linux-kernel - [LKP] [ipc] eb7e666ca9: general_protection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20180907044550.GE1110@shao2-debian>
Date:   Fri, 7 Sep 2018 12:45:50 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     David Howells <dhowells@...hat.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>, lkp@...org
Subject: [LKP] [ipc]  eb7e666ca9: general_protection_fault:#[##]

FYI, we noticed the following commit (built with gcc-7):

commit: eb7e666ca9015b4aa0a438ff1f11d4a4a2178503 ("ipc: Convert mqueue fs to fs_context")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -cpu Haswell,+smep,+smap -smp 2 -m 2G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 1b34a4bb5b | eb7e666ca9 |
+------------------------------------------+------------+------------+
| boot_successes                           | 13         | 2          |
| boot_failures                            | 2          | 50         |
| invoked_oom-killer:gfp_mask=0x           | 2          | 1          |
| Mem-Info                                 | 2          | 1          |
| general_protection_fault:#[##]           | 0          | 28         |
| RIP:mqueue_get_tree                      | 0          | 46         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 50         |
| BUG:unable_to_handle_kernel              | 0          | 22         |
| Oops:#[##]                               | 0          | 22         |
| RIP:lockref_get                          | 0          | 4          |
+------------------------------------------+------------+------------+



[   28.401815] audit: type=1326 audit(1536315279.341:5): auid=4294967295 uid=65534 gid=65534 ses=4294967295 subj=kernel pid=829 comm="trinity-c5" exe="/bin/trinity" sig=9 arch=c000003e syscall=8 compat=0 ip=0x7ffb292ffaf7 code=0x0
[   30.547506] Guest personality initialized and is inactive
[   30.557091] VMCI host device registered (name=vmci, major=10, minor=58)
[   30.558894] Initialized host personality
[   30.562135] NET: Registered protocol family 40
[   31.879456] general protection fault: 0000 [#1] SMP PTI
[   31.880921] CPU: 0 PID: 976 Comm: trinity-c1 Not tainted 4.19.0-rc1-00108-geb7e666 #1
[   31.883035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   31.885249] RIP: 0010:mqueue_get_tree+0x2c/0xb0
[   31.886492] Code: 44 00 00 41 54 55 53 4c 8b 67 10 48 89 fb 48 c7 c7 20 f5 13 83 e8 74 a0 63 00 49 8b 04 24 48 8b 80 f0 02 00 00 48 85 c0 74 25 <48> 8b 40 08 48 8b 68 68 48 85 ed 74 09 48 8d 7d 58 e8 9e 73 0b 00
[   31.891047] RSP: 0018:ffffc900007abdf0 EFLAGS: 00010202
[   31.892435] RAX: 23403f296f232364 RBX: ffff88007e25be00 RCX: 0000000000000000
[   31.894212] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8313f520
[   31.895985] RBP: ffff88002c02d000 R08: ffff880072826360 R09: ffff880063c03980
[   31.897760] R10: 000000000000002c R11: ffff880063d1a500 R12: ffff88002c509528
[   31.899532] R13: 0000000000000000 R14: ffff88007e94a620 R15: 0000000000000000
[   31.901303] FS:  00007ffb299d8b40(0000) GS:ffff880072800000(0000) knlGS:0000000000000000
[   31.903482] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   31.904967] CR2: 00007ffb2804257c CR3: 000000002c0a4004 CR4: 00000000000606f0
[   31.906753] DR0: 00007ffb2768f000 DR1: 0000000000000000 DR2: 0000000000000000
[   31.908525] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   31.910308] Call Trace:
[   31.911140]  vfs_get_tree+0x5e/0x150
[   31.912209]  mq_create_mount+0x5b/0xb0
[   31.913288]  mq_init_ns+0x37/0x50
[   31.914301]  copy_ipcs+0xc0/0x150
[   31.915291]  create_new_namespaces+0xac/0x1b0
[   31.916500]  unshare_nsproxy_namespaces+0x59/0xb0
[   31.917770]  ksys_unshare+0x1c6/0x370
[   31.918832]  __x64_sys_unshare+0xe/0x20
[   31.919947]  do_syscall_64+0x5b/0x180
[   31.921009]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   31.922380] RIP: 0033:0x7ffb292fb229
[   31.923416] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
[   31.927970] RSP: 002b:00007fffd9fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   31.930028] RAX: ffffffffffffffda RBX: 0000000000000110 RCX: 00007ffb292fb229
[   31.931795] RDX: 468120420675484d RSI: 0000000000000000 RDI: 0000000058050900
[   31.933566] RBP: 00007fffd9fd90d0 R08: 0004d85828000dc3 R09: 00000000b7b7b7b7
[   31.935332] R10: 00000000e0e0e0e0 R11: 0000000000000246 R12: 0000000000000002
[   31.937113] R13: 00007ffb299ca058 R14: 00007ffb299d8ad8 R15: 00007ffb299ca000
[   31.938887] Modules linked in: vmw_vsock_vmci_transport vsock vmw_vmci af_key ieee802154_socket ieee802154 can_bcm can_raw can pptp gre l2tp_ppp l2tp_netlink l2tp_core ip6_udp_tunnel udp_tunnel pppoe pppox ppp_generic slhc crypto_user nfnetlink scsi_transport_iscsi dccp_ipv6 atm sctp dccp_ipv4 dccp sr_mod cdrom sg ata_generic pata_acpi crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel pcbc ppdev aesni_intel crypto_simd snd_pcm cryptd glue_helper snd_timer snd soundcore pcspkr ata_piix serio_raw i2c_piix4 libata floppy parport_pc parport ip_tables
[   31.953200] ---[ end trace 2f6a6cde8c8f43f3 ]---
[   31.954493] RIP: 0010:mqueue_get_tree+0x2c/0xb0
[   31.955749] Code: 44 00 00 41 54 55 53 4c 8b 67 10 48 89 fb 48 c7 c7 20 f5 13 83 e8 74 a0 63 00 49 8b 04 24 48 8b 80 f0 02 00 00 48 85 c0 74 25 <48> 8b 40 08 48 8b 68 68 48 85 ed 74 09 48 8d 7d 58 e8 9e 73 0b 00
[   31.962442] RSP: 0018:ffffc900007abdf0 EFLAGS: 00010202
[   31.963842] RAX: 23403f296f232364 RBX: ffff88007e25be00 RCX: 0000000000000000
[   31.965952] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8313f520
[   31.967760] RBP: ffff88002c02d000 R08: ffff880072826360 R09: ffff880063c03980
[   31.969859] R10: 000000000000002c R11: ffff880063d1a500 R12: ffff88002c509528
[   31.971644] R13: 0000000000000000 R14: ffff88007e94a620 R15: 0000000000000000
[   31.973744] FS:  00007ffb299d8b40(0000) GS:ffff880072800000(0000) knlGS:0000000000000000
[   31.975939] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   31.977662] CR2: 00007ffb2804257c CR3: 000000002c0a4004 CR4: 00000000000606f0
[   31.979739] DR0: 00007ffb2768f000 DR1: 0000000000000000 DR2: 0000000000000000
[   31.981539] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   31.983637] Kernel panic - not syncing: Fatal exception
[   31.985065] Kernel Offset: disabled

Elapsed time: 40

#!/bin/bash


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong, Chen

View attachment "config-4.19.0-rc1-00108-geb7e666" of type "text/plain" (167700 bytes)

View attachment "job-script" of type "text/plain" (4118 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (15104 bytes)