linux-kernel - [ebtables] c70604d6de: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20171005233236.sdfou36yesqr7vfq@inn>
Date:   Fri, 6 Oct 2017 07:32:36 +0800
From:   kernel test robot <fengguang.wu@...el.com>
To:     Artem Savkov <asavkov@...hat.com>
Cc:     Florian Westphal <fw@...len.de>,
        Pablo Neira Ayuso <pablo@...filter.org>,
        netdev@...r.kernel.org, linux-kernel@...r.kernel.org,
        netfilter-devel@...r.kernel.org, Artem Savkov <asavkov@...hat.com>,
        lkp@...org
Subject: [ebtables]  c70604d6de: BUG:unable_to_handle_kernel

FYI, we noticed the following commit (built with gcc-6):

commit: c70604d6dee4cf80f12ad9e5befb148b7074e01a ("ebtables: fix race condition in frame_filter_net_init()")
url: https://github.com/0day-ci/linux/commits/Artem-Savkov/ebtables-fix-race-condition-in-frame_filter_net_init/20170929-113820
base: https://git.kernel.org/cgit/linux/kernel/git/pablo/nf.git master

in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -cpu kvm64,+ssse3 -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------+------------+------------+
|                                                 | 7f4f7dd441 | c70604d6de |
+-------------------------------------------------+------------+------------+
| boot_successes                                  | 78         | 0          |
| boot_failures                                   | 7          | 48         |
| BUG:kernel_reboot-without-warning_in_test_stage | 3          |            |
| BUG:kernel_hang_in_test_stage                   | 4          |            |
| BUG:unable_to_handle_kernel                     | 0          | 48         |
| Oops:#[##]                                      | 0          | 48         |
| Kernel_panic-not_syncing:Fatal_exception        | 0          | 48         |
+-------------------------------------------------+------------+------------+



[  125.480690] BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
[  125.484529] IP: nf_register_net_hook+0x5/0x23f
[  125.484529] PGD 0 P4D 0 
[  125.484529] Oops: 0000 [#1] SMP
[  125.484529] Modules linked in:
[  125.484529] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.14.0-rc1-00003-gc70604d #20
[  125.484529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[  125.484529] task: ffff957a157c0040 task.stack: ffffb0610189c000
[  125.484529] RIP: 0010:nf_register_net_hook+0x5/0x23f
[  125.484529] RSP: 0018:ffffb0610189fd50 EFLAGS: 00010206
[  125.484529] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000006133
[  125.484529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffb0635dc0
[  125.484529] RBP: ffffb0610189fd88 R08: 00000024ad26ca23 R09: ffffffffafc59283
[  125.484529] R10: ffffb0610189fd88 R11: ffffffffb0c42280 R12: 0000000000000001
[  125.484529] R13: 0000000000000028 R14: ffffffffb0635dc0 R15: 0000000000000000
[  125.484529] FS:  0000000000000000(0000) GS:ffff957a1f400000(0000) knlGS:0000000000000000
[  125.484529] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.484529] CR2: 0000000000000018 CR3: 000000022ceaf000 CR4: 00000000000006e0
[  125.484529] Call Trace:
[  125.484529]  ? nf_register_net_hooks+0x3d/0x6b
[  125.484529]  ebt_register_table+0x28f/0x33b
[  125.484529]  broute_net_init+0x1e/0x20
[  125.484529]  ops_init+0x10f/0x13b
[  125.484529]  ? set_debug_rodata+0x17/0x17
[  125.484529]  register_pernet_operations+0xcc/0x15c
[  125.484529]  register_pernet_subsys+0x2b/0x41
[  125.484529]  ? ebtables_init+0x4e/0x4e
[  125.484529]  ebtable_broute_init+0x15/0x28
[  125.484529]  do_one_initcall+0x90/0x138
[  125.484529]  ? set_debug_rodata+0x17/0x17
[  125.484529]  kernel_init_freeable+0x1c6/0x24e
[  125.484529]  ? rest_init+0xca/0xca
[  125.484529]  kernel_init+0xe/0xfa
[  125.484529]  ret_from_fork+0x2a/0x40
[  125.484529] Code: 07 fb fa af c6 05 b4 20 9e 01 01 e8 74 a3 46 fe 48 85 db 75 02 0f 0b 4c 89 e7 ff d3 e8 58 fe ff ff 5b 41 5c 5d c3 0f 1f 44 00 00 <80> 7e 18 05 75 24 83 7e 1c 00 0f 85 24 02 00 00 48 8b 46 08 48 
[  125.484529] RIP: nf_register_net_hook+0x5/0x23f RSP: ffffb0610189fd50
[  125.484529] CR2: 0000000000000018
[  125.484529] ---[ end trace 05e64d060da4593c ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
lkp

View attachment "config-4.14.0-rc1-00003-gc70604d" of type "text/plain" (163091 bytes)

View attachment "job-script" of type "text/plain" (4317 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (24644 bytes)