lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Sun, 29 Jun 2014 22:52:46 +0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	Stephan Mueller <smueller@...onox.de>
Cc:	Herbert Xu <herbert@...dor.apana.org.au>,
	Jet Chen <jet.chen@...el.com>, Su Tao <tao.su@...el.com>,
	Yuanhan Liu <yuanhan.liu@...el.com>, LKP <lkp@...org>,
	linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: [crypto] BUG: unable to handle kernel paging request at
 ffff88000bb88000

Greetings,

0day kernel testing robot got the below dmesg and the first bad commit is

git://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git master
commit 64d1cdfbe20c50877576045145313c9b062c50f7
Author:     Stephan Mueller <smueller@...onox.de>
AuthorDate: Sat May 31 17:25:36 2014 +0200
Commit:     Herbert Xu <herbert@...dor.apana.org.au>
CommitDate: Fri Jun 20 21:26:10 2014 +0800

    crypto: drbg - Add DRBG test code to testmgr
    
    The DRBG test code implements the CAVS test approach.
    
    As discussed for the test vectors, all DRBG types are covered with
    testing. However, not every backend cipher is covered with testing. To
    prevent the testmgr from logging missing testing, the NULL test is
    registered for all backend ciphers not covered with specific test cases.
    
    All currently implemented DRBG types and backend ciphers are defined
    in SP800-90A. Therefore, the fips_allowed flag is set for all.
    
    Signed-off-by: Stephan Mueller <smueller@...onox.de>
    Signed-off-by: Herbert Xu <herbert@...dor.apana.org.au>

+----------------------------------------------------------------------------+------------+------------+
|                                                                            | 3332ee2a17 | 64d1cdfbe2 |
+----------------------------------------------------------------------------+------------+------------+
| boot_successes                                                             | 81         | 3          |
| boot_failures                                                              | 0          | 23         |
| BUG:unable_to_handle_kernel_paging_request                                 | 0          | 20         |
| Oops                                                                       | 0          | 19         |
| RIP:kzfree                                                                 | 0          | 15         |
| WARNING:CPU:PID:at_kernel/rcu/tree.c:rcu_do_batch()                        | 0          | 9          |
| backtrace:cryptomgr_test                                                   | 0          | 18         |
| backtrace:cpu_startup_entry                                                | 0          | 3          |
| kernel_BUG_at_include/linux/mm.h                                           | 0          | 1          |
| invalid_opcode                                                             | 0          | 1          |
| RIP:__free_pages                                                           | 0          | 1          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt                      | 0          | 2          |
| BUG:unable_to_handle_kernel_NULL_pointer_dereference                       | 0          | 8          |
| RIP:cleanup_timers_list                                                    | 0          | 5          |
| BUG:scheduling_while_atomic                                                | 0          | 5          |
| INFO:lockdep_is_turned_off                                                 | 0          | 5          |
| RIP:set_slob                                                               | 0          | 3          |
| backtrace:crc32_le_combine                                                 | 0          | 1          |
| backtrace:crc32test_init                                                   | 0          | 1          |
| backtrace:kernel_init_freeable                                             | 0          | 2          |
| backtrace:acpi_bus_register_driver                                         | 0          | 1          |
| backtrace:acpi_button_driver_init                                          | 0          | 1          |
| RIP:symbol_string                                                          | 0          | 1          |
| backtrace:crypto_alloc_base                                                | 0          | 1          |
| backtrace:drbg_init_sym_kernel                                             | 0          | 1          |
| BUG:soft_lockup-CPU_stuck_for_s                                            | 0          | 1          |
| RIP:native_read_tsc                                                        | 0          | 1          |
| Kernel_panic-not_syncing:softlockup:hung_tasks                             | 0          | 1          |
| RIP:wake_up_process                                                        | 0          | 1          |
| Kernel_panic-not_syncing:Attempted_to_kill_init_exitcode=                  | 0          | 1          |
| backtrace:async_schedule                                                   | 0          | 1          |
| backtrace:acpi_battery_init                                                | 0          | 1          |
| general_protection_fault                                                   | 0          | 1          |
| RIP:rcu_do_batch                                                           | 0          | 1          |
| RIP:no_context                                                             | 0          | 0          |
| Kernel_panic-not_syncing:Attempted_to_kill_the_idle_task                   | 0          | 0          |
| Kernel_panic-not_syncing:CRED:put_cred_rcu()sees_with_mag,put,usage,subscr | 0          | 0          |
| backtrace:apic_timer_interrupt                                             | 0          | 0          |
| backtrace:smpboot_thread_fn                                                | 0          | 0          |
| RIP:__sprint_symbol                                                        | 0          | 0          |
| WARNING:CPU:PID:at_fs/inode.c:inc_nlink()                                  | 0          | 0          |
| RIP:inc_nlink                                                              | 0          | 0          |
| backtrace:debugfs_create_dir                                               | 0          | 0          |
| backtrace:notifier_err_inject_init                                         | 0          | 0          |
| backtrace:err_inject_init                                                  | 0          | 0          |
| RIP:rcu_accelerate_cbs                                                     | 0          | 0          |
| kernel_BUG_at_kernel/cred.c                                                | 0          | 0          |
| RIP:__validate_process_creds                                               | 0          | 0          |
| RIP:vsnprintf                                                              | 0          | 0          |
| WARNING:CPU:PID:at_kernel/exit.c:do_exit()                                 | 0          | 0          |
| RIP:__wake_up_common                                                       | 0          | 0          |
| RIP:pick_next_task_fair                                                    | 0          | 0          |
| backtrace:drbg_instantiate                                                 | 0          | 0          |
| backtrace:drbg_kcapi_init                                                  | 0          | 0          |
+----------------------------------------------------------------------------+------------+------------+

[    1.905933] Key type big_key registered
[    1.913728] alg: No test for lz4 (lz4-generic)
[    1.914544] alg: No test for stdrng (krng)
[    1.932092] BUG: unable to handle kernel paging request at ffff88000bb88000
[    1.933086] IP: [<ffffffff81120c8c>] kzfree+0x20/0x2d
[    1.933791] PGD 2a5c067 PUD 2a5d067 PMD 12792067 PTE 800000000bb88060
[    1.934722] Oops: 0002 [#1] PREEMPT SMP DEBUG_PAGEALLOC
[    1.935497] Modules linked in:
[    1.935927] CPU: 1 PID: 67 Comm: cryptomgr_test Not tainted 3.16.0-rc1-00011-g64d1cdf #1
[    1.936987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
[    1.938040] task: ffff88000bbc6000 ti: ffff88000bbcc000 task.ti: ffff88000bbcc000
[    1.939014] RIP: 0010:[<ffffffff81120c8c>]  [<ffffffff81120c8c>] kzfree+0x20/0x2d
[    1.940013] RSP: 0000:ffff88000bbcfba0  EFLAGS: 00010246
[    1.940013] RAX: 0000000000000000 RBX: ffff88000bb855d8 RCX: 000000003c0beac4
[    1.940013] RDX: 0000200000000880 RSI: 000000000000bb85 RDI: ffff88000bb88000
[    1.940013] RBP: ffff88000bbcfba8 R08: 0000000000000000 R09: 0000000000000000
[    1.940013] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88000bb855d8
[    1.940013] R13: ffff88000bd0a3e0 R14: ffff88000bb853d8 R15: 0000000000000001
[    1.940013] FS:  0000000000000000(0000) GS:ffff880012400000(0000) knlGS:0000000000000000
[    1.940013] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[    1.940013] CR2: ffff88000bb88000 CR3: 00000000017b2000 CR4: 00000000000006a0
[    1.940013] Stack:
[    1.940013]  ffff88000bb855d8 ffff88000bbcfbd0 ffffffff81211b0e ffff88000bb85430
[    1.940013]  0000000000000000 ffff88000bbcfcc8 ffff88000bbcfbe8 ffffffff81234a68
[    1.940013]  ffff88000bb85430 ffff88000bbcfc08 ffffffff81235099 ffff88000bb85430
[    1.940013] Call Trace:
[    1.940013]  [<ffffffff81211b0e>] crypto_destroy_tfm+0x4d/0x54
[    1.940013]  [<ffffffff81234a68>] drbg_fini_sym_kernel+0x1e/0x2b
[    1.940013]  [<ffffffff81235099>] drbg_instantiate+0x1a0/0x266
[    1.940013]  [<ffffffff812352ab>] drbg_kcapi_reset+0x14c/0x15b
[    1.940013]  [<ffffffff812118c3>] ? __crypto_alloc_tfm+0xc4/0x10e
[    1.940013]  [<ffffffff812342b9>] rngapi_reset+0x5c/0x78
[    1.940013]  [<ffffffff81218cae>] drbg_cavs_test+0x102/0x285
[    1.940013]  [<ffffffff810a5690>] ? trace_hardirqs_on+0xd/0xf
[    1.940013]  [<ffffffff81218ea5>] alg_test_drbg+0x74/0xa7
[    1.940013]  [<ffffffff8121ae87>] alg_test+0x221/0x255
[    1.940013]  [<ffffffff81268338>] ? __this_cpu_preempt_check+0x13/0x15
[    1.940013]  [<ffffffff810a5663>] ? trace_hardirqs_on_caller+0x1b7/0x1d7
[    1.940013]  [<ffffffff810a5690>] ? trace_hardirqs_on+0xd/0xf
[    1.940013]  [<ffffffff8121830e>] ? cryptomgr_notify+0x33c/0x33c
[    1.940013]  [<ffffffff81218336>] cryptomgr_test+0x28/0x43
[    1.940013]  [<ffffffff81087928>] kthread+0xf9/0x101
[    1.940013]  [<ffffffff8108782f>] ? kthread_create_on_node+0x199/0x199
[    1.940013]  [<ffffffff814f8abc>] ret_from_fork+0x7c/0xb0
[    1.940013]  [<ffffffff8108782f>] ? kthread_create_on_node+0x199/0x199
[    1.940013] Code: e0 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 83 ff 10 48 89 e5 53 48 89 fb 76 17 e8 9d 3c 02 00 48 89 df 48 89 c1 31 c0 <f3> aa 48 89 df e8 0c 49 02 00 5b 5d c3 0f 1f 44 00 00 55 48 89 
[    1.940013] RIP  [<ffffffff81120c8c>] kzfree+0x20/0x2d
[    1.940013]  RSP <ffff88000bbcfba0>
[    1.940013] CR2: ffff88000bb88000
[    1.940013] ---[ end trace 6c1e6d95c2af0ff8 ]---
[    1.972664] BUG: unable to handle kernel NULL pointer dereference at           (null)

git bisect start 48d858dc21505dc2617c5fa8c0a19be2d93fe661 a497c3ba1d97fc69c1e78e7b96435ba8c2cb42ee --
git bisect good 40b491fefc860b3b366897256b8d5adde6c4be41  # 23:31     20+      0  Merge 'renesas/devel' into devel-hourly-2014062713
git bisect  bad 4f9aca3aee3bdd6c1951b8df8afbab91f6923375  # 23:41      2-     13  Merge 'wireless/master' into devel-hourly-2014062713
git bisect good a6be7250646c37d8048cb99526a16a79f4e0379c  # 23:59     21+      0  Merge 'netdev-next/master' into devel-hourly-2014062713
git bisect  bad 4e44b90704b1a70e2c224a6ab42a76e5754c6a7d  # 00:02      1-      9  Merge 'gfs2/master' into devel-hourly-2014062713
git bisect good 996422e71c00dfa42c0f5699b8260a2d51545195  # 00:13     21+      0  Merge 'efi/next' into devel-hourly-2014062713
git bisect  bad e2447c52f40ea90a5d6e9847268366775f4c0f78  # 00:26      9-     20  Merge 'cryptodev/master' into devel-hourly-2014062713
git bisect  bad b3416fb8a2f5a1653e4ab72b55907794cc10bde1  # 00:30     10-     23  crypto: qat - Intel(R) QAT accelengine part of fw loader
git bisect good 3332ee2a17b1bd69e4602e2d6ba1b07edb0c9a24  # 00:36     27+      0  crypto: drbg - DRBG testmgr test vectors
git bisect  bad d8cba25d2c68992a6e7c1d329b690a9ebe01167d  # 00:39      2-     21  crypto: qat - Intel(R) QAT driver framework
git bisect  bad 3d77565ba5e5b9075a4f6d7d6d15996f5e582659  # 00:43      0-     17  crypto: ccp - Modify PCI support in prep for arm64 support
git bisect  bad 64d1cdfbe20c50877576045145313c9b062c50f7  # 00:45      3-     23  crypto: drbg - Add DRBG test code to testmgr
# first bad commit: [64d1cdfbe20c50877576045145313c9b062c50f7] crypto: drbg - Add DRBG test code to testmgr
git bisect good 3332ee2a17b1bd69e4602e2d6ba1b07edb0c9a24  # 00:48     81+      0  crypto: drbg - DRBG testmgr test vectors
git bisect  bad 48d858dc21505dc2617c5fa8c0a19be2d93fe661  # 00:49      0-     73  0day head guard for 'devel-hourly-2014062713'
git bisect good 3e7b256cba330240c8fcde3d01c65bfda12a2847  # 07:43     81+      0  Merge tag 'iommu-fixes-v3.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu
git bisect  bad 96426007c90cde23c0402856f3e0aec0f4cc2e48  # 07:52      0-      1  Add linux-next specific files for 20140627


This script may reproduce the error.

-----------------------------------------------------------------------------
#!/bin/bash

kernel=$1
initrd=quantal-core-x86_64.cgz

wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/blob/master/initrd/$initrd

kvm=(
	qemu-system-x86_64 -cpu kvm64 -enable-kvm 
	-kernel $kernel
	-initrd $initrd
	-smp 2
	-m 256M
	-net nic,vlan=0,macaddr=00:00:00:00:00:00,model=virtio
	-net user,vlan=0
	-net nic,vlan=1,model=e1000
	-net user,vlan=1
	-boot order=nc
	-no-reboot
	-watchdog i6300esb
	-serial stdio
	-display none
	-monitor null
)

append=(
	debug
	sched_debug
	apic=debug
	ignore_loglevel
	sysrq_always_enabled
	panic=10
	prompt_ramdisk=0
	earlyprintk=ttyS0,115200
	console=ttyS0,115200
	console=tty0
	vga=normal
	root=/dev/ram0
	rw
)

"${kvm[@]}" --append "${append[*]}"
-----------------------------------------------------------------------------

Thanks,
Fengguang

View attachment "dmesg-quantal-ivb44-88:20140629004518:x86_64-randconfig-hsxa0-06272045::" of type "text/plain" (38960 bytes)

Download attachment "x86_64-randconfig-hsxa0-06272045-48d858dc21505dc2617c5fa8c0a19be2d93fe661-BUG:-unable-to-handle-kernel-paging-request-61374.log" of type "application/octet-stream" (88508 bytes)

View attachment "config-3.16.0-rc1-00011-g64d1cdf" of type "text/plain" (71276 bytes)

_______________________________________________
LKP mailing list
LKP@...ux.intel.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ