lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20181211091125.GK23332@shao2-debian>
Date:   Tue, 11 Dec 2018 17:11:25 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     Thomas Garnier <thgarnie@...gle.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        Thomas Garnier <thgarnie@...gle.com>, lkp@...org
Subject: [LKP] [x86] 8013f9d778: BUG:unable_to_handle_kernel

FYI, we noticed the following commit (built with gcc-7):

commit: 8013f9d7788ba96216e85fad045490a796d38a09 ("x86: Use symbol name in jump table for PIE support")
https://github.com/thgarnie/linux.git kaslr_pie_v6_prepare

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 5c0051be47 | 8013f9d778 |
+------------------------------------------+------------+------------+
| boot_successes                           | 4          | 0          |
| boot_failures                            | 0          | 8          |
| BUG:unable_to_handle_kernel              | 0          | 8          |
| Oops:#[##]                               | 0          | 8          |
| RIP:jump_label_apply_nops                | 0          | 8          |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 8          |
+------------------------------------------+------------+------------+



[    8.085523] BUG: unable to handle kernel paging request at 000000008284ed28
[    8.086930] #PF error: [normal kernel read fault]
[    8.087974] PGD 0 P4D 0 
[    8.088620] Oops: 0000 [#1] SMP PTI
[    8.089412] CPU: 0 PID: 1 Comm: systemd Not tainted 4.20.0-rc5-next-20181206-00003-g8013f9d #1
[    8.091182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    8.092984] RIP: 0010:jump_label_apply_nops+0x3b/0x60
[    8.094035] Code: 02 00 00 48 c1 e5 04 48 01 dd 48 39 eb 74 3a 72 0b eb 36 48 83 c3 10 48 39 dd 76 2d 48 8b 43 08 48 89 c2 83 e0 01 48 83 e2 fc <48> 8b 54 13 10 83 e2 01 38 c2 75 dd 31 f6 48 89 df 48 83 c3 10 e8
[    8.097637] RSP: 0018:ffffc90000633d08 EFLAGS: 00010206
[    8.098740] RAX: 0000000000000000 RBX: ffffffffa0004000 RCX: ffffffffa00022ac
[    8.100206] RDX: 00000000e284ad18 RSI: ffffc90000633be7 RDI: ffffffffa0005240
[    8.101598] RBP: ffffffffa0004010 R08: ffffffff82005000 R09: 0000000000000005
[    8.102988] R10: 0000000000030f70 R11: 0000000000000000 R12: ffffc900008ce758
[    8.104380] R13: 0000000000000000 R14: ffffc900008ce218 R15: 0000000000000001
[    8.105776] FS:  00007f67343b3940(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
[    8.107459] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    8.108619] CR2: 000000008284ed28 CR3: 000000007f7ce000 CR4: 00000000000406f0
[    8.110002] Call Trace:
[    8.111260]  module_finalize+0x158/0x1a0
[    8.112154]  load_module+0x12c6/0x1cd0
[    8.112999]  ? ima_post_read_file+0xe2/0x120
[    8.113916]  ? kernel_read_file+0x1a8/0x1d0
[    8.114822]  ? __do_sys_finit_module+0xe9/0x110
[    8.115783]  __do_sys_finit_module+0xe9/0x110
[    8.116729]  do_syscall_64+0x5b/0x180
[    8.117558]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[    8.118602] RIP: 0033:0x7f673298c229
[    8.119409] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
[    8.122948] RSP: 002b:00007ffe88f4c7d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[    8.124550] RAX: ffffffffffffffda RBX: 000055a657389eb0 RCX: 00007f673298c229
[    8.125928] RDX: 0000000000000000 RSI: 00007f67332d4265 RDI: 0000000000000004
[    8.127316] RBP: 00007f67332d4265 R08: 0000000000000000 R09: 000055a65738bc80
[    8.128693] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[    8.130068] R13: 000055a657389f30 R14: 0000000000020000 R15: 000055a6572eb6f1
[    8.131466] Modules linked in:
[    8.132191] CR2: 000000008284ed28
[    8.132994] ---[ end trace 0c1e0593f63a4afa ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen

View attachment "config-4.20.0-rc5-next-20181206-00003-g8013f9d" of type "text/plain" (168554 bytes)

View attachment "job-script" of type "text/plain" (4235 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (12748 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ