linux-kernel - [x86/traps] 68a05c6247: PANIC:double

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20200531124052.GB12456@shao2-debian>
Date:   Sun, 31 May 2020 20:40:52 +0800
From:   kernel test robot <lkp@...el.com>
To:     Thomas Gleixner <tglx@...utronix.de>
Cc:     Alexandre Chartre <alexandre.chartre@...cle.com>,
        Masami Hiramatsu <mhiramat@...nel.org>,
        Peter Zijlstra <peterz@...radead.org>,
        Andy Lutomirski <luto@...nel.org>,
        LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org
Subject: [x86/traps] 68a05c6247: PANIC:double_fault

Greeting,

FYI, we noticed the following commit (built with gcc-8):

commit: 68a05c6247d2aa67f5ada1009ffd19758e5914ea ("x86/traps: Mark fixup_bad_iret() noinstr")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: kernel-selftests
with following parameters:

	group: kselftests-x86

test-description: The kernel contains a set of "self tests" under the tools/testing/selftests/ directory. These are intended to be small unit tests to exercise individual code paths in the kernel.
test-url: https://www.kernel.org/doc/Documentation/kselftest.txt


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-----------------------------------------------------------+------------+------------+
|                                                           | b5f7e5db38 | 68a05c6247 |
+-----------------------------------------------------------+------------+------------+
| boot_successes                                            | 8          | 4          |
| boot_failures                                             | 4          | 3          |
| Kernel_panic-not_syncing:Attempted_to_kill_init!exitcode= | 4          | 2          |
| PANIC:double_fault                                        | 0          | 1          |
| double_fault:#[##]                                        | 0          | 1          |
| RIP:fixup_bad_iret                                        | 0          | 1          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt     | 0          | 1          |
+-----------------------------------------------------------+------------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp@...el.com>


[  223.398565] 
[  223.414051] ok 5 selftests: x86: check_initial_reg_state_32
[  223.414091] 
[  223.454445] # selftests: x86: sigreturn_32
[  223.454485] 
[  223.571324] traps: PANIC: double fault, error_code: 0x0
[  223.571330] double fault: 0000 [#1] PREEMPT DEBUG_PAGEALLOC KASAN PTI
[  223.571336] CPU: 0 PID: 1912 Comm: sigreturn_32 Not tainted 5.7.0-rc5-00292-g68a05c6247d2a #1
[  223.571342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  223.571346] RIP: 0010:fixup_bad_iret+0x37/0x140
[  223.571359] Code: 48 c7 c7 80 0b 81 ba 41 54 49 bc 00 00 00 00 00 fc ff df 53 48 8d 9d d8 fe ff ff 48 c1 eb 03 4a 8d 04 23 48 81 ec 00 01 00 00 <48> c7 85 d8 fe ff ff b3 8a b5 41 48 c7 85 e0 fe ff ff c8 0f 60 bb
[  223.571363] RSP: 0000:fffffe0000001fe8 EFLAGS: 00010086
[  223.571371] RAX: fffffbc0000003fd RBX: 1fffffc0000003fd RCX: ffffffffba400aa0
[  223.571377] RDX: 0000000000000000 RSI: ffffffffba400df5 RDI: ffffffffba810b80
[  223.571383] RBP: fffffe0000002110 R08: 0000000000000000 R09: 0000000000000000
[  223.571388] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  223.571394] R13: fffffe0000002120 R14: 0000000000000000 R15: 0000000000000000
[  223.571400] FS:  0000000000000000(0003) GS:ffffffffbb87e000(0063) knlGS:00000000f7c1b700
[  223.571404] CS:  0010 DS: 0003 ES: 0003 CR0: 0000000080050033
[  223.571410] CR2: fffffe0000001fd8 CR3: 00000001ddc30000 CR4: 00000000000406f0
[  223.571413] Call Trace:
[  223.571416]  <ENTRY_TRAMPOLINE>
[  223.571419]  ? error_entry+0xdf/0xf0
[  223.571423]  ? general_protection+0x5/0x30
[  223.571428]  ? restore_regs_and_return_to_kernel+0x2d/0x2d
[  223.571431]  </ENTRY_TRAMPOLINE>
[  223.571434] Modules linked in: ip_tables x_tables
[  223.571445] ---[ end trace 15aaca2c6f41e51b ]---
[  223.571448] RIP: 0010:fixup_bad_iret+0x37/0x140
[  223.571460] Code: 48 c7 c7 80 0b 81 ba 41 54 49 bc 00 00 00 00 00 fc ff df 53 48 8d 9d d8 fe ff ff 48 c1 eb 03 4a 8d 04 23 48 81 ec 00 01 00 00 <48> c7 85 d8 fe ff ff b3 8a b5 41 48 c7 85 e0 fe ff ff c8 0f 60 bb
[  223.571464] RSP: 0000:fffffe0000001fe8 EFLAGS: 00010086
[  223.571472] RAX: fffffbc0000003fd RBX: 1fffffc0000003fd RCX: ffffffffba400aa0
[  223.571477] RDX: 0000000000000000 RSI: ffffffffba400df5 RDI: ffffffffba810b80
[  223.571482] RBP: fffffe0000002110 R08: 0000000000000000 R09: 0000000000000000
[  223.571488] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  223.571493] R13: fffffe0000002120 R14: 0000000000000000 R15: 0000000000000000
[  223.571499] FS:  0000000000000000(0003) GS:ffffffffbb87e000(0063) knlGS:00000000f7c1b700
[  223.571503] CS:  0010 DS: 0003 ES: 0003 CR0: 0000000080050033
[  223.571508] CR2: fffffe0000001fd8 CR3: 00000001ddc30000 CR4: 00000000000406f0
[  223.571513] Kernel panic - not syncing: Fatal exception in interrupt
[  223.571533] Kernel Offset: 0x36200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

Elapsed time: 240

qemu-img create -f qcow2 disk-vm-snb-195-0 256G


To reproduce:

        # build kernel
	cd linux
	cp config-5.7.0-rc5-00292-g68a05c6247d2a .config
	make HOSTCC=gcc-8 CC=gcc-8 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
lkp


View attachment "config-5.7.0-rc5-00292-g68a05c6247d2a" of type "text/plain" (152070 bytes)

View attachment "job-script" of type "text/plain" (5275 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (23228 bytes)