netdev - [net/ipv6] 15c9251fd2: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 27 Feb 2018 08:01:13 +0800
From:   kernel test robot <fengguang.wu@...el.com>
To:     David Ahern <dsahern@...il.com>
Cc:     netdev@...r.kernel.org, davem@...emloft.net, idosch@...sch.org,
        roopa@...ulusnetworks.com, eric.dumazet@...il.com,
        weiwan@...gle.com, kafai@...com, yoshfuji@...ux-ipv6.org,
        David Ahern <dsahern@...il.com>, lkp@...org
Subject: [net/ipv6]  15c9251fd2: BUG:unable_to_handle_kernel

FYI, we noticed the following commit (built with gcc-7):

commit: 15c9251fd2c06777e65c74b2df6aaac5575070cb ("net/ipv6: move metrics from dst to rt6_info")
url: https://github.com/0day-ci/linux/commits/David-Ahern/net-ipv6-Separate-data-structures-for-FIB-and-data-path/20180226-222416


in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -m 420M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------+------------+------------+
|                                                       | 1e903aa017 | 15c9251fd2 |
+-------------------------------------------------------+------------+------------+
| boot_successes                                        | 8          | 0          |
| boot_failures                                         | 0          | 8          |
| BUG:unable_to_handle_kernel                           | 0          | 8          |
| Oops:#[##]                                            | 0          | 8          |
| EIP:ndisc_router_discovery                            | 0          | 8          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0          | 8          |
+-------------------------------------------------------+------------+------------+



[   22.641331] BUG: unable to handle kernel paging request at c21c2904
[   22.642318] IP: ndisc_router_discovery+0x780/0x13d0
[   22.643089] *pde = 15005063 *pte = 021c2161 
[   22.643762] Oops: 0003 [#1]
[   22.644195] Modules linked in:
[   22.644678] CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.16.0-rc2-00679-g15c9251 #1
[   22.645795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   22.647022] EIP: ndisc_router_discovery+0x780/0x13d0
[   22.647801] EFLAGS: 00010246 CPU: 0
[   22.648367] EAX: c21c28e0 EBX: d51afa80 ECX: ccee8800 EDX: 00000040
[   22.649312] ESI: d5238800 EDI: cccafef6 EBP: d50b7ce0 ESP: d50b7c68
[   22.650230]  DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068
[   22.651048] CR0: 80050033 CR2: c21c2904 CR3: 0cf7c000 CR4: 000006d0
[   22.651989] Call Trace:
[   22.652384]  ? validate_chain+0xe8d/0xfd0
[   22.653088]  ndisc_rcv+0xc7d/0xef0
[   22.653588]  ? find_held_lock+0x35/0x110
[   22.654148]  ? skb_checksum+0x40/0x70
[   22.654674]  ? skb_send_sock+0x80/0x80
[   22.655204]  ? reqsk_fastopen_remove+0x2f0/0x2f0
[   22.655890]  ? __skb_checksum_complete+0xba/0x160
[   22.656590]  icmpv6_rcv+0xb9d/0xea0
[   22.657139]  ip6_input_finish+0x84a/0x1050
[   22.657919]  ip6_mc_input+0x261/0x3b0
[   22.658471]  ip6_rcv_finish+0x43a/0x5e0
[   22.659023]  ipv6_rcv+0xf4c/0x12d0
[   22.659505]  ? ip6_rcv_finish+0x5e0/0x5e0
[   22.660079]  __netif_receive_skb_core+0x1349/0x1970
[   22.660793]  __netif_receive_skb+0xe1/0x100
[   22.661418]  netif_receive_skb_internal+0x351/0x3e0
[   22.662113]  ? netif_receive_skb_internal+0x2e0/0x3e0
[   22.662847]  napi_gro_receive+0x2bd/0x390
[   22.663444]  e1000_receive_skb+0x80/0xa0
[   22.664054]  e1000_clean_rx_irq+0x68d/0x830
[   22.664704]  ? e1000_clean_jumbo_rx_irq+0xc00/0xc00
[   22.665419]  e1000_clean+0x67/0x3d0
[   22.665935]  net_rx_action+0x1ad/0x8a0
[   22.666475]  __do_softirq+0x3cb/0x8b9
[   22.667006]  run_ksoftirqd+0x4f/0x100
[   22.667527]  smpboot_thread_fn+0x42d/0x450
[   22.668115]  kthread+0x232/0x250
[   22.668589]  ? sort_range+0x40/0x40
[   22.669112]  ? kthread_create_worker+0x40/0x40
[   22.669789]  ret_from_fork+0x2e/0x38
[   22.670342] Code: 90 34 01 00 00 8b 45 90 83 15 ac 8d d4 c3 00 85 c0 74 20 0f b6 57 04 83 05 b0 8d d4 c3 01 8b 80 d8 00 00 00 83 15 b4 8d d4 c3 00 <89> 50 24 90 8d 74 26 00 8b 45 a8 8b 88 2c 01 00 00 85 c9 0f 84
[   22.673109] EIP: ndisc_router_discovery+0x780/0x13d0 SS:ESP: 0068:d50b7c68
[   22.674093] CR2: 00000000c21c2904
[   22.674581] ---[ end trace f56f6529cd55c80c ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
lkp

View attachment "config-4.16.0-rc2-00679-g15c9251" of type "text/plain" (142855 bytes)

View attachment "job-script" of type "text/plain" (3858 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (11592 bytes)