audit: type=1400 audit(1664337511.824:8): avc: denied { kernel } for pid=3955 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3958 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 3958 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220927 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 bb 2e f1 ff 65 8b 2d 30 94 ad 7e 31 ff 89 ee e8 5b 2b f1 ff 85 ed 0f 84 ef 00 00 00 e8 9e 2e f1 ff <0f> 0b eb 9f e8 45 a5 23 00 e9 17 fc ff ff e8 8b 2e f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
RAX: 0000000080010001 RBX: ffff88803cca8b90 RCX: 0000000000000000
RDX: ffff88800894b580 RSI: ffffffff8154e1a2 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803cca8db0
R13: 0000000000000000 R14: ffff88803cca8c38 R15: ffff88803cca8db0
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560aced6c2b0 CR3: 000000003e298000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:kasan_addr_to_slab+0x47/0xa0
Code: 80 48 01 fb 72 6d 48 c7 c7 00 00 00 80 48 2b 3d 5f 48 9d 03 48 01 fb 48 c1 eb 0c 48 c1 e3 06 48 03 1d 3d 48 9d 03 48 8b 53 08 <48> 89 d8 f6 c2 01 75 3b 66 90 48 8b 10 5b 80 e6 02 ba 00 00 00 00
RSP: 0018:ffff88803e5976b8 EFLAGS: 00000282
RAX: 0000000000000000 RBX: ffffea000035d740 RCX: 0000000000000000
RDX: ffffea000035d701 RSI: ffffffff81129e3e RDI: 0000777f80000000
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000001 R12: ffffffff817bc0a0
R13: ffffffff81127dc4 R14: 0000001b2ed1ffff R15: ffff888007c4fa00
__kasan_record_aux_stack+0xe/0xb0
call_rcu+0x6a/0xa30
kmem_cache_free+0xbd/0x610
___pmd_free_tlb+0xa4/0x1f0
free_pgd_range+0xa05/0x1330
free_pgtables+0x2d2/0x420
exit_mmap+0x1b4/0x680
mmput+0xd1/0x390
do_exit+0xa2e/0x27f0
do_group_exit+0xd0/0x2a0
get_signal+0x2195/0x22d0
arch_do_signal_or_restart+0x89/0x1be0
exit_to_user_mode_prepare+0x131/0x1a0
syscall_exit_to_user_mode+0x19/0x40
do_syscall_64+0x48/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f3f0b6eeb19
Code: Unable to access opcode bytes at 0x7f3f0b6eeaef.
RSP: 002b:00007f3f08c43218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f3f0b802028 RCX: 00007f3f0b6eeb19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f0b802028
RBP: 00007f3f0b802020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f0b80202c
R13: 00007ffc7f89d30f R14: 00007f3f08c43300 R15: 0000000000022000
irq event stamp: 1450
hardirqs last enabled at (1449): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (1450): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (744): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (661): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3958 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 3958 Comm: syz-executor.0 Tainted: G W 6.0.0-rc7-next-20220927 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 e8 08 ef ff 65 8b 05 5d 6e ab 7e 31 ff 89 c6 89 04 24 e8 85 05 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 c5 08 ef ff <0f> 0b e9 c4 fb ff ff e8 b9 08 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
RAX: 0000000080010001 RBX: ffff88806ce3d140 RCX: 0000000000000000
RDX: ffff88800894b580 RSI: ffffffff8157077b RDI: 0000000000000005
RBP: ffff88803cca8b90 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140
R13: ffff88806ce00000 R14: ffff88803cca8c38 R15: ffff88803cca8db0
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560aced6c2b0 CR3: 000000003e298000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x89/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:kasan_addr_to_slab+0x47/0xa0
Code: 80 48 01 fb 72 6d 48 c7 c7 00 00 00 80 48 2b 3d 5f 48 9d 03 48 01 fb 48 c1 eb 0c 48 c1 e3 06 48 03 1d 3d 48 9d 03 48 8b 53 08 <48> 89 d8 f6 c2 01 75 3b 66 90 48 8b 10 5b 80 e6 02 ba 00 00 00 00
RSP: 0018:ffff88803e5976b8 EFLAGS: 00000282
RAX: 0000000000000000 RBX: ffffea000035d740 RCX: 0000000000000000
RDX: ffffea000035d701 RSI: ffffffff81129e3e RDI: 0000777f80000000
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000001 R12: ffffffff817bc0a0
R13: ffffffff81127dc4 R14: 0000001b2ed1ffff R15: ffff888007c4fa00
__kasan_record_aux_stack+0xe/0xb0
call_rcu+0x6a/0xa30
kmem_cache_free+0xbd/0x610
___pmd_free_tlb+0xa4/0x1f0
free_pgd_range+0xa05/0x1330
free_pgtables+0x2d2/0x420
exit_mmap+0x1b4/0x680
mmput+0xd1/0x390
do_exit+0xa2e/0x27f0
do_group_exit+0xd0/0x2a0
get_signal+0x2195/0x22d0
arch_do_signal_or_restart+0x89/0x1be0
exit_to_user_mode_prepare+0x131/0x1a0
syscall_exit_to_user_mode+0x19/0x40
do_syscall_64+0x48/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f3f0b6eeb19
Code: Unable to access opcode bytes at 0x7f3f0b6eeaef.
RSP: 002b:00007f3f08c43218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f3f0b802028 RCX: 00007f3f0b6eeb19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f0b802028
RBP: 00007f3f0b802020 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f0b80202c
R13: 00007ffc7f89d30f R14: 00007f3f08c43300 R15: 0000000000022000
irq event stamp: 1450
hardirqs last enabled at (1449): [] _raw_spin_unlock_irqrestore+0x28/0x60
hardirqs last disabled at (1450): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (744): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (661): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
audit: type=1400 audit(1664337512.124:9): avc: denied { write } for pid=3959 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
Bluetooth: MGMT ver 1.22
----------------
Code disassembly (best guess):
0: 80 48 01 fb orb $0xfb,0x1(%rax)
4: 72 6d jb 0x73
6: 48 c7 c7 00 00 00 80 mov $0xffffffff80000000,%rdi
d: 48 2b 3d 5f 48 9d 03 sub 0x39d485f(%rip),%rdi # 0x39d4873
14: 48 01 fb add %rdi,%rbx
17: 48 c1 eb 0c shr $0xc,%rbx
1b: 48 c1 e3 06 shl $0x6,%rbx
1f: 48 03 1d 3d 48 9d 03 add 0x39d483d(%rip),%rbx # 0x39d4863
26: 48 8b 53 08 mov 0x8(%rbx),%rdx
* 2a: 48 89 d8 mov %rbx,%rax <-- trapping instruction
2d: f6 c2 01 test $0x1,%dl
30: 75 3b jne 0x6d
32: 66 90 xchg %ax,%ax
34: 48 8b 10 mov (%rax),%rdx
37: 5b pop %rbx
38: 80 e6 02 and $0x2,%dh
3b: ba 00 00 00 00 mov $0x0,%edx