linux-kernel - d7be102f29 ("cfg80211: initialize regulatory keys/database later"): kernel BUG at crypto/asymmetric_keys/public

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 26 Nov 2017 11:07:18 +0800
From:   Fengguang Wu <fengguang.wu@...el.com>
To:     Johannes Berg <johannes.berg@...el.com>
Cc:     Xiaolong Ye <xiaolong.ye@...el.com>,
        LKML <linux-kernel@...r.kernel.org>,
        Linus Torvalds <torvalds@...ux-foundation.org>, lkp@...org
Subject: d7be102f29 ("cfg80211: initialize regulatory keys/database later"):
 kernel BUG at crypto/asymmetric_keys/public_key.c:80!

FYI, we noticed the following commit (built with gcc-4.8):

commit: d7be102f2945a626f55e0501e52bb31ba3e77b81 ("cfg80211: initialize regulatory keys/database later")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -cpu Nehalem -smp 2 -m 512M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+---------------------------------------------------+------------+------------+
|                                                   | 7cca2acdff | d7be102f29 |
+---------------------------------------------------+------------+------------+
| boot_successes                                    | 10         | 0          |
| boot_failures                                     | 2          | 12         |
| BUG:kernel_hang_in_test_stage                     | 2          |            |
| kernel_BUG_at_crypto/asymmetric_keys/public_key.c | 0          | 12         |
| invalid_opcode:#[##]                              | 0          | 12         |
| RIP:public_key_verify_signature                   | 0          | 12         |
| Kernel_panic-not_syncing:Fatal_exception          | 0          | 12         |
+---------------------------------------------------+------------+------------+



[    8.602885] kernel BUG at crypto/asymmetric_keys/public_key.c:80!
[    8.604548] invalid opcode: 0000 [#1]
[    8.605140] Modules linked in:
[    8.605603] CPU: 0 PID: 1 Comm: swapper Not tainted 4.14.0-12781-gd7be102 #1
[    8.606870] task: ffff88001e08d500 task.stack: ffffc90000008000
[    8.607873] RIP: 0010:public_key_verify_signature+0x267/0x280
[    8.607873] RSP: 0000:ffffc9000000bbd8 EFLAGS: 00010246
[    8.607873] RAX: 0000000000000000 RBX: ffff88001b465180 RCX: ffffffff81839ff2
[    8.607873] RDX: 0000000000000012 RSI: ffff88001b465258 RDI: ffff88001b465230
[    8.607873] RBP: ffff88001b465258 R08: 0000000000000065 R09: 0000000000000000
[    8.607873] R10: 0000000000000003 R11: fffffffffffffff8 R12: 0000000000000000
[    8.607873] R13: ffff88001b465230 R14: ffffffffffffffec R15: 00000000000002a8
[    8.607873] FS:  0000000000000000(0000) GS:ffffffff81a2f000(0000) knlGS:0000000000000000
[    8.607873] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    8.607873] CR2: 0000000000000000 CR3: 0000000001a0e000 CR4: 00000000000006f0
[    8.607873] Call Trace:
[    8.607873]  ? cryptomgr_notify+0x2a4/0x4e0
[    8.607873]  ? notifier_call_chain+0x44/0x70
[    8.607873]  ? asymmetric_key_generate_id+0x28/0x70
[    8.607873]  ? __kmalloc+0xa6/0x160
[    8.607873]  ? crypto_alloc_tfm+0x52/0xe0
[    8.607873]  x509_check_for_self_signed+0xbe/0xf0
[    8.607873]  x509_cert_parse+0x130/0x190
[    8.607873]  x509_key_preparse+0x23/0x1a0
[    8.607873]  asymmetric_key_preparse+0x4a/0x80
[    8.607873]  ? key_type_lookup+0x46/0x70
[    8.607873]  key_create_or_update+0x122/0x430
[    8.607873]  ? vprintk_emit+0x22d/0x2f0
[    8.607873]  regulatory_init_db+0xfe/0x1c2
[    8.607873]  ? cfg80211_init+0xd4/0xd4
[    8.607873]  do_one_initcall+0x4c/0x1a0
[    8.607873]  ? parse_args+0x1c0/0x2d0
[    8.607873]  kernel_init_freeable+0x111/0x195
[    8.607873]  ? set_debug_rodata+0x11/0x11
[    8.607873]  ? rest_init+0xa0/0xa0
[    8.607873]  kernel_init+0xa/0xf0
[    8.607873]  ret_from_fork+0x24/0x30
[    8.607873] Code: c1 48 8b 7d 20 4c 89 f6 e8 97 e0 35 00 85 c0 b8 7f ff ff ff 44 0f 45 e8 eb c1 b8 ea ff ff ff e9 7d fe ff ff e8 7b 69 e5 ff 0f 0b <0f> 0b 0f 0b 0f 0b 41 bd f4 ff ff ff e9 57 fe ff ff 0f 1f 84 00 
[    8.607873] RIP: public_key_verify_signature+0x267/0x280 RSP: ffffc9000000bbd8
[    8.641443] ---[ end trace 50904d4bfe4a1f13 ]---


To reproduce:

         git clone https://github.com/intel/lkp-tests.git
         cd lkp-tests
         bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email

Thanks,
wfg

View attachment "config-4.14.0-12781-gd7be102" of type "text/plain" (114199 bytes)

View attachment "job-script" of type "text/plain" (4215 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (10760 bytes)