lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20170228110933.snljyosmcjsxtbyf@wfg-t540p.sh.intel.com>
Date:   Tue, 28 Feb 2017 19:09:33 +0800
From:   Fengguang Wu <fengguang.wu@...el.com>
To:     Daniel Borkmann <daniel@...earbox.net>
Cc:     netdev@...r.kernel.org, linux-kernel@...r.kernel.org,
        LKP <lkp@...org>
Subject: Re: [bpf] 9d876e79df:  BUG: unable to handle kernel paging request
 at 653a8346

[remove unrelated mailing lists]

On Mon, Feb 27, 2017 at 04:25:57PM +0100, Daniel Borkmann wrote:
>On 02/27/2017 03:14 AM, kernel test robot wrote:
>> Greetings,
>>
>> 0day kernel testing robot got the below dmesg and the first bad commit is
>>
>> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
>
>I'll take a look, thanks for the report!

You are welcome! btw here is another bisect result showing a different
call trace. The attached reproduce-* script may help reproduce the bug.

d2852a2240  arch: add ARCH_HAS_SET_MEMORY config
9d876e79df  bpf: fix unlocking of jited image when module ronx not set
+--------------------------------------------------------+------------+------------+
|                                                        | d2852a2240 | 9d876e79df |
+--------------------------------------------------------+------------+------------+
| boot_successes                                         | 2756       | 207        |
| boot_failures                                          | 0          | 238        |
| BUG:unable_to_handle_kernel                            | 0          | 236        |
| Oops:#[##]                                             | 0          | 236        |
| EIP:__release_sock                                     | 0          | 13         |
| Kernel_panic-not_syncing:Fatal_exception               | 0          | 218        |
| EIP:bpf_prog_free                                      | 0          | 23         |
| EIP:filp_close                                         | 0          | 44         |
| EIP:__wake_up_common                                   | 0          | 16         |
| EIP:unix_release_sock                                  | 0          | 76         |
| EIP:__netlink_lookup                                   | 0          | 3          |
| EIP:release_sock                                       | 0          | 9          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt  | 0          | 18         |
| EIP:netlink_update_listeners                           | 0          | 7          |
| EIP:__rcu_process_callbacks                            | 0          | 4          |
| EIP:__unix_find_socket_byname                          | 0          | 14         |
| BUG:kernel_hang_in_test_stage                          | 0          | 2          |
| EIP:__fget_light                                       | 0          | 15         |
| EIP:rht_bucket_nested                                  | 0          | 4          |
| EIP:___cache_free                                      | 0          | 2          |
| WARNING:at_arch/x86/mm/pageattr.c:#__cpa_process_fault | 0          | 1          |
| EIP:mnt_want_write_file                                | 0          | 1          |
| EIP:netlink_release                                    | 0          | 2          |
+--------------------------------------------------------+------------+------------+

[    5.875292] init: Failed to create pty - disabling logging for job
[    5.876281] init: Temporary process spawn error: No such file or directory
[    5.894107] genirq: Flags mismatch irq 4. 00000000 (serial) vs. 00000080 (goldfish_pdev_bus)
[    5.904376] random: trinity: uninitialized urandom read (4 bytes read)
[   15.457341] sock: process `trinity-main' is using obsolete setsockopt SO_BSDCOMPAT
[   15.493431] BUG: unable to handle kernel paging request at 000083aa
[   15.494924] IP: netlink_update_listeners+0x65/0xb0
[   15.496147] *pde = 00000000 
[   15.496148] 
[   15.497698] Oops: 0000 [#1]
[   15.498505] CPU: 0 PID: 377 Comm: trinity-main Not tainted 4.10.0-rc8-02017-g9d876e7 #59
[   15.500409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[   15.502721] task: d652f840 task.stack: d4b74000
[   15.503830] EIP: netlink_update_listeners+0x65/0xb0
[   15.505017] EFLAGS: 00010002 CPU: 0
[   15.505931] EAX: 000081e6 EBX: 00000023 ECX: 00000000 EDX: 00000000
[   15.507334] ESI: 00000000 EDI: d5226118 EBP: d4b75e68 ESP: d4b75e58
[   15.508746]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068
[   15.509996] CR0: 80050033 CR2: 000083aa CR3: 16960000 CR4: 00000610
[   15.511399] Call Trace:
[   15.512126]  netlink_bind+0x136/0x240
[   15.513068]  SYSC_bind+0x98/0xb0
[   15.513924]  ? __might_sleep+0x32/0xa0
[   15.514886]  ? __might_sleep+0x32/0xa0
[   15.515843]  ? __copy_from_user_ll+0xb/0xe0
[   15.516878]  ? _copy_from_user+0x62/0xa0
[   15.517866]  SyS_socketcall+0x49c/0x6a0
[   15.518842]  ? __sb_end_write+0x8/0x40
[   15.519795]  ? __might_sleep+0x32/0xa0
[   15.520739]  ? mutex_unlock+0x9/0x30
[   15.521664]  do_fast_syscall_32+0x9a/0x160
[   15.522674]  entry_SYSENTER_32+0x4c/0x7b
[   15.523645] EIP: 0xb77bdcc5
[   15.524415] EFLAGS: 00000286 CPU: 0
[   15.525334] EAX: ffffffda EBX: 00000002 ECX: bfc54530 EDX: b7591710
[   15.526737] ESI: 00000177 EDI: 00000010 EBP: 00000003 ESP: bfc5451c
[   15.528139]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   15.529395] Code: 8d b6 00 00 00 00 8b 47 64 85 c0 74 61 83 e8 18 74 5c 8d 34 8d 00 00 00 00 31 db eb 0e 89 f6 8d bc 27 00 00 00 00 83 e8 18 74 20 <8b> 90 c4 01 00 00 83 c2 1f c1 ea 05 39 d1 73 09 8b 90 c8 01 00
[   15.533484] EIP: netlink_update_listeners+0x65/0xb0 SS:ESP: 0068:d4b75e58
[   15.534982] CR2: 00000000000083aa
[   15.535858] ---[ end trace be2247c8320aa1f6 ]---
[   15.536976] Kernel panic - not syncing: Fatal exception

git bisect start c4f3f22eddc982d247ffe2a6690c3e4a5c46dd09 v4.10 --
git bisect good 1e74a2eb1f5cc7f2f2b5aa9c9eeecbcf352220a3  # 13:51    310+      0  Merge tag 'gcc-plugins-v4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
git bisect  bad 5bcbe22ca47da04cda3a858cef67f55b550c1d13  # 13:58     32-     34  Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
git bisect  bad b4642c109f9bbf62b2ee10babf5c4221c48480aa  # 14:08      1-      2  Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
git bisect  bad e30aee9e10bb5168579e047f05c3d13d09e23356  # 14:15     12-     13  Merge tag 'char-misc-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
git bisect  bad 38705613b74ab090eee55c327cd0cb77fb10eb26  # 14:24     94-     81  Merge tag 'powerpc-4.11-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
git bisect  bad 3051bf36c25d5153051704291782f8d44e744d36  # 14:35     63-     29  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
git bisect good 889711a03e0fba427fb85317900e93c74e3be02a  # 14:50    310+      0  Merge tag 'wireless-drivers-next-for-davem-2017-02-01' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
git bisect good e3f29c4809a5f562adc345c48ed9785f2597df78  # 15:02    310+      0  Merge tag 'wireless-drivers-next-for-davem-2017-02-09' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
git bisect good 5237b9dde379f9eadd60a9b6310567ce5d307fe8  # 15:18    310+      0  Merge branch '10GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue
git bisect good 93a66e93c7d8775f33c0d65e3fdeb209c1d4a8c9  # 15:34    310+      0  GTP: Add some basic documentation about drivers/net/gtp.c
git bisect good 14861e9de2c2ffe404fb41cc34150f09a39acb44  # 15:51    310+      0  net: ethernet: aquantia: Using module_pci_driver.
git bisect good 8bcdc4f3a20be949df54b67e5ae2734daabb5792  # 16:09    300+      0  vxlan: add changelink support
git bisect good a8c249a71dca2992001ad582797c03fca0488d00  # 16:47    310+      0  net: mvpp2: remove unused register definitions
git bisect good 29869d66870a715177bfb505f66a7e0e8bcc89c3  # 17:04    306+      0  tcp: Revert "tcp: tcp_probe: use spin_lock_bh()"
git bisect  bad d54fef315399e0b16f8ae2b41167f34f8df12e88  # 17:04      0-    213  Merge branch 'bpf-unlocking-fix'
git bisect good d2852a2240509e512712e25de2d0796cda435ecb  # 17:22    306+      0  arch: add ARCH_HAS_SET_MEMORY config
git bisect  bad 9d876e79df6a2f364b9f2737eacd72ceb27da53a  # 15:28     16-     55  bpf: fix unlocking of jited image when module ronx not set
# first bad commit: [9d876e79df6a2f364b9f2737eacd72ceb27da53a] bpf: fix unlocking of jited image when module ronx not set
git bisect good d2852a2240509e512712e25de2d0796cda435ecb  # 17:39    901+      0  arch: add ARCH_HAS_SET_MEMORY config
# extra tests on HEAD of linux-review/Matthew-Wilcox/ERR_USER_PTR/20170226-195525
git bisect  bad 327d9d62aac2d74f41564e22f3ce52eb241e1dae  # 17:40      0-     51  ERR_USER_PTR
# extra tests on tree/branch linus/master
git bisect  bad 5782fd14aaecc72f27473f380ba2044c7598b14a  # 17:57     47-     30  Merge tag 'rtc-4.11' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux
# extra tests on tree/branch linux-next/master
git bisect  bad 8d01c069486aca75b8f6018a759215b0ed0c91f0  # 18:18     42-     30  Add linux-next specific files for 20170228

---
0-DAY kernel test infrastructure                Open Source Technology Center
https://lists.01.org/pipermail/lkp                          Intel Corporation

Download attachment "dmesg-quantal-ivb41-50:20170228051301:i386-randconfig-r0-201709:4.10.0-rc8-02017-g9d876e7:59.gz" of type "application/gzip" (15611 bytes)

View attachment "reproduce-quantal-ivb41-50:20170228051301:i386-randconfig-r0-201709:4.10.0-rc8-02017-g9d876e7:59" of type "text/plain" (886 bytes)

View attachment "config-4.10.0-rc8-02017-g9d876e7" of type "text/plain" (80806 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ