linux-kernel - [ipmi] e68b857bde: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20181223065439.cdir7d63aaqcrsgu@inn2.lkp.intel.com>
Date:   Sun, 23 Dec 2018 14:54:39 +0800
From:   kernel test robot <lkp@...el.com>
To:     Corey Minyard <cminyard@...sta.com>
Cc:     Tejun Heo <tj@...nel.org>,
        "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>,
        LKML <linux-kernel@...r.kernel.org>,
        Corey Minyard <cminyard@...sta.com>, lkp@...org
Subject: [ipmi]  e68b857bde: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-6):

commit: e68b857bdec3a24ac096a3d83a7ea70c4d3bd967 ("ipmi: Don't initialize anything in the core until something uses it")
https://github.com/cminyard/linux-ipmi for-next

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 5e6ddecfc9 | e68b857bde |
+------------------------------------------+------------+------------+
| boot_successes                           | 4          | 0          |
| boot_failures                            | 0          | 4          |
| BUG:unable_to_handle_kernel              | 0          | 4          |
| Oops:#[##]                               | 0          | 4          |
| RIP:__srcu_read_lock                     | 0          | 4          |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 4          |
+------------------------------------------+------------+------------+



[   15.282690] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[   15.283027] PGD 0 P4D 0 
[   15.283027] Oops: 0002 [#1] PREEMPT PTI
[   15.283027] CPU: 0 PID: 1 Comm: swapper Not tainted 4.19.0-04690-ge68b857 #2
[   15.283027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   15.283027] RIP: 0010:__srcu_read_lock+0x18/0x1d
[   15.283027] Code: 52 fb 08 00 48 c7 83 30 01 00 00 00 00 00 00 5b 5d c3 e8 3c 98 f1 00 8b 87 08 01 00 00 48 8b 97 30 01 00 00 83 e0 01 48 63 c8 <48> ff 04 ca c3 e8 1f 98 f1 00 48 63 f6 48 8b 87 30 01 00 00 48 ff
[   15.283027] RSP: 0000:ffffc9000000be88 EFLAGS: 00010246
[   15.283027] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   15.283027] RDX: 0000000000000000 RSI: ffffffff82d36780 RDI: ffffffff83eaedc0
[   15.283027] RBP: ffffffff82d36ec0 R08: ffffffff82d36780 R09: 0000000000000000
[   15.283027] R10: ffff88012966e769 R11: ffffffff83560187 R12: ffffffff83442349
[   15.283027] R13: 00000000ffffffff R14: 0000000000000000 R15: 0000000000000000
[   15.283027] FS:  0000000000000000(0000) GS:ffffffff82c69000(0000) knlGS:0000000000000000
[   15.283027] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   15.283027] CR2: 0000000000000000 CR3: 0000000002c3e000 CR4: 00000000000406b0
[   15.283027] Call Trace:
[   15.283027]  ipmi_smi_watcher_register+0x33/0x86
[   15.283027]  ? scan_for_dmi_ipmi+0x113/0x113
[   15.283027]  ipmi_wdog_init+0xbc/0xff
[   15.283027]  do_one_initcall+0x4e/0x162
[   15.283027]  ? do_early_param+0x8b/0x8b
[   15.283027]  ? do_early_param+0x8b/0x8b
[   15.283027]  kernel_init_freeable+0x134/0x1cc
[   15.283027]  ? rest_init+0xb7/0xb7
[   15.283027]  kernel_init+0xa/0xf5
[   15.283027]  ret_from_fork+0x24/0x30
[   15.283027] CR2: 0000000000000000
[   15.283027] random: get_random_bytes called from init_oops_id+0x22/0x31 with crng_init=0
[   15.283027] ---[ end trace ca31777e6c8253ec ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
lkp

View attachment "config-4.19.0-04690-ge68b857" of type "text/plain" (131994 bytes)

View attachment "job-script" of type "text/plain" (4258 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (10948 bytes)