linux-kernel - [LKP] [timens] 3cc8de9dcb: RIP:posix_get

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20180930031812.GI15893@shao2-debian>
Date:   Sun, 30 Sep 2018 11:18:12 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     Dmitry Safonov <dima@...sta.com>
Cc:     linux-kernel@...r.kernel.org,
        Dmitry Safonov <0x7f454c46@...il.com>,
        Andrei Vagin <avagin@...nvz.org>,
        Dmitry Safonov <dima@...sta.com>,
        Adrian Reber <adrian@...as.de>,
        Andy Lutomirski <luto@...nel.org>,
        Christian Brauner <christian.brauner@...ntu.com>,
        Cyrill Gorcunov <gorcunov@...nvz.org>,
        "Eric W. Biederman" <ebiederm@...ssion.com>,
        "H. Peter Anvin" <hpa@...or.com>, Ingo Molnar <mingo@...hat.com>,
        Jeff Dike <jdike@...toit.com>, Oleg Nesterov <oleg@...hat.com>,
        Pavel Emelyanov <xemul@...tuozzo.com>,
        Shuah Khan <shuah@...nel.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        containers@...ts.linux-foundation.org, criu@...nvz.org,
        linux-api@...r.kernel.org, x86@...nel.org, lkp@...org
Subject: [LKP] [timens] 3cc8de9dcb: RIP:posix_get_boottime

FYI, we noticed the following commit (built with gcc-6):

commit: 3cc8de9dcbe53955edcc65122f169666b4f6cbd9 ("[RFC 04/20] timens: Introduce CLOCK_BOOTTIME offset")
url: https://github.com/0day-ci/linux/commits/Dmitry-Safonov/ns-Introduce-Time-Namespace/20180920-194322


in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -cpu IvyBridge -smp 4 -m 2G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+---------------------------------------------------------+------------+------------+
|                                                         | 05dd6588ce | 3cc8de9dcb |
+---------------------------------------------------------+------------+------------+
| boot_successes                                          | 2          | 0          |
| boot_failures                                           | 13         | 10         |
| invoked_oom-killer:gfp_mask=0x                          | 2          | 6          |
| Mem-Info                                                | 2          | 6          |
| Out_of_memory_and_no_killable_processes                 | 2          | 6          |
| Kernel_panic-not_syncing:System_is_deadlocked_on_memory | 2          | 6          |
| BUG:unable_to_handle_kernel                             | 10         | 4          |
| Oops:#[##]                                              | 11         | 4          |
| RIP:timens_adjust_monotonic                             | 11         |            |
| Kernel_panic-not_syncing:Fatal_exception                | 11         | 4          |
| RIP:posix_get_boottime                                  | 0          | 4          |
+---------------------------------------------------------+------------+------------+



[    9.781291] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030
[    9.782843] PGD 0 P4D 0 
[    9.783186] Oops: 0000 [#1] PTI
[    9.783604] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.0-rc4-00099-g3cc8de9d #1
[    9.784565] RIP: 0010:posix_get_boottime+0x3c/0xad
[    9.785183] Code: 8b 04 25 28 00 00 00 48 89 45 e0 31 c0 e8 20 67 03 00 48 8b 04 25 40 50 04 82 48 8b 80 c0 04 00 00 bf 01 00 00 00 48 8b 40 30 <4c> 8b 60 30 e8 10 88 ff ff 48 89 c7 e8 d9 12 ff ff 4d 85 e4 48 89
[    9.787540] RSP: 0018:ffffc9000000be88 EFLAGS: 00010293
[    9.788211] RAX: 0000000000000000 RBX: ffffc9000000bed0 RCX: ffff880076898040
[    9.789112] RDX: 0000000000000000 RSI: ffffffff8113136f RDI: 0000000000000001
[    9.790028] RBP: ffffc9000000beb8 R08: 0000000000000000 R09: 0000000000000000
[    9.790936] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81c111a0
[    9.791840] R13: 0000000000000007 R14: 00007ffd481e35e0 R15: 0000000000000000
[    9.792747] FS:  00007fd2fc3c9940(0000) GS:ffffffff82041000(0000) knlGS:0000000000000000
[    9.793769] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    9.794510] CR2: 0000000000000030 CR3: 000000007fb2e000 CR4: 00000000001406b0
[    9.795413] Call Trace:
[    9.795738]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[    9.796422]  __se_sys_clock_gettime+0x51/0xa7
[    9.796970]  ? lockdep_hardirqs_on+0x144/0x19e
[    9.797540]  __x64_sys_clock_gettime+0x1a/0x1d
[    9.798098]  do_syscall_64+0x73/0x1d2
[    9.798569]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[    9.799251] RIP: 0033:0x7ffd481eabbc
[    9.799709] Code: f8 48 8b 15 36 c5 ff ff 48 89 16 48 8b 15 34 c5 ff ff 48 89 56 08 3b 03 0f 84 0a ff ff ff eb db 49 63 fb b8 e4 00 00 00 0f 05 <48> 83 c4 10 5b 41 5c 41 5d 5d c3 66 0f 1f 84 00 00 00 00 00 55 48
[    9.802405] RSP: 002b:00007ffd481e3588 EFLAGS: 00000202 ORIG_RAX: 00000000000000e4
[    9.803735] RAX: ffffffffffffffda RBX: 00007ffd481e7080 RCX: 00007ffd481eabbc
[    9.804844] RDX: ffffffffffffffff RSI: 00007ffd481e35e0 RDI: 0000000000000007
[    9.806155] RBP: 00007ffd481e35b0 R08: 0000000000000004 R09: 000000032ddb0949
[    9.807568] R10: 000dc97587800000 R11: 0000000000000202 R12: 00007ffd481e3620
[    9.808965] R13: 00007ffd481e3594 R14: 0000000000000001 R15: 0000000000000000
[    9.810438] Modules linked in: ip_tables x_tables
[    9.811034] CR2: 0000000000000030
[    9.811629] ---[ end trace a935ae5a1b8f0750 ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen

View attachment "config-4.19.0-rc4-00099-g3cc8de9d" of type "text/plain" (114429 bytes)

View attachment "job-script" of type "text/plain" (4523 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (11596 bytes)