lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Tue, 11 Apr 2017 09:38:28 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Sebastian Andrzej Siewior <bigeasy@...utronix.de>
Cc:     linux-kernel@...r.kernel.org,
        Sebastian Andrzej Siewior <bigeasy@...utronix.de>,
        Peter Zijlstra <peterz@...radead.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        Mike Galbraith <efault@....de>, Ingo Molnar <mingo@...e.hu>,
        "Rafael J . Wysocki" <rjw@...ysocki.net>, lkp@...org
Subject: [lkp-robot] [kernel]  c1f943ee40: kernel_BUG_at_kernel/smpboot.c


FYI, we noticed the following commit:

commit: c1f943ee4029d96b2841eb9a1bcec4b3dab6c67e ("kernel: sched: Provide a pointer to the valid CPU mask")
url: https://github.com/0day-ci/linux/commits/Sebastian-Andrzej-Siewior/kernel-sched-Provide-a-pointer-to-the-valid-CPU-mask/20170405-093637


in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -smp 2 -m 420M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 89970a04d7 | c1f943ee40 |
+------------------------------------------+------------+------------+
| boot_successes                           | 12         | 2          |
| boot_failures                            | 0          | 10         |
| kernel_BUG_at_kernel/smpboot.c           | 0          | 10         |
| invalid_opcode:#[##]                     | 0          | 10         |
| EIP:smpboot_thread_fn                    | 0          | 10         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 10         |
+------------------------------------------+------------+------------+



[    0.302283] kernel BUG at kernel/smpboot.c:137!
[    0.302283] kernel BUG at kernel/smpboot.c:137!
[    0.304242] invalid opcode: 0000 [#1] PREEMPT SMP
[    0.304242] invalid opcode: 0000 [#1] PREEMPT SMP
[    0.306065] Modules linked in:
[    0.306065] Modules linked in:
[    0.307436] CPU: 0 PID: 14 Comm: cpuhp/1 Not tainted 4.11.0-rc4-00065-gc1f943e #74
[    0.307436] CPU: 0 PID: 14 Comm: cpuhp/1 Not tainted 4.11.0-rc4-00065-gc1f943e #74
[    0.310000] task: 57520000 task.stack: 5751a000
[    0.310000] task: 57520000 task.stack: 5751a000
[    0.310000] EIP: smpboot_thread_fn+0x380/0x3e0
[    0.310000] EIP: smpboot_thread_fn+0x380/0x3e0
[    0.310000] EFLAGS: 00210202 CPU: 0
[    0.310000] EFLAGS: 00210202 CPU: 0
[    0.310000] EAX: 587bd950 EBX: 57520000 ECX: 00000000 EDX: 00000001
[    0.310000] EAX: 587bd950 EBX: 57520000 ECX: 00000000 EDX: 00000001
[    0.310000] ESI: 00000000 EDI: 00000001 EBP: 5751bf80 ESP: 5751bf64
[    0.310000] ESI: 00000000 EDI: 00000001 EBP: 5751bf80 ESP: 5751bf64
[    0.310000]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[    0.310000]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[    0.310000] CR0: 80050033 CR2: ffffffff CR3: 189fa000 CR4: 00000690
[    0.310000] CR0: 80050033 CR2: ffffffff CR3: 189fa000 CR4: 00000690
[    0.310000] Call Trace:
[    0.310000] Call Trace:
[    0.310000]  kthread+0xdf/0x110
[    0.310000]  kthread+0xdf/0x110
[    0.310000]  ? sort_range+0x30/0x30
[    0.310000]  ? sort_range+0x30/0x30
[    0.310000]  ? kthread_create_on_node+0x30/0x30
[    0.310000]  ? kthread_create_on_node+0x30/0x30
[    0.310000]  ret_from_fork+0x21/0x30
[    0.310000]  ret_from_fork+0x21/0x30
[    0.310000] Code: 8b 50 04 85 d2 74 10 8b 00 31 d2 0f a3 05 50 dc 81 58 0f 92 c2 ff d1 8b 45 ec e8 bc 67 17 00 83 c4 10 31 c0 5b 5e 5f 5d c3 66 90 <0f> 0b 8d b6 00 00 00 00 b8 01 00 00 00 e8 3e 41 00 00 e8 a9 de
[    0.310000] Code: 8b 50 04 85 d2 74 10 8b 00 31 d2 0f a3 05 50 dc 81 58 0f 92 c2 ff d1 8b 45 ec e8 bc 67 17 00 83 c4 10 31 c0 5b 5e 5f 5d c3 66 90 <0f> 0b 8d b6 00 00 00 00 b8 01 00 00 00 e8 3e 41 00 00 e8 a9 de
[    0.310000] EIP: smpboot_thread_fn+0x380/0x3e0 SS:ESP: 0068:5751bf64
[    0.310000] EIP: smpboot_thread_fn+0x380/0x3e0 SS:ESP: 0068:5751bf64
[    0.310013] ---[ end trace b192179aeb6bf756 ]---


To reproduce:

        git clone https://github.com/01org/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.11.0-rc4-00065-gc1f943e" of type "text/plain" (112555 bytes)

View attachment "job-script" of type "text/plain" (3755 bytes)

Download attachment "dmesg.xz" of type "application/octet-stream" (6352 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ