linux-kernel - [LKP] [signal] b3eedf8d5b: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Thu, 28 Feb 2019 12:56:25 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     Jack Andersen <jackoalan@...il.com>
Cc:     linux-kernel@...r.kernel.org,
        Andrew Morton <akpm@...ux-foundation.org>,
        "Eric W. Biederman" <ebiederm@...ssion.com>,
        Christian Brauner <christian@...uner.io>,
        Thomas Gleixner <tglx@...utronix.de>,
        Oleg Nesterov <oleg@...hat.com>,
        Jack Andersen <jackoalan@...il.com>, lkp@...org
Subject: [LKP] [signal] b3eedf8d5b: BUG:unable_to_handle_kernel

FYI, we noticed the following commit (built with gcc-7):

commit: b3eedf8d5b385cacfc80f04bc6750df4f971b807 ("[PATCH] signal: always allocate siginfo for SI_TKILL")
url: https://github.com/0day-ci/linux/commits/Jack-Andersen/signal-always-allocate-siginfo-for-SI_TKILL/20190204-014412


in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 2G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------+----------+------------+
|                                                                         | v5.0-rc4 | b3eedf8d5b |
+-------------------------------------------------------------------------+----------+------------+
| boot_successes                                                          | 151      | 6          |
| boot_failures                                                           | 337      | 5          |
| invoked_oom-killer:gfp_mask=0x                                          | 212      | 5          |
| Mem-Info                                                                | 212      | 5          |
| Out_of_memory_and_no_killable_processes                                 | 210      | 2          |
| Kernel_panic-not_syncing:System_is_deadlocked_on_memory                 | 210      | 2          |
| BUG:kernel_in_stage                                                     | 6        |            |
| End_of_test:RCU_HOTPLUG                                                 | 86       |            |
| WARNING:at_kernel/rcu/rcutorture.c:#rcu_torture_stats_print[rcutorture] | 33       |            |
| RIP:rcu_torture_stats_print[rcutorture]                                 | 33       |            |
| End_of_test:FAILURE                                                     | 33       |            |
| BUG:unable_to_handle_kernel                                             | 0        | 3          |
| Oops:#[##]                                                              | 0        | 3          |
| RIP:__send_signal                                                       | 0        | 3          |
| Kernel_panic-not_syncing:Fatal_exception                                | 0        | 3          |
+-------------------------------------------------------------------------+----------+------------+



[   89.016930] BUG: unable to handle kernel NULL pointer dereference at 0000000000000009
[   89.019907] #PF error: [normal kernel read fault]
[   89.022004] PGD 0 P4D 0 
[   89.023198] Oops: 0000 [#1] SMP PTI
[   89.024568] CPU: 1 PID: 1162 Comm: modprobe Not tainted 5.0.0-rc4-00001-gb3eedf8 #7
[   89.026701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   89.028993] RIP: 0010:__send_signal+0x9d/0x5b0
[   89.030589] Code: 44 8d 53 ff 4d 8b 70 10 44 89 d1 45 89 d1 49 d3 ee 41 83 e6 01 0f 85 9f 01 00 00 b8 00 01 04 00 4c 0f a3 d0 0f 83 e8 01 00 00 <41> 83 7c 24 08 fa 0f 85 dd 00 00 00 f6 45 26 20 0f 85 d3 00 00 00
[   89.035619] RSP: 0018:ffffaad380ac7a10 EFLAGS: 00010047
[   89.037427] RAX: 0000000000040100 RBX: 0000000000000009 RCX: 0000000000000008
[   89.039592] RDX: ffff8eadbebd2201 RSI: ffff8eadbec81e01 RDI: 0000000000000000
[   89.041758] RBP: ffff8eadbec81e00 R08: ffff8eadbcbd2240 R09: 0000000000000008
[   89.043930] R10: 0000000000000008 R11: 00000000ffffffff R12: 0000000000000001
[   89.046115] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[   89.048296] FS:  00007fa3ad97d700(0000) GS:ffff8eadab500000(0000) knlGS:0000000000000000
[   89.050663] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.052609] CR2: 0000000000000009 CR3: 00000000005bc000 CR4: 00000000000406e0
[   89.054820] DR0: 00007f22859a8000 DR1: 0000000000000000 DR2: 0000000000000000
[   89.057032] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   89.059246] Call Trace:
[   89.060631]  ? vprintk_emit+0x1ae/0x2a0
[   89.062253]  do_send_sig_info+0x4a/0x90
[   89.063895]  __oom_kill_process+0xb6/0x260
[   89.065578]  oom_kill_process+0x1de/0x2a0
[   89.067246]  out_of_memory+0x2e8/0x510
[   89.068876]  __alloc_pages_slowpath+0xac4/0xdd0
[   89.070651]  __alloc_pages_nodemask+0x2e5/0x300
[   89.072424]  __vmalloc_node_range+0x205/0x2b0
[   89.074163]  ? load_module+0x1864/0x2990
[   89.075830]  module_alloc+0x71/0xc0
[   89.077425]  ? load_module+0x1864/0x2990
[   89.079091]  load_module+0x1864/0x2990
[   89.080734]  ? vfs_read+0x125/0x150
[   89.082314]  ? kernel_read_file+0x1a8/0x1d0
[   89.084039]  ? __do_sys_finit_module+0xe9/0x110
[   89.085834]  __do_sys_finit_module+0xe9/0x110
[   89.087597]  do_syscall_64+0x5b/0x180
[   89.089212]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   89.091105] RIP: 0033:0x7fa3ad4a8229
[   89.092742] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
[   89.098162] RSP: 002b:00007ffc69600e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   89.100601] RAX: ffffffffffffffda RBX: 000055e2740303b0 RCX: 00007fa3ad4a8229
[   89.102960] RDX: 0000000000000000 RSI: 000055e273502638 RDI: 0000000000000001
[   89.105292] RBP: 000055e273502638 R08: 0000000000000000 R09: 0000000000000001
[   89.107610] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   89.109895] R13: 000055e27402f590 R14: 0000000000040000 R15: 0000000000000000
[   89.112155] Modules linked in: ip_tunnel ieee802154_socket ieee802154 vmw_vsock_vmci_transport vsock vmw_vmci af_key rose kcm nfc hidp cmtp kernelcapi bnep rfcomm bluetooth ecdh_generic rfkill can_bcm can_raw can pptp gre l2tp_ppp l2tp_netlink l2tp_core ip6_udp_tunnel udp_tunnel pppoe pppox ppp_generic slhc crypto_user ib_core nfnetlink scsi_transport_iscsi dccp_ipv6 atm netrom appletalk psnap llc ax25 sctp libcrc32c dccp_ipv4 dccp virtio_blk ppdev bochs_drm crct10dif_pclmul crc32_pclmul crc32c_intel ttm ghash_clmulni_intel drm_kms_helper snd_pcm snd_timer drm joydev snd serio_raw soundcore pcspkr i6300esb floppy parport_pc parport qemu_fw_cfg virtio_pci virtio_ring ata_generic i2c_piix4 virtio pata_acpi
[   89.128902] CR2: 0000000000000009
[   89.130034] ---[ end trace f01d4d182d151a78 ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen

View attachment "config-5.0.0-rc4-00001-gb3eedf8" of type "text/plain" (200269 bytes)

View attachment "job-script" of type "text/plain" (4581 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (18688 bytes)