lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20180418140633.m2smnjkyrl3xk7gl@wfg-t540p.sh.intel.com>
Date:   Wed, 18 Apr 2018 22:06:33 +0800
From:   Fengguang Wu <fengguang.wu@...el.com>
To:     Linux Memory Management List <linux-mm@...ck.org>
Cc:     Thomas Gleixner <tglx@...utronix.de>,
        Ingo Molnar <mingo@...hat.com>,
        "H. Peter Anvin" <hpa@...or.com>, x86@...nel.org,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        Tom Lendacky <thomas.lendacky@....com>,
        Borislav Petkov <bp@...e.de>,
        Dan Williams <dan.j.williams@...el.com>,
        linux-kernel@...r.kernel.org, lkp@...org
Subject: [__cpa_process_fault] CPA: called for zero pte.

Hello,

FYI this happens in mainline kernel 4.17.0-rc1.
It's a new regression.

[    0.000000] Memory: 210548K/523752K available (16392K kernel code, 2355K rwdata, 5536K rodata, 2996K init, 21012K bss, 66128K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] Kernel/User page tables isolation: enabled
[    0.000000] ------------[ cut here ]------------
[    0.000000] CPA: called for zero pte. vaddr = ffffffffb2400000 cpa->vaddr = ffffffffb2400000
[    0.000000] WARNING: CPU: 0 PID: 0 at arch/x86/mm/pageattr.c:1189 __cpa_process_fault+0x572/0x5a0:
						__cpa_process_fault at arch/x86/mm/pageattr.c:1187 (discriminator 1)
[    0.000000] CPU: 0 PID: 0 Comm: swapper Tainted: G                T 4.17.0-rc1 #304
[    0.000000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    0.000000] RIP: 0010:__cpa_process_fault+0x572/0x5a0:
						__cpa_process_fault at arch/x86/mm/pageattr.c:1187 (discriminator 1)
[    0.000000] RSP: 0000:ffffffffb0a03c40 EFLAGS: 00010086
[    0.000000] RAX: 0000000000000000 RBX: ffffffffb2200000 RCX: 0000000000000002
[    0.000000] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000046
[    0.000000] RBP: ffffffffb0a03ca0 R08: 0000000000000001 R09: 0000000000000001
[    0.000000] R10: ffffffffb0a884f8 R11: 0000000000000000 R12: ffffffffb0a03df0
[    0.000000] R13: 00000000000000e3 R14: ffff880000000000 R15: ffffffffb2400000
[    0.000000] FS:  0000000000000000(0000) GS:ffff88001f800000(0000) knlGS:0000000000000000
[    0.000000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    0.000000] CR2: ffff88000bbe6000 CR3: 000000000a26a001 CR4: 00000000000606b0
[    0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    0.000000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[    0.000000] Call Trace:
[    0.000000]  __change_page_attr_set_clr+0x1a0/0xde0:
						__change_page_attr at arch/x86/mm/pageattr.c:1218
						 (inlined by) __change_page_attr_set_clr at arch/x86/mm/pageattr.c:1374
[    0.000000]  ? lock_release+0x350/0x380:
						lock_release at kernel/locking/lockdep.c:3943
[    0.000000]  change_page_attr_set_clr+0x17c/0x3f0:
						change_page_attr_set_clr at arch/x86/mm/pageattr.c:1475
[    0.000000]  ? 0xffffffffaf200000
[    0.000000]  set_memory_nonglobal+0x24/0x30:
						set_memory_nonglobal at arch/x86/mm/pageattr.c:1765
[    0.000000]  pti_set_kernel_image_nonglobal+0x73/0x80:
						pti_set_kernel_image_nonglobal at arch/x86/mm/pti.c:464
[    0.000000]  pti_init+0x4b/0x1fb:
						pti_clone_entry_text at arch/x86/mm/pti.c:385
						 (inlined by) pti_init at arch/x86/mm/pti.c:481
[    0.000000]  start_kernel+0x2ee/0x4da:
						start_kernel at init/main.c:601
[    0.000000]  x86_64_start_reservations+0x2a/0x2c:
						x86_64_start_reservations at arch/x86/kernel/head64.c:446
[    0.000000]  x86_64_start_kernel+0x77/0x7a:
						x86_64_start_kernel at arch/x86/kernel/head64.c:427
[    0.000000]  secondary_startup_64+0xa5/0xb0:
						secondary_startup_64 at arch/x86/kernel/head_64.S:242
[    0.000000] Code: 48 89 f7 31 db e8 5f 44 00 00 48 c1 e8 0c 49 89 44 24 30 eb 24 49 8b 04 24 4c 89 fe 48 c7 c7 f8 e8 80 b0 48 8b 10 e8 0e d9 07 00 <0f> 0b bb f2 ff ff ff eb 05 bb ff ff ff ff 48 83 c4 38 89 d8 5b
[    0.000000] ---[ end trace 9c220c3d1fdf6e76 ]---
[    0.000000] ------------[ cut here ]------------
[    0.000000] ------------[ cut here ]------------
[    0.000000] kernel BUG at arch/x86/mm/pageattr.c:175!
[    0.000000] invalid opcode: 0000 [#1] SMP PTI
[    0.000000] CPU: 0 PID: 0 Comm: swapper Tainted: G        W       T 4.17.0-rc1 #304
[    0.000000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    0.000000] RIP: 0010:cpa_flush_all+0x10/0x30:
						cpa_flush_all at arch/x86/mm/pageattr.c:175
[    0.000000] RSP: 0000:ffffffffb0a03db0 EFLAGS: 00010046
[    0.000000] RAX: 0000000000000082 RBX: 0000000000000000 RCX: 00000000fffffff2
[    0.000000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[    0.000000] RBP: ffffffffb0a03db0 R08: 0000000000000001 R09: 0000000000000000
[    0.000000] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffffb0a03e80
[    0.000000] R13: 0000000000003400 R14: 0000000000000000 R15: 0000000000000000
[    0.000000] FS:  0000000000000000(0000) GS:ffff88001f800000(0000) knlGS:0000000000000000
[    0.000000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    0.000000] CR2: ffff88000bbe6000 CR3: 000000000a26a001 CR4: 00000000000606b0
[    0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    0.000000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[    0.000000] Call Trace:
[    0.000000]  change_page_attr_set_clr+0x330/0x3f0:
						change_page_attr_set_clr at arch/x86/mm/pageattr.c:1497
[    0.000000]  ? 0xffffffffaf200000
[    0.000000]  set_memory_nonglobal+0x24/0x30:
						set_memory_nonglobal at arch/x86/mm/pageattr.c:1765
[    0.000000]  pti_set_kernel_image_nonglobal+0x73/0x80:
						pti_set_kernel_image_nonglobal at arch/x86/mm/pti.c:464
[    0.000000]  pti_init+0x4b/0x1fb:
						pti_clone_entry_text at arch/x86/mm/pti.c:385
						 (inlined by) pti_init at arch/x86/mm/pti.c:481
[    0.000000]  start_kernel+0x2ee/0x4da:
						start_kernel at init/main.c:601
[    0.000000]  x86_64_start_reservations+0x2a/0x2c:
						x86_64_start_reservations at arch/x86/kernel/head64.c:446
[    0.000000]  x86_64_start_kernel+0x77/0x7a:
						x86_64_start_kernel at arch/x86/kernel/head64.c:427
[    0.000000]  secondary_startup_64+0xa5/0xb0:
						secondary_startup_64 at arch/x86/kernel/head_64.S:242
[    0.000000] Code: 7d c8 ff 14 25 30 b9 95 b0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 00 55 48 89 e5 ff 14 25 e0 82 a8 b0 f6 c4 02 75 02 <0f> 0b 48 89 fe ba 01 00 00 00 48 c7 c7 f0 c2 23 af e8 2a f1 0f
[    0.000000] RIP: cpa_flush_all+0x10/0x30:
						cpa_flush_all at arch/x86/mm/pageattr.c:175 RSP: ffffffffb0a03db0
[    0.000000] ---[ end trace 9c220c3d1fdf6e77 ]---
[    0.000000] Kernel panic - not syncing: Fatal exception

Attached the full dmesg, kconfig and reproduce scripts.

Thanks,
Fengguang

View attachment "dmesg-yocto-lkp-hsw01-35:20180417111646:x86_64-randconfig-n0-04171111:4.17.0-rc1:304" of type "text/plain" (15736 bytes)

View attachment ".config" of type "text/plain" (108883 bytes)

View attachment "reproduce-yocto-lkp-hsw01-35:20180417111646:x86_64-randconfig-n0-04171111:4.17.0-rc1:304" of type "text/plain" (774 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ