| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20191223091512.GL2760@shao2-debian>
Date: Mon, 23 Dec 2019 17:15:12 +0800
From: kernel test robot <lkp@...el.com>
To: Jeff Vander Stoep <jeffv@...gle.com>
Cc: Paul Moore <paul@...l-moore.com>,
Stephen Smalley <sds@...ho.nsa.gov>,
Jovana Knezevic <jovanak@...gle.com>,
LKML <linux-kernel@...r.kernel.org>, selinux@...r.kernel.org,
lkp@...ts.01.org
Subject: [selinux] 66f8e2f03c: RIP:sidtab_hash_stats
FYI, we noticed the following commit (built with gcc-7):
commit: 66f8e2f03c02e812002f8e9e465681cc62edda5b ("selinux: sidtab reverse lookup hash table")
https://git.kernel.org/cgit/linux/kernel/git/pcmoore/selinux.git next
in testcase: leaking_addresses
with following parameters:
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------------------------------+----------+------------+
| | v5.5-rc1 | 66f8e2f03c |
+------------------------------------------------------------------------+----------+------------+
| boot_successes | 5431 | 0 |
| boot_failures | 91 | 3 |
| INFO:rcu_sched_self-detected_stall_on_CPU | 5 | |
| RIP:__memcpy | 5 | |
| BUG:kernel_hang_in_boot_stage | 9 | |
| Assertion_failed | 9 | |
| WARNING:at_fs/xfs/xfs_message.c:#assfail[xfs] | 9 | |
| RIP:assfail[xfs] | 9 | |
| INFO:rcu_sched_detected_stalls_on_CPUs/tasks | 8 | |
| RIP:clear_page_rep | 1 | |
| WARNING:at_fs/iomap/direct-io.c:#iomap_dio_actor | 8 | |
| RIP:iomap_dio_actor | 8 | |
| WARNING:at_net/sched/sch_generic.c:#dev_watchdog | 18 | |
| RIP:dev_watchdog | 18 | |
| RIP:native_safe_halt | 13 | |
| RIP:__wake_up_common | 1 | |
| RIP:esb_timer_keepalive | 1 | |
| WARNING:at_kernel/trace/trace_hwlat.c:#start_kthread | 15 | |
| RIP:start_kthread | 15 | |
| WARNING:at_arch/x86/mm/ioremap.c:#__ioremap_caller | 8 | |
| RIP:__ioremap_caller | 8 | |
| BUG:soft_lockup-CPU##stuck_for#s![inetd:#] | 1 | |
| RIP:new_slab | 1 | |
| Kernel_panic-not_syncing:softlockup:hung_tasks | 5 | |
| RIP:copy_user_generic_string | 2 | |
| BUG:soft_lockup-CPU##stuck_for#s![(md-udevd):#] | 1 | |
| RIP:smp_call_function_single | 1 | |
| BUG:kernel_NULL_pointer_dereference,address | 1 | 3 |
| Oops:#[##] | 1 | 3 |
| RIP:iter_file_splice_write | 1 | |
| Kernel_panic-not_syncing:Fatal_exception | 2 | 3 |
| RIP:do_syscall_64 | 1 | |
| BUG:soft_lockup-CPU##stuck_for#s![swapper:#] | 1 | |
| RIP:io_serial_in | 2 | |
| WARNING:at_net/mac80211/tx.c:#__ieee80211_csa_update_counter[mac80211] | 1 | |
| RIP:__ieee80211_csa_update_counter[mac80211] | 1 | |
| RIP:console_unlock | 1 | |
| kernel_BUG_at_fs/buffer.c | 1 | |
| invalid_opcode:#[##] | 1 | |
| RIP:__block_commit_write | 1 | |
| WARNING:at_kernel/trace/ring_buffer.c:#rb_set_head_page | 1 | |
| RIP:rb_set_head_page | 1 | |
| BUG:soft_lockup-CPU##stuck_for#s![sed:#] | 2 | |
| RIP:kvm_async_pf_task_wait | 1 | |
| BUG:soft_lockup-CPU##stuck_for#s![ld:#] | 1 | |
| RIP:simple_write_begin | 1 | |
| RIP:__do_softirq | 1 | |
| RIP:__memset | 1 | |
| RIP:_raw_spin_unlock_irqrestore | 1 | |
| IP-Config:Auto-configuration_of_network_failed | 9 | |
| BUG:kernel_reboot-without-warning_in_test_stage | 1 | |
| RIP:sidtab_hash_stats | 0 | 3 |
+------------------------------------------------------------------------+----------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp@...el.com>
[ 52.068624] BUG: kernel NULL pointer dereference, address: 0000000000000c08
[ 52.070367] #PF: supervisor read access in kernel mode
[ 52.071799] #PF: error_code(0x0000) - not-present page
[ 52.073217] PGD 0 P4D 0
[ 52.074363] Oops: 0000 [#1] SMP PTI
[ 52.075587] CPU: 1 PID: 597 Comm: perl Not tainted 5.5.0-rc1-00001-g66f8e2f03c02e #1
[ 52.077279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 52.079076] RIP: 0010:sidtab_hash_stats+0x25/0xb0
[ 52.080445] Code: 00 00 00 00 00 66 66 66 66 90 49 89 f3 65 ff 05 e9 be 41 5b 45 31 d2 48 81 c7 08 0c 00 00 45 31 c9 31 c9 45 31 c0 31 d2 31 f6 <48> 8b 07 48 85 c0 75 17 eb 3f 48 8b 40 58 41 39 d1 41 89 f2 44 0f
[ 52.084258] RSP: 0018:ffffb84c00907e80 EFLAGS: 00010246
[ 52.085728] RAX: ffffffffa694b400 RBX: ffffffffa6946700 RCX: 0000000000000000
[ 52.087428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000c08
[ 52.089113] RBP: ffffa0ed62d9b000 R08: 0000000000000000 R09: 0000000000000000
[ 52.090804] R10: 0000000000000000 R11: ffffa0ed62d9b000 R12: 0000560dfe8373a0
[ 52.092483] R13: 0000000000002000 R14: ffffb84c00907f08 R15: 0000000000000000
[ 52.094176] FS: 00007fb7731af400(0000) GS:ffffa0ed7fd00000(0000) knlGS:0000000000000000
[ 52.095990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.097527] CR2: 0000000000000c08 CR3: 000000022265c000 CR4: 00000000000406e0
[ 52.099227] Call Trace:
[ 52.100425] security_sidtab_hash_stats+0x2c/0x50
[ 52.102772] sel_read_sidtab_hash_stats+0x48/0x90
[ 52.105338] vfs_read+0x9b/0x160
[ 52.107601] ksys_read+0xa1/0xe0
[ 52.109829] do_syscall_64+0x5b/0x1f0
[ 52.112118] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 52.114642] RIP: 0033:0x7fb77287f1f0
[ 52.116843] Code: 73 01 c3 48 8b 0d b8 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d d9 c1 20 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 4e fc ff ff 48 89 04 24
[ 52.123645] RSP: 002b:00007ffd023f4df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 52.126827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb77287f1f0
[ 52.129882] RDX: 0000000000002000 RSI: 0000560dfe8373a0 RDI: 0000000000000005
[ 52.131767] RBP: 0000000000002000 R08: 0000560dfe82dc40 R09: 0000000000002010
[ 52.133380] R10: 0000000000000030 R11: 0000000000000246 R12: 0000560dfe8373a0
[ 52.135011] R13: 0000560dfe00a010 R14: 0000000000000005 R15: 0000560dfe8302d0
[ 52.136614] Modules linked in: binfmt_misc sr_mod cdrom sg ata_generic pata_acpi bochs_drm drm_vram_helper drm_ttm_helper ttm intel_rapl_msr drm_kms_helper ppdev syscopyarea intel_rapl_common crct10dif_pclmul crc32_pclmul sysfillrect crc32c_intel snd_pcm sysimgblt fb_sys_fops ghash_clmulni_intel ata_piix snd_timer drm libata joydev aesni_intel crypto_simd snd cryptd glue_helper soundcore serio_raw pcspkr i2c_piix4 parport_pc floppy parport ip_tables
[ 52.144300] CR2: 0000000000000c08
[ 52.145489] ---[ end trace 5a55d87c8b28fabe ]---
To reproduce:
# build kernel
cd linux
cp config-5.5.0-rc1-00001-g66f8e2f03c02e .config
make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
View attachment "config-5.5.0-rc1-00001-g66f8e2f03c02e" of type "text/plain" (202505 bytes)
View attachment "job-script" of type "text/plain" (4845 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (15416 bytes)
Powered by blists - more mailing lists