audit: type=1400 audit(1664423107.634:8): avc: denied { kernel } for pid=3704 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3700 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
Modules linked in:
CPU: 0 PID: 3700 Comm: modprobe Not tainted 6.0.0-rc7-next-20220928 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:event_filter_match+0x422/0x660
Code: 00 00 00 e9 7c fc ff ff e8 bb 2e f1 ff 65 8b 2d d0 97 ad 7e 31 ff 89 ee e8 5b 2b f1 ff 85 ed 0f 84 ef 00 00 00 e8 9e 2e f1 ff <0f> 0b eb 9f e8 c5 a5 23 00 e9 17 fc ff ff e8 8b 2e f1 ff 48 8d 7b
RSP: 0018:ffff88806ce09b28 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88801bce8000 RCX: 0000000000000100
RDX: ffff88803f6b0000 RSI: ffffffff8154de02 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88801bce8220
R13: 0000000000000000 R14: ffff88801bce80a8 R15: ffff88801bce8220
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f53456d48e0 CR3: 000000003f45e000 CR4: 0000000000350ef0
Call Trace:
merge_sched_in+0x107/0x1110
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x3b/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:__do_softirq+0x183/0x8f5
Code: 0a 00 00 00 48 89 44 24 18 48 c7 c7 e0 cf 85 84 e8 62 0f c5 ff 65 66 c7 05 48 71 a3 7b 00 00 e8 13 e2 ec fc fb bb ff ff ff ff <41> 0f bc de 83 c3 01 0f 84 9c 02 00 00 48 c7 c5 c0 a0 20 85 e9 99
RSP: 0018:ffff88806ce09f70 EFLAGS: 00000206
RAX: 00000000000018f6 RBX: 00000000ffffffff RCX: ffffffff81297e7f
RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000
RBP: ffff888008638000 R08: 0000000000000001 R09: ffffffff86cd37ef
R10: fffffbfff0d9a6fd R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
__irq_exit_rcu+0x11b/0x180
irq_exit_rcu+0x5/0x20
sysvec_apic_timer_interrupt+0x8e/0xc0
asm_sysvec_apic_timer_interrupt+0x16/0x20
RIP: 0010:lock_acquire+0x1db/0x530
Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffff8880187bf400 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff110030f7e82 RCX: 0000000075d02bfc
RDX: 1ffff11007ed612e RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7
R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000
__is_insn_slot_addr+0x3d/0x250
kernel_text_address+0x44/0xb0
__kernel_text_address+0x9/0x40
unwind_get_return_address+0x55/0xa0
arch_stack_walk+0x99/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
__kasan_slab_alloc+0x58/0x70
kmem_cache_alloc+0x1a9/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_bulk+0x414/0x7d0
mas_alloc_nodes+0x2ff/0x800
mas_preallocate+0x1bb/0x360
__vma_adjust+0x18a/0x1aa0
__split_vma+0x4c3/0x5d0
split_vma+0x9f/0xe0
mprotect_fixup+0x691/0x8c0
do_mprotect_pkey+0x6fb/0xa70
__x64_sys_mprotect+0x74/0xb0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f53459d8e27
Code: 44 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d 31 03 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 11 03 01 00 f7 d8 89 01 48 83
RSP: 002b:00007ffdeba173a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f53459d8e27
RDX: 0000000000000000 RSI: 0000000000196000 RDI: 00007f53454fb000
RBP: 00007ffdeba17740 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000802 R11: 0000000000000206 R12: 00007f53459b7a20
R13: 00007ffdeba173b0 R14: 0000000000000000 R15: 00007ffdeba177d0
irq event stamp: 6391
hardirqs last enabled at (6390): [] __do_softirq+0x17d/0x8f5
hardirqs last disabled at (6391): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (6024): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (6389): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3700 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
Modules linked in:
CPU: 0 PID: 3700 Comm: modprobe Tainted: G W 6.0.0-rc7-next-20220928 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:merge_sched_in+0xadb/0x1110
Code: ff ff e8 48 09 ef ff 65 8b 05 5d 72 ab 7e 31 ff 89 c6 89 04 24 e8 e5 05 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 25 09 ef ff <0f> 0b e9 c4 fb ff ff e8 19 09 ef ff 4c 89 e8 48 05 18 01 00 00 e9
RSP: 0018:ffff88806ce09b68 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88806ce3d140 RCX: 0000000000000100
RDX: ffff88803f6b0000 RSI: ffffffff8157037b RDI: 0000000000000005
RBP: ffff88801bce8000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140
R13: ffff88806ce00000 R14: ffff88801bce80a8 R15: ffff88801bce8220
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f53456d48e0 CR3: 000000003f45e000 CR4: 0000000000350ef0
Call Trace:
visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
ctx_sched_in+0x2e6/0x770
perf_event_sched_in+0x75/0x80
ctx_resched+0x1ce/0x390
__perf_install_in_context+0x285/0x9c0
remote_function+0x125/0x1b0
__flush_smp_call_function_queue+0x1df/0x5a0
__sysvec_call_function_single+0x92/0x3a0
sysvec_call_function_single+0x3b/0xc0
asm_sysvec_call_function_single+0x16/0x20
RIP: 0010:__do_softirq+0x183/0x8f5
Code: 0a 00 00 00 48 89 44 24 18 48 c7 c7 e0 cf 85 84 e8 62 0f c5 ff 65 66 c7 05 48 71 a3 7b 00 00 e8 13 e2 ec fc fb bb ff ff ff ff <41> 0f bc de 83 c3 01 0f 84 9c 02 00 00 48 c7 c5 c0 a0 20 85 e9 99
RSP: 0018:ffff88806ce09f70 EFLAGS: 00000206
RAX: 00000000000018f6 RBX: 00000000ffffffff RCX: ffffffff81297e7f
RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000
RBP: ffff888008638000 R08: 0000000000000001 R09: ffffffff86cd37ef
R10: fffffbfff0d9a6fd R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
__irq_exit_rcu+0x11b/0x180
irq_exit_rcu+0x5/0x20
sysvec_apic_timer_interrupt+0x8e/0xc0
asm_sysvec_apic_timer_interrupt+0x16/0x20
RIP: 0010:lock_acquire+0x1db/0x530
Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffff8880187bf400 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff110030f7e82 RCX: 0000000075d02bfc
RDX: 1ffff11007ed612e RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7
R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000
__is_insn_slot_addr+0x3d/0x250
kernel_text_address+0x44/0xb0
__kernel_text_address+0x9/0x40
unwind_get_return_address+0x55/0xa0
arch_stack_walk+0x99/0xf0
stack_trace_save+0x8c/0xc0
kasan_save_stack+0x1e/0x40
kasan_set_track+0x21/0x30
__kasan_slab_alloc+0x58/0x70
kmem_cache_alloc+0x1a9/0x3e0
__create_object+0x3d/0xc10
kmem_cache_alloc_bulk+0x414/0x7d0
mas_alloc_nodes+0x2ff/0x800
mas_preallocate+0x1bb/0x360
__vma_adjust+0x18a/0x1aa0
__split_vma+0x4c3/0x5d0
split_vma+0x9f/0xe0
mprotect_fixup+0x691/0x8c0
do_mprotect_pkey+0x6fb/0xa70
__x64_sys_mprotect+0x74/0xb0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f53459d8e27
Code: 44 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d 31 03 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 11 03 01 00 f7 d8 89 01 48 83
RSP: 002b:00007ffdeba173a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f53459d8e27
RDX: 0000000000000000 RSI: 0000000000196000 RDI: 00007f53454fb000
RBP: 00007ffdeba17740 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000802 R11: 0000000000000206 R12: 00007f53459b7a20
R13: 00007ffdeba173b0 R14: 0000000000000000 R15: 00007ffdeba177d0
irq event stamp: 6391
hardirqs last enabled at (6390): [] __do_softirq+0x17d/0x8f5
hardirqs last disabled at (6391): [] sysvec_call_function_single+0xb/0xc0
softirqs last enabled at (6024): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (6389): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
======================================================
----------------
Code disassembly (best guess):
0: 0a 00 or (%rax),%al
2: 00 00 add %al,(%rax)
4: 48 89 44 24 18 mov %rax,0x18(%rsp)
9: 48 c7 c7 e0 cf 85 84 mov $0xffffffff8485cfe0,%rdi
10: e8 62 0f c5 ff callq 0xffc50f77
15: 65 66 c7 05 48 71 a3 movw $0x0,%gs:0x7ba37148(%rip) # 0x7ba37167
1c: 7b 00 00
1f: e8 13 e2 ec fc callq 0xfcece237
24: fb sti
25: bb ff ff ff ff mov $0xffffffff,%ebx
* 2a: 41 0f bc de bsf %r14d,%ebx <-- trapping instruction
2e: 83 c3 01 add $0x1,%ebx
31: 0f 84 9c 02 00 00 je 0x2d3
37: 48 c7 c5 c0 a0 20 85 mov $0xffffffff8520a0c0,%rbp
3e: e9 .byte 0xe9
3f: 99 cltd