lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20141210231940.GB24163@wfg-t540p.sh.intel.com>
Date:	Wed, 10 Dec 2014 15:19:40 -0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	"Steven Rostedt (Red Hat)" <rostedt@...dmis.org>
Cc:	LKP <lkp@...org>, linux-kernel@...r.kernel.org
Subject: [ftrace/fgraph/x86] BUG: unable to handle kernel paging request at
 c0017eec


Hi Steven,

FYI, here is another bisect result.

git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master
commit 6a06bdbf7f9c669743f58084991ba280f2925586
Author:     Steven Rostedt (Red Hat) <rostedt@...dmis.org>
AuthorDate: Mon Nov 24 21:00:34 2014 -0500
Commit:     Steven Rostedt <rostedt@...dmis.org>
CommitDate: Mon Dec 1 14:08:58 2014 -0500

    ftrace/fgraph/x86: Have prepare_ftrace_return() take ip as first parameter
    
    The function graph helper function prepare_ftrace_return() which does the work
    to hijack the parent pointer has that parent pointer as its first parameter.
    Instead, if we make it the second parameter and have ip as the first parameter
    (self_addr), then it can use the %rdi from save_mcount_regs that loads it
    already.
    
    Link: http://lkml.kernel.org/r/alpine.DEB.2.11.1411262304010.3961@nanos
    
    Reviewed-by: Thomas Gleixner <tglx@...utronix.de>
    Signed-off-by: Steven Rostedt <rostedt@...dmis.org>

+------------------------------------------+------------+------------+------------+
|                                          | f1ab00af81 | 6a06bdbf7f | eda592b769 |
+------------------------------------------+------------+------------+------------+
| boot_successes                           | 60         | 0          | 0          |
| boot_failures                            | 0          | 20         | 25         |
| BUG:unable_to_handle_kernel              | 0          | 20         | 25         |
| Oops                                     | 0          | 20         | 25         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 20         | 25         |
| EIP_is_at_print_fmt_writeback_work_class | 0          | 0          | 25         |
+------------------------------------------+------------+------------+------------+

[    1.602245] Warning: could not register all branches stats
[    1.602660] Warning: could not register annotated branches stats
[    1.603181] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
[    1.603713] BUG: unable to handle kernel paging request at c0017eec
[    1.604173] IP: [<c0017eec>] 0xc0017eec
[    1.604458] *pdpt = 00000000025a0001 *pde = 0000000002e01063 *pte = 8000000000017163 
[    1.605036] Oops: 0011 [#1] SMP DEBUG_PAGEALLOC
[    1.605386] Modules linked in:
[    1.605617] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.18.0-rc1-00052-g6a06bdb #53
[    1.606157] task: c0030000 ti: c0016000 task.ti: c0016000
[    1.606538] EIP: 0060:[<c0017eec>] EFLAGS: 00010206 CPU: 0
[    1.606931] EIP is at 0xc0017eec
[    1.607162] EAX: c20bea51 EBX: c21cd5c5 ECX: ffffffff EDX: c21e3700
[    1.607597] ESI: c0080980 EDI: d2c5ede0 EBP: c0017eb8 ESP: c0018000
[    1.608040]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[    1.608418] CR0: 8005003b CR2: c0017eec CR3: 025a3000 CR4: 000006b0
[    1.608860] Stack:
[    1.609009]  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    1.609638]  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    1.610000]  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00040000
[    1.610000] Call Trace:
[    1.610000] Code: 85 1e c2 e0 84 1e c2 00 00 00 00 a0 09 08 c0 a4 85 d4 c2 51 ea 0b c2 00 7a d4 c2 c0 72 00 d3 00 7a d4 c2 00 00 00 00 e0 ed c5 d2 <0c> 7f 01 c0 bd 16 52 c2 ac 85 d4 c2 00 00 00 00 01 00 00 00 3f
[    1.610000] EIP: [<c0017eec>] 0xc0017eec SS:ESP 0068:c0018000
[    1.610000] CR2: 00000000c0017eec
[    1.610000] ---[ end trace 09bb131480b067b5 ]---
[    1.610000] Kernel panic - not syncing: Fatal exception

git bisect start eda592b7693fe76f7137bef0816a658846a499dc b2776bf7149bddd1f4161f14f79520f17fc1d71d --
git bisect good bb295316bd72e31c485b27e1744312ba02e2a2a0  # 10:19     20+      0  Merge remote-tracking branch 'i2c/i2c/for-next'
git bisect good 5f6a791b6e948fb6442a060c5864fd1d938a46c3  # 10:28     20+      0  Merge remote-tracking branch 'device-mapper/for-next'
git bisect good 1c36827b8a6377c31978e8c1620d928579ce2cd8  # 10:43     20+      0  Merge remote-tracking branch 'vfio/next'
git bisect good bbdd5e2086cfa3abe3e924fa6722dc1affefba4e  # 11:19     20+      0  Merge remote-tracking branch 'tip/auto-latest'
git bisect good bdf66ea0516dcaf3cd02b046ae3d737aa1a6c705  # 11:26     20+      0  Merge remote-tracking branch 'edac-amd/for-next'
git bisect  bad 9d6ada6afa5f8a4f78e562c7b435ec7fd804df7b  # 11:43      0-     20  Merge remote-tracking branch 'ftrace/for-next'
git bisect good 309c0750fce03028565307dc8e369ceed56e295a  # 11:56     20+      0  Merge remote-tracking branch 'irqchip/irqchip/for-next'
git bisect good 9b77215382b42ef9c5b34293ad3a95332e5b71ef  # 12:06     20+      0  seq_buf: Add seq_buf_can_fit() helper function
git bisect good 07f1bc7f8cec0f3493731c8f83ad037f50f7e785  # 12:12     20+      0  Merge branch 'for-next/ftrace/core' into trace/for-next
git bisect  bad eabb8980a96cff42ae70cc6ab143f4003f02c874  # 12:20      0-     20  tracing: Allow NOT to filter AND and OR clauses
git bisect good 527aa75b333f90f4f90ac1730762156680a42fe8  # 12:28     20+      0  ftrace/x86: Simplify save_mcount_regs on getting RIP
git bisect good f1ab00af816ec8e1ad53229963c863fdd6bcf222  # 12:35     20+      0  ftrace/x86: Get rid of ftrace_caller_setup
git bisect  bad e12c09cf3087b5a184ffeb55ca368e8aa436a3a2  # 12:42      0-     20  tracing: Add NOT to filtering logic
git bisect  bad 6a06bdbf7f9c669743f58084991ba280f2925586  # 12:51      0-     20  ftrace/fgraph/x86: Have prepare_ftrace_return() take ip as first parameter
# first bad commit: [6a06bdbf7f9c669743f58084991ba280f2925586] ftrace/fgraph/x86: Have prepare_ftrace_return() take ip as first parameter
git bisect good f1ab00af816ec8e1ad53229963c863fdd6bcf222  # 12:54     60+      0  ftrace/x86: Get rid of ftrace_caller_setup
# extra tests on HEAD of next/master
git bisect good 5348e33950aad8d5ab06d83cb7ac4e6b4198f773  # 12:55     60+    284  Add linux-next specific files for 20141209
# extra tests on tree/branch next/master
git bisect good 5348e33950aad8d5ab06d83cb7ac4e6b4198f773  # 12:57     60+    344  Add linux-next specific files for 20141209
# extra tests on tree/branch linus/master
git bisect good a0e4467726cd26bacb16f13d207ffcfa82ffc07d  # 13:03     60+      0  Merge tag 'asm-generic-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic
# extra tests on tree/branch next/master
git bisect good 5348e33950aad8d5ab06d83cb7ac4e6b4198f773  # 13:05     60+    404  Add linux-next specific files for 20141209


This script may reproduce the error.

----------------------------------------------------------------------------
#!/bin/bash

kernel=$1

kvm=(
	qemu-system-x86_64
	-cpu kvm64
	-enable-kvm
	-kernel $kernel
	-m 320
	-smp 1
	-net nic,vlan=1,model=e1000
	-net user,vlan=1
	-boot order=nc
	-no-reboot
	-watchdog i6300esb
	-rtc base=localtime
	-serial stdio
	-display none
	-monitor null 
)

append=(
	hung_task_panic=1
	earlyprintk=ttyS0,115200
	debug
	apic=debug
	sysrq_always_enabled
	rcupdate.rcu_cpu_stall_timeout=100
	panic=-1
	softlockup_panic=1
	nmi_watchdog=panic
	oops=panic
	load_ramdisk=2
	prompt_ramdisk=0
	console=ttyS0,115200
	console=tty0
	vga=normal
	root=/dev/ram0
	rw
	drbd.minor_count=8
)

"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------

Thanks,
Fengguang

View attachment "dmesg-yocto-client7-28:20141210125059:i386-randconfig-ib0-12060154:3.18.0-rc1-00052-g6a06bdb:53" of type "text/plain" (24415 bytes)

View attachment "config-3.18.0-rc1-00052-g6a06bdb" of type "text/plain" (89309 bytes)

_______________________________________________
LKP mailing list
LKP@...ux.intel.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ