89
RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
RAX: 0000000080010002 RBX: ffff888008660000 RCX: 0000000000000000
RDX: ffff88800ff99ac0 RSI: ffffffff8157c03e RDI: 0000000000000005
RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000
R13: ffff888008660090 R14: ffff88806ce3d100 R15: ffff888008660000
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc78cc506f4 CR3: 000000003b40a000 CR4: 0000000000350ef0
Call Trace:
__perf_remove_from_context+0x71e/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:___slab_alloc+0x8b7/0x10d0
Code: 00 00 48 c7 c6 57 1d 78 81 48 89 df e8 22 1a b2 ff 48 f7 44 24 10 00 02 00 00 74 06 e8 22 d2 d4 ff fb 48 8b 84 24 98 00 00 00 <65> 48 2b 04 25 28 00 00 00 0f 85 f6 07 00 00 48 81 c4 a0 00 00 00
RSP: 0018:ffff88800ff379a8 EFLAGS: 00000206
RAX: 1d48ef6286c1d600 RBX: ffff88806ce3c2e0 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff86ccb7ef
R10: fffffbfff0d996fd R11: 0000000000000001 R12: 000000000003c2e0
R13: ffff88800e449290 R14: ffff88800ff99ac0 R15: ffffea0000391200
__slab_alloc.constprop.0+0x45/0x90
kmem_cache_alloc+0x2f1/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_bulk+0x3fe/0x7a0
mas_alloc_nodes+0x2ff/0x800
mas_preallocate+0x1bb/0x360
mmap_region+0x774/0x1a00
do_mmap+0x828/0xf40
vm_mmap_pgoff+0x1af/0x270
ksys_mmap_pgoff+0x3d0/0x4f0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fec9278fd82
Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
RSP: 002b:00007ffcf467a728 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007fec9278fd82
RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007fec92266000
RBP: 00007fec92266000 R08: 0000000000000000 R09: 0000000000001000
R10: 0000000000000812 R11: 0000000000000206 R12: 00007fec9276f470
R13: 00007ffcf467a740 R14: 00007ffcf467a770 R15: 00007ffcf467aad0
irq event stamp: 10622
hardirqs last enabled at (10621): [] ___slab_alloc+0x8ae/0x10d0
hardirqs last disabled at (10622): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (10302): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (10247): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3756 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0
Modules linked in:
CPU: 0 PID: 3756 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_group_detach+0x9c7/0x12f0
Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00
RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88800ff99ac0 RSI: ffffffff8157c067 RDI: 0000000000000005
RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100
R13: ffff888008660000 R14: ffff888008660030 R15: ffff888008660000
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc78cc506f4 CR3: 000000003b40a000 CR4: 0000000000350ef0
Call Trace:
__perf_remove_from_context+0x71e/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:___slab_alloc+0x8b7/0x10d0
Code: 00 00 48 c7 c6 57 1d 78 81 48 89 df e8 22 1a b2 ff 48 f7 44 24 10 00 02 00 00 74 06 e8 22 d2 d4 ff fb 48 8b 84 24 98 00 00 00 <65> 48 2b 04 25 28 00 00 00 0f 85 f6 07 00 00 48 81 c4 a0 00 00 00
RSP: 0018:ffff88800ff379a8 EFLAGS: 00000206
RAX: 1d48ef6286c1d600 RBX: ffff88806ce3c2e0 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff86ccb7ef
R10: fffffbfff0d996fd R11: 0000000000000001 R12: 000000000003c2e0
R13: ffff88800e449290 R14: ffff88800ff99ac0 R15: ffffea0000391200
__slab_alloc.constprop.0+0x45/0x90
kmem_cache_alloc+0x2f1/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_bulk+0x3fe/0x7a0
mas_alloc_nodes+0x2ff/0x800
mas_preallocate+0x1bb/0x360
mmap_region+0x774/0x1a00
do_mmap+0x828/0xf40
vm_mmap_pgoff+0x1af/0x270
ksys_mmap_pgoff+0x3d0/0x4f0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fec9278fd82
Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
RSP: 002b:00007ffcf467a728 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007fec9278fd82
RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007fec92266000
RBP: 00007fec92266000 R08: 0000000000000000 R09: 0000000000001000
R10: 0000000000000812 R11: 0000000000000206 R12: 00007fec9276f470
R13: 00007ffcf467a740 R14: 00007ffcf467a770 R15: 00007ffcf467aad0
irq event stamp: 10622
hardirqs last enabled at (10621): [] ___slab_alloc+0x8ae/0x10d0
hardirqs last disabled at (10622): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (10302): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (10247): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3756 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0
Modules linked in:
CPU: 0 PID: 3756 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0
Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d cd 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff
RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046
RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88800ff99ac0 RSI: ffffffff81555205 RDI: 0000000000000005
RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000
R13: ffff8880086600a8 R14: 0000000000000001 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc78cc506f4 CR3: 000000003b40a000 CR4: 0000000000350ef0
Call Trace:
list_del_event+0x524/0x860
__perf_remove_from_context+0xd2/0xb20
event_function+0x297/0x3d0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:___slab_alloc+0x8b7/0x10d0
Code: 00 00 48 c7 c6 57 1d 78 81 48 89 df e8 22 1a b2 ff 48 f7 44 24 10 00 02 00 00 74 06 e8 22 d2 d4 ff fb 48 8b 84 24 98 00 00 00 <65> 48 2b 04 25 28 00 00 00 0f 85 f6 07 00 00 48 81 c4 a0 00 00 00
RSP: 0018:ffff88800ff379a8 EFLAGS: 00000206
RAX: 1d48ef6286c1d600 RBX: ffff88806ce3c2e0 RCX: ffffffff812999ff
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff86ccb7ef
R10: fffffbfff0d996fd R11: 0000000000000001 R12: 000000000003c2e0
R13: ffff88800e449290 R14: ffff88800ff99ac0 R15: ffffea0000391200
__slab_alloc.constprop.0+0x45/0x90
kmem_cache_alloc+0x2f1/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_bulk+0x3fe/0x7a0
mas_alloc_nodes+0x2ff/0x800
mas_preallocate+0x1bb/0x360
mmap_region+0x774/0x1a00
do_mmap+0x828/0xf40
vm_mmap_pgoff+0x1af/0x270
ksys_mmap_pgoff+0x3d0/0x4f0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fec9278fd82
Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
RSP: 002b:00007ffcf467a728 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007fec9278fd82
RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007fec92266000
RBP: 00007fec92266000 R08: 0000000000000000 R09: 0000000000001000
R10: 0000000000000812 R11: 0000000000000206 R12: 00007fec9276f470
R13: 00007ffcf467a740 R14: 00007ffcf467a770 R15: 00007ffcf467aad0
irq event stamp: 10622
hardirqs last enabled at (10621): [] ___slab_alloc+0x8ae/0x10d0
hardirqs last disabled at (10622): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (10302): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (10247): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
======================================================
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 48 c7 c6 57 1d 78 81 mov $0xffffffff81781d57,%rsi
9: 48 89 df mov %rbx,%rdi
c: e8 22 1a b2 ff callq 0xffb21a33
11: 48 f7 44 24 10 00 02 testq $0x200,0x10(%rsp)
18: 00 00
1a: 74 06 je 0x22
1c: e8 22 d2 d4 ff callq 0xffd4d243
21: fb sti
22: 48 8b 84 24 98 00 00 mov 0x98(%rsp),%rax
29: 00
* 2a: 65 48 2b 04 25 28 00 sub %gs:0x28,%rax <-- trapping instruction
31: 00 00
33: 0f 85 f6 07 00 00 jne 0x82f
39: 48 81 c4 a0 00 00 00 add $0xa0,%rsp