linux-kernel - [lkp-robot] [x86/cpuid] 0b00de857a: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 18 Oct 2017 10:20:24 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Andi Kleen <ak@...ux.intel.com>
Cc:     Ingo Molnar <mingo@...nel.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        Jonathan McDowell <noodles@...th.li>,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        Peter Zijlstra <peterz@...radead.org>,
        LKML <linux-kernel@...r.kernel.org>,
        "H. Peter Anvin" <hpa@...or.com>, tipbuild@...or.com, lkp@...org
Subject: [lkp-robot] [x86/cpuid]  0b00de857a: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-4.9):

commit: 0b00de857a648dafe7020878c7a27cf776f5edf4 ("x86/cpuid: Add generic table for CPUID dependencies")
https://git.kernel.org/cgit/linux/kernel/git/tip/tip.git x86/fpu

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -m 256M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-----------------------------------------------------+------------+------------+
|                                                     | cbe9637502 | 0b00de857a |
+-----------------------------------------------------+------------+------------+
| boot_successes                                      | 22         | 0          |
| boot_failures                                       | 29         | 28         |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 29         |            |
| EIP:note_page                                       | 29         |            |
| WARNING:kernel_stack                                | 3          |            |
| BUG:unable_to_handle_kernel                         | 0          | 28         |
| Oops:#[##]                                          | 0          | 28         |
| EIP:__ring_buffer_alloc                             | 0          | 28         |
| Kernel_panic-not_syncing:Fatal_exception            | 0          | 28         |
| BUG:kernel_in_stage                                 | 0          | 3          |
+-----------------------------------------------------+------------+------------+



[    0.796377] BUG: unable to handle kernel NULL pointer dereference at 00000020
[    0.796493] IP: __ring_buffer_alloc+0x34/0x126
[    0.796493] *pdpt = 0000000000000000 *pde = f000ff53f000ff53 
[    0.796493] Oops: 0002 [#1]
[    0.796493] CPU: 0 PID: 1 Comm: swapper Not tainted 4.14.0-rc4-00129-g0b00de8 #1
[    0.796493] task: 4f480000 task.stack: 4f47a000
[    0.796493] EIP: __ring_buffer_alloc+0x34/0x126
[    0.796493] EFLAGS: 00210202 CPU: 0
[    0.796493] EAX: 00000010 EBX: 00000010 ECX: 00000000 EDX: 014080c0
[    0.796493] ESI: 00000001 EDI: 000f4240 EBP: 4f47bf1c ESP: 4f47bf0c
[    0.796493]  DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068
[    0.796493] CR0: 80050033 CR2: 00000020 CR3: 01c74000 CR4: 000006b0
[    0.796493] Call Trace:
[    0.796493]  ring_buffer_benchmark_init+0x1f/0x11f
[    0.796493]  ? ftrace_init+0x374/0x374
[    0.796493]  do_one_initcall+0x8e/0x136
[    0.796493]  ? parse_args+0xe2/0x1e8
[    0.796493]  kernel_init_freeable+0xe8/0x15b
[    0.796493]  ? rest_init+0x110/0x110
[    0.796493]  kernel_init+0xd/0xd0
[    0.796493]  ret_from_fork+0x19/0x30
[    0.796493] Code: 8b 15 70 75 b9 41 89 c7 89 4d f0 89 d0 81 c2 f7 00 00 00 f7 d8 21 d0 ba c0 80 40 01 e8 bf 19 07 00 85 c0 89 c3 0f 84 ea 00 00 00 <c7> 40 10 00 00 00 00 8d 87 f3 0f 00 00 31 d2 bf f4 0f 00 00 8b
[    0.796493] EIP: __ring_buffer_alloc+0x34/0x126 SS:ESP: 0068:4f47bf0c
[    0.796493] CR2: 0000000000000020
[    0.796493] ---[ end trace ae8a21ea1c6bc359 ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.14.0-rc4-00129-g0b00de8" of type "text/plain" (82835 bytes)

View attachment "job-script" of type "text/plain" (3737 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (7568 bytes)