lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Tue, 16 Apr 2019 09:01:24 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     "Paul E. McKenney" <paulmck@...ux.ibm.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>, lkp@...org
Subject: [torture] 33e04e4512: BUG:unable_to_handle_kernel

FYI, we noticed the following commit (built with gcc-7):

commit: 33e04e4512797b5e0242f452d0027b096d43d006 ("torture: Allow inter-stutter interval to be specified")
https://git.kernel.org/cgit/linux/kernel/git/paulmck/linux-rcu.git dev.2019.04.09b

in testcase: rcutorture
with following parameters:

	runtime: 300s
	test: default
	torture_type: tasks

test-description: rcutorture is rcutorture kernel module load/unload test.
test-url: https://www.kernel.org/doc/Documentation/RCU/torture.txt


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+--------------------------------------------------------------------+------------+------------+
|                                                                    | 7c932cda19 | 33e04e4512 |
+--------------------------------------------------------------------+------------+------------+
| boot_successes                                                     | 23         | 16         |
| boot_failures                                                      | 21         | 31         |
| WARNING:at_kernel/rcu/rcutorture.c:#rcu_torture_writer[rcutorture] | 14         | 13         |
| RIP:rcu_torture_writer[rcutorture]                                 | 14         | 13         |
| BUG:kernel_reboot-without-warning_in_test_stage                    | 7          |            |
| BUG:soft_lockup-CPU##stuck_for#s                                   | 0          | 5          |
| RIP:free_unref_page                                                | 0          | 1          |
| Kernel_panic-not_syncing:softlockup:hung_tasks                     | 0          | 5          |
| BUG:kernel_hang_in_boot-around-mounting-root_stage                 | 0          | 1          |
| RIP:free_reserved_area                                             | 0          | 4          |
| BUG:unable_to_handle_kernel                                        | 0          | 12         |
| Oops:#[##]                                                         | 0          | 12         |
| Kernel_panic-not_syncing:Fatal_exception                           | 0          | 12         |
+--------------------------------------------------------------------+------------+------------+



[   20.150080] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[   20.153862] tasks-torture: torture_shuffle task started
[   20.154767] #PF error: [INSTR]
[   20.161581] PGD 0 P4D 0 
[   20.164301] Oops: 0010 [#1] SMP PTI
[   20.167187] CPU: 1 PID: 573 Comm: modprobe Not tainted 5.1.0-rc1-00105-g33e04e4 #2
[   20.171616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   20.176345] RIP: 0010:          (null)
[   20.179630] Code: Bad RIP value.
[   20.182604] RSP: 0000:ffffa7a78140fc90 EFLAGS: 00010206
[   20.186045] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[   20.190299] RDX: ffff89d7eb824200 RSI: ffffffffc03b1040 RDI: ffffffffc03b1020
[   20.194170] RBP: ffffffffc03ffd88 R08: ffff89d825f7b9c0 R09: ffff89d707c03980
[   20.198134] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffffc041d338
[   20.201975] R13: ffffffffc041d368 R14: ffffffffc0402500 R15: ffffffffc04026c0
[   20.205845] FS:  00007faf0abb6700(0000) GS:ffff89d83fd00000(0000) knlGS:0000000000000000
[   20.210047] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   20.213575] CR2: ffffffffffffffd6 CR3: 00000001eb806000 CR4: 00000000000006e0
[   20.217485] Call Trace:
[   20.220067]  rcu_torture_init+0x534/0x1000 [rcutorture]
[   20.223381]  ? 0xffffffffc0432000
[   20.226264]  do_one_initcall+0x46/0x1e4
[   20.230720]  ? _cond_resched+0x19/0x30
[   20.233990]  ? kmem_cache_alloc_trace+0x3b/0x1d0
[   20.237322]  do_init_module+0x5b/0x210
[   20.240222]  load_module+0x1871/0x1f40
[   20.243058]  ? ima_post_read_file+0xe2/0x120
[   20.245953]  ? __do_sys_finit_module+0xe9/0x110
[   20.248898]  __do_sys_finit_module+0xe9/0x110
[   20.251851]  do_syscall_64+0x5b/0x1a0
[   20.254414]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   20.257372] RIP: 0033:0x7faf0a6e1229
[   20.259934] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
[   20.268666] RSP: 002b:00007ffc8cb92a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   20.272501] RAX: ffffffffffffffda RBX: 0000561e8de3e3d0 RCX: 00007faf0a6e1229
[   20.276305] RDX: 0000000000000000 RSI: 0000561e8de3d510 RDI: 0000000000000005
[   20.280050] RBP: 0000561e8de3d510 R08: 0000000000000000 R09: 000000000000000e
[   20.283826] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[   20.293063] R13: 0000561e8de3e4e0 R14: 0000000000040000 R15: 0000561e8de3d4d0
[   20.296743] Modules linked in: rcutorture(+) torture sr_mod cdrom bochs_drm sg ttm drm_kms_helper ppdev crct10dif_pclmul crc32_pclmul crc32c_intel ata_generic ghash_clmulni_intel pata_acpi syscopyarea sysfillrect sysimgblt fb_sys_fops snd_pcm aesni_intel snd_timer drm ata_piix snd crypto_simd cryptd libata joydev soundcore glue_helper serio_raw pcspkr parport_pc i2c_piix4 parport floppy ip_tables
[   20.314280] CR2: 0000000000000000
[   20.317405] ---[ end trace ba8f2eb0ce74c268 ]---


To reproduce:

        # build kernel
	cd linux
	cp config-5.1.0-rc1-00105-g33e04e4 .config
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 prepare
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 modules_prepare
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 SHELL=/bin/bash
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 bzImage


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen


View attachment "config-5.1.0-rc1-00105-g33e04e4" of type "text/plain" (188652 bytes)

View attachment "job-script" of type "text/plain" (4730 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (14772 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ