| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 28 Feb 2017 19:09:33 +0800
From: Fengguang Wu <fengguang.wu@...el.com>
To: Daniel Borkmann <daniel@...earbox.net>
Cc: netdev@...r.kernel.org, linux-kernel@...r.kernel.org,
LKP <lkp@...org>
Subject: Re: [bpf] 9d876e79df: BUG: unable to handle kernel paging request
at 653a8346
[remove unrelated mailing lists]
On Mon, Feb 27, 2017 at 04:25:57PM +0100, Daniel Borkmann wrote:
>On 02/27/2017 03:14 AM, kernel test robot wrote:
>> Greetings,
>>
>> 0day kernel testing robot got the below dmesg and the first bad commit is
>>
>> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
>
>I'll take a look, thanks for the report!
You are welcome! btw here is another bisect result showing a different
call trace. The attached reproduce-* script may help reproduce the bug.
d2852a2240 arch: add ARCH_HAS_SET_MEMORY config
9d876e79df bpf: fix unlocking of jited image when module ronx not set
+--------------------------------------------------------+------------+------------+
| | d2852a2240 | 9d876e79df |
+--------------------------------------------------------+------------+------------+
| boot_successes | 2756 | 207 |
| boot_failures | 0 | 238 |
| BUG:unable_to_handle_kernel | 0 | 236 |
| Oops:#[##] | 0 | 236 |
| EIP:__release_sock | 0 | 13 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 218 |
| EIP:bpf_prog_free | 0 | 23 |
| EIP:filp_close | 0 | 44 |
| EIP:__wake_up_common | 0 | 16 |
| EIP:unix_release_sock | 0 | 76 |
| EIP:__netlink_lookup | 0 | 3 |
| EIP:release_sock | 0 | 9 |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 18 |
| EIP:netlink_update_listeners | 0 | 7 |
| EIP:__rcu_process_callbacks | 0 | 4 |
| EIP:__unix_find_socket_byname | 0 | 14 |
| BUG:kernel_hang_in_test_stage | 0 | 2 |
| EIP:__fget_light | 0 | 15 |
| EIP:rht_bucket_nested | 0 | 4 |
| EIP:___cache_free | 0 | 2 |
| WARNING:at_arch/x86/mm/pageattr.c:#__cpa_process_fault | 0 | 1 |
| EIP:mnt_want_write_file | 0 | 1 |
| EIP:netlink_release | 0 | 2 |
+--------------------------------------------------------+------------+------------+
[ 5.875292] init: Failed to create pty - disabling logging for job
[ 5.876281] init: Temporary process spawn error: No such file or directory
[ 5.894107] genirq: Flags mismatch irq 4. 00000000 (serial) vs. 00000080 (goldfish_pdev_bus)
[ 5.904376] random: trinity: uninitialized urandom read (4 bytes read)
[ 15.457341] sock: process `trinity-main' is using obsolete setsockopt SO_BSDCOMPAT
[ 15.493431] BUG: unable to handle kernel paging request at 000083aa
[ 15.494924] IP: netlink_update_listeners+0x65/0xb0
[ 15.496147] *pde = 00000000
[ 15.496148]
[ 15.497698] Oops: 0000 [#1]
[ 15.498505] CPU: 0 PID: 377 Comm: trinity-main Not tainted 4.10.0-rc8-02017-g9d876e7 #59
[ 15.500409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[ 15.502721] task: d652f840 task.stack: d4b74000
[ 15.503830] EIP: netlink_update_listeners+0x65/0xb0
[ 15.505017] EFLAGS: 00010002 CPU: 0
[ 15.505931] EAX: 000081e6 EBX: 00000023 ECX: 00000000 EDX: 00000000
[ 15.507334] ESI: 00000000 EDI: d5226118 EBP: d4b75e68 ESP: d4b75e58
[ 15.508746] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068
[ 15.509996] CR0: 80050033 CR2: 000083aa CR3: 16960000 CR4: 00000610
[ 15.511399] Call Trace:
[ 15.512126] netlink_bind+0x136/0x240
[ 15.513068] SYSC_bind+0x98/0xb0
[ 15.513924] ? __might_sleep+0x32/0xa0
[ 15.514886] ? __might_sleep+0x32/0xa0
[ 15.515843] ? __copy_from_user_ll+0xb/0xe0
[ 15.516878] ? _copy_from_user+0x62/0xa0
[ 15.517866] SyS_socketcall+0x49c/0x6a0
[ 15.518842] ? __sb_end_write+0x8/0x40
[ 15.519795] ? __might_sleep+0x32/0xa0
[ 15.520739] ? mutex_unlock+0x9/0x30
[ 15.521664] do_fast_syscall_32+0x9a/0x160
[ 15.522674] entry_SYSENTER_32+0x4c/0x7b
[ 15.523645] EIP: 0xb77bdcc5
[ 15.524415] EFLAGS: 00000286 CPU: 0
[ 15.525334] EAX: ffffffda EBX: 00000002 ECX: bfc54530 EDX: b7591710
[ 15.526737] ESI: 00000177 EDI: 00000010 EBP: 00000003 ESP: bfc5451c
[ 15.528139] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 15.529395] Code: 8d b6 00 00 00 00 8b 47 64 85 c0 74 61 83 e8 18 74 5c 8d 34 8d 00 00 00 00 31 db eb 0e 89 f6 8d bc 27 00 00 00 00 83 e8 18 74 20 <8b> 90 c4 01 00 00 83 c2 1f c1 ea 05 39 d1 73 09 8b 90 c8 01 00
[ 15.533484] EIP: netlink_update_listeners+0x65/0xb0 SS:ESP: 0068:d4b75e58
[ 15.534982] CR2: 00000000000083aa
[ 15.535858] ---[ end trace be2247c8320aa1f6 ]---
[ 15.536976] Kernel panic - not syncing: Fatal exception
git bisect start c4f3f22eddc982d247ffe2a6690c3e4a5c46dd09 v4.10 --
git bisect good 1e74a2eb1f5cc7f2f2b5aa9c9eeecbcf352220a3 # 13:51 310+ 0 Merge tag 'gcc-plugins-v4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
git bisect bad 5bcbe22ca47da04cda3a858cef67f55b550c1d13 # 13:58 32- 34 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
git bisect bad b4642c109f9bbf62b2ee10babf5c4221c48480aa # 14:08 1- 2 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
git bisect bad e30aee9e10bb5168579e047f05c3d13d09e23356 # 14:15 12- 13 Merge tag 'char-misc-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
git bisect bad 38705613b74ab090eee55c327cd0cb77fb10eb26 # 14:24 94- 81 Merge tag 'powerpc-4.11-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
git bisect bad 3051bf36c25d5153051704291782f8d44e744d36 # 14:35 63- 29 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
git bisect good 889711a03e0fba427fb85317900e93c74e3be02a # 14:50 310+ 0 Merge tag 'wireless-drivers-next-for-davem-2017-02-01' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
git bisect good e3f29c4809a5f562adc345c48ed9785f2597df78 # 15:02 310+ 0 Merge tag 'wireless-drivers-next-for-davem-2017-02-09' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
git bisect good 5237b9dde379f9eadd60a9b6310567ce5d307fe8 # 15:18 310+ 0 Merge branch '10GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue
git bisect good 93a66e93c7d8775f33c0d65e3fdeb209c1d4a8c9 # 15:34 310+ 0 GTP: Add some basic documentation about drivers/net/gtp.c
git bisect good 14861e9de2c2ffe404fb41cc34150f09a39acb44 # 15:51 310+ 0 net: ethernet: aquantia: Using module_pci_driver.
git bisect good 8bcdc4f3a20be949df54b67e5ae2734daabb5792 # 16:09 300+ 0 vxlan: add changelink support
git bisect good a8c249a71dca2992001ad582797c03fca0488d00 # 16:47 310+ 0 net: mvpp2: remove unused register definitions
git bisect good 29869d66870a715177bfb505f66a7e0e8bcc89c3 # 17:04 306+ 0 tcp: Revert "tcp: tcp_probe: use spin_lock_bh()"
git bisect bad d54fef315399e0b16f8ae2b41167f34f8df12e88 # 17:04 0- 213 Merge branch 'bpf-unlocking-fix'
git bisect good d2852a2240509e512712e25de2d0796cda435ecb # 17:22 306+ 0 arch: add ARCH_HAS_SET_MEMORY config
git bisect bad 9d876e79df6a2f364b9f2737eacd72ceb27da53a # 15:28 16- 55 bpf: fix unlocking of jited image when module ronx not set
# first bad commit: [9d876e79df6a2f364b9f2737eacd72ceb27da53a] bpf: fix unlocking of jited image when module ronx not set
git bisect good d2852a2240509e512712e25de2d0796cda435ecb # 17:39 901+ 0 arch: add ARCH_HAS_SET_MEMORY config
# extra tests on HEAD of linux-review/Matthew-Wilcox/ERR_USER_PTR/20170226-195525
git bisect bad 327d9d62aac2d74f41564e22f3ce52eb241e1dae # 17:40 0- 51 ERR_USER_PTR
# extra tests on tree/branch linus/master
git bisect bad 5782fd14aaecc72f27473f380ba2044c7598b14a # 17:57 47- 30 Merge tag 'rtc-4.11' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux
# extra tests on tree/branch linux-next/master
git bisect bad 8d01c069486aca75b8f6018a759215b0ed0c91f0 # 18:18 42- 30 Add linux-next specific files for 20170228
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
Download attachment "dmesg-quantal-ivb41-50:20170228051301:i386-randconfig-r0-201709:4.10.0-rc8-02017-g9d876e7:59.gz" of type "application/gzip" (15611 bytes)
View attachment "reproduce-quantal-ivb41-50:20170228051301:i386-randconfig-r0-201709:4.10.0-rc8-02017-g9d876e7:59" of type "text/plain" (886 bytes)
View attachment "config-4.10.0-rc8-02017-g9d876e7" of type "text/plain" (80806 bytes)
Powered by blists - more mailing lists