linux-kernel - [keys] 068df09181: BUG:unable_to_handle_page_fault_for

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20191218093030.GD2760@shao2-debian>
Date:   Wed, 18 Dec 2019 17:30:30 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     David Howells <dhowells@...hat.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        David Howells <dhowells@...hat.com>, lkp@...ts.01.org
Subject: [keys] 068df09181: BUG:unable_to_handle_page_fault_for_address

FYI, we noticed the following commit (built with gcc-7):

commit: 068df091816a3247b2e3b92f81addc4aa36df354 ("keys: Replace uid/gid/perm permissions checking with an ACL")
https://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git keys-acl

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+--------------------------------------------------------------------------------------+----------+------------+
|                                                                                      | v5.5-rc1 | 068df09181 |
+--------------------------------------------------------------------------------------+----------+------------+
| boot_successes                                                                       | 25       | 0          |
| boot_failures                                                                        | 0        | 4          |
| BUG:unable_to_handle_page_fault_for_address                                          | 0        | 3          |
| Oops:#[##]                                                                           | 0        | 3          |
| EIP:key_alloc                                                                        | 0        | 3          |
| Kernel_panic-not_syncing:Fatal_exception                                             | 0        | 3          |
| BUG:kernel_hang_in_early-boot_stage,last_printk:Probing_EDD(edd=off_to_disable)...ok | 0        | 1          |
+--------------------------------------------------------------------------------------+----------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <rong.a.chen@...el.com>


[    6.648828] BUG: unable to handle page fault for address: 082f0000
[    6.649911] #PF: supervisor write access in kernel mode
[    6.650787] #PF: error_code(0x0002) - not-present page
[    6.651676] *pdpt = 0000000000000000 *pde = f000ff53f000ff53 
[    6.652713] Oops: 0002 [#1] PTI
[    6.653300] CPU: 0 PID: 1 Comm: swapper Not tainted 5.5.0-rc1-00001-g068df091816a3 #1
[    6.654815] EIP: key_alloc+0x250/0x640
[    6.655578] Code: 36 fc d6 ff 0f b7 45 e4 89 7b 28 66 89 43 4c 8b 46 04 be 01 00 00 00 66 89 43 4e 8b 45 f0 89 43 44 8b 45 08 89 43 48 8b 45 10 <0f> c1 30 31 d2 6a 00 85 f6 0f 94 c2 b8 90 ce 24 c2 31 c9 e8 f8 56
[    6.659065] EAX: 082f0000 EBX: c67d6a80 ECX: c2690334 EDX: c67d6a9c
[    6.660231] ESI: 00000001 EDI: c21e5080 EBP: e51e7edc ESP: e51e7eb8
[    6.661378] DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068 EFLAGS: 00010292
[    6.662644] CR0: 80050033 CR2: 082f0000 CR3: 02546000 CR4: 000406b0
[    6.663758] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    6.664893] DR6: fffe0ff0 DR7: 00000400
[    6.665602] Call Trace:
[    6.666102]  keyring_alloc+0x25/0xb0
[    6.666779]  fsverity_init_signature+0x2d/0xb3
[    6.667602]  fsverity_init+0x46/0x6e
[    6.668275]  ? fsverity_check_hash_algs+0xe9/0xe9
[    6.669157]  do_one_initcall+0x10d/0x304
[    6.669902]  ? parse_args+0x1d1/0x2d0
[    6.670603]  ? trace_initcall_level+0x22/0xac
[    6.671402]  kernel_init_freeable+0x109/0x1b9
[    6.672184]  ? rest_init+0xa0/0xa0
[    6.672806]  kernel_init+0xd/0x190
[    6.673430]  ret_from_fork+0x2e/0x38
[    6.674085] Modules linked in:
[    6.674627] CR2: 00000000082f0000
[    6.675207] ---[ end trace ac299a1de4fa1fed ]---


To reproduce:

        # build kernel
	cd linux
	cp config-5.5.0-rc1-00001-g068df091816a3 .config
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=i386 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen


View attachment "config-5.5.0-rc1-00001-g068df091816a3" of type "text/plain" (123721 bytes)

View attachment "job-script" of type "text/plain" (4258 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (9844 bytes)