| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20201120065403.GB7016@xsang-OptiPlex-9020>
Date: Fri, 20 Nov 2020 14:54:03 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Eric Dumazet <edumazet@...gle.com>
Cc: Daniel Borkmann <daniel@...earbox.net>,
syzbot <syzkaller@...glegroups.com>,
LKML <linux-kernel@...r.kernel.org>,
Linux Memory Management List <linux-mm@...ck.org>,
lkp@...ts.01.org, lkp@...el.com
Subject: [bpf] 8aaeed81fc:
WARNING:at_kernel/locking/lockdep.c:#lockdep_register_key
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 8aaeed81fcb917b5cf4976932c5baefa1471128b ("bpf: Fix error path in htab_map_alloc()")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master
in testcase: trinity
version: trinity-static-i386-x86_64-f93256fb_2019-08-28
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------------------+------------+------------+
| | cb5dc5b062 | 8aaeed81fc |
+-------------------------------------------------------------+------------+------------+
| WARNING:at_kernel/locking/lockdep.c:#lockdep_register_key | 0 | 6 |
| EIP:lockdep_register_key | 0 | 6 |
| WARNING:at_kernel/locking/lockdep.c:#lockdep_unregister_key | 0 | 6 |
| EIP:lockdep_unregister_key | 0 | 6 |
+-------------------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 202.414615] WARNING: CPU: 0 PID: 2271 at kernel/locking/lockdep.c:1175 lockdep_register_key+0x1b0/0x1e0
[ 202.415871] Modules linked in:
[ 202.416299] CPU: 0 PID: 2271 Comm: trinity-c2 Not tainted 5.9.0-13423-g8aaeed81fcb9 #1
[ 202.417432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 202.418556] EIP: lockdep_register_key+0x1b0/0x1e0
[ 202.419192] Code: c9 0f 85 49 ff ff ff 68 f4 e2 e4 c3 68 6c 84 e4 c3 e8 29 bf d5 01 0f 0b 58 5a e9 31 ff ff ff 8d b4 26 00 00 00 00 8d 74 26 00 <0f> 0b 8d 65 f4 5b 5e 5f 5d c3 8d b6 00 00 00 00 89 4d f0 89 c2 b8
[ 202.421718] EAX: 00000001 EBX: c49841f4 ECX: 00000000 EDX: 00000000
[ 202.422554] ESI: 00000000 EDI: c4984000 EBP: f1aabe54 ESP: f1aabe44
[ 202.423396] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010202
[ 202.424297] CR0: 80050033 CR2: b7c736e4 CR3: 316f3000 CR4: 000406d0
[ 202.425145] Call Trace:
[ 202.425507] htab_map_alloc+0x54/0x5a0
[ 202.426017] map_create+0x10a/0x4f0
[ 202.426501] ? __might_sleep+0x2e/0x80
[ 202.427010] __do_sys_bpf+0x423/0x18f0
[ 202.427522] ? do_clock_gettime+0x57/0xa0
[ 202.428077] ? lock_release+0x88/0x1a0
[ 202.428585] ? exit_to_user_mode_prepare+0x29/0x100
[ 202.429252] __ia32_sys_bpf+0x10/0x20
[ 202.430789] ? __ia32_sys_bpf+0x10/0x20
[ 202.431339] do_int80_syscall_32+0x2c/0x40
[ 202.431890] entry_INT80_32+0x12c/0x12c
[ 202.432414] EIP: 0x8097522
[ 202.432815] Code: 89 c8 c3 90 8d 74 26 00 85 c0 c7 01 01 00 00 00 75 d8 a1 cc 3c ad 08 eb d1 66 90 66 90 66 90 66 90 66 90 66 90 66 90 90 cd 80 <c3> 8d b6 00 00 00 00 8d bc 27 00 00 00 00 8b 10 a3 f4 3c ad 08 85
[ 202.474287] EAX: ffffffda EBX: 00000000 ECX: 08f16330 EDX: 00000014
[ 202.475322] ESI: 000000ec EDI: b961eb7b EBP: 6e9ccbde ESP: bfcc5198
[ 202.476368] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b EFLAGS: 00000296
[ 202.477487] CPU: 0 PID: 2271 Comm: trinity-c2 Not tainted 5.9.0-13423-g8aaeed81fcb9 #1
[ 202.478882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 202.480255] Call Trace:
[ 202.480681] dump_stack+0x54/0x68
[ 202.481268] __warn.cold+0x22/0x39
[ 202.481810] report_bug+0xbf/0xf0
[ 202.482402] ? lockdep_register_key+0x1b0/0x1e0
[ 202.483212] ? exc_overflow+0x40/0x40
[ 202.483814] handle_bug+0x28/0x60
[ 202.484348] exc_invalid_op+0x24/0x60
[ 202.484932] handle_exception+0x143/0x143
[ 202.485569] EIP: lockdep_register_key+0x1b0/0x1e0
[ 202.486380] Code: c9 0f 85 49 ff ff ff 68 f4 e2 e4 c3 68 6c 84 e4 c3 e8 29 bf d5 01 0f 0b 58 5a e9 31 ff ff ff 8d b4 26 00 00 00 00 8d 74 26 00 <0f> 0b 8d 65 f4 5b 5e 5f 5d c3 8d b6 00 00 00 00 89 4d f0 89 c2 b8
[ 202.493668] EAX: 00000001 EBX: c49841f4 ECX: 00000000 EDX: 00000000
[ 202.494774] ESI: 00000000 EDI: c4984000 EBP: f1aabe54 ESP: f1aabe44
[ 202.495871] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 EFLAGS: 00010202
[ 202.497088] ? enqueue_task_dl+0x85b/0xd60
[ 202.497856] ? exc_overflow+0x40/0x40
[ 202.498523] ? lockdep_register_key+0x1b0/0x1e0
[ 202.499328] htab_map_alloc+0x54/0x5a0
[ 202.499974] map_create+0x10a/0x4f0
[ 202.500596] ? __might_sleep+0x2e/0x80
[ 202.501242] __do_sys_bpf+0x423/0x18f0
[ 202.501875] ? do_clock_gettime+0x57/0xa0
[ 202.502528] ? lock_release+0x88/0x1a0
[ 202.503168] ? exit_to_user_mode_prepare+0x29/0x100
[ 202.503933] __ia32_sys_bpf+0x10/0x20
[ 202.504561] ? __ia32_sys_bpf+0x10/0x20
[ 202.505173] do_int80_syscall_32+0x2c/0x40
[ 202.505837] entry_INT80_32+0x12c/0x12c
[ 202.506436] EIP: 0x8097522
[ 202.506888] Code: 89 c8 c3 90 8d 74 26 00 85 c0 c7 01 01 00 00 00 75 d8 a1 cc 3c ad 08 eb d1 66 90 66 90 66 90 66 90 66 90 66 90 66 90 90 cd 80 <c3> 8d b6 00 00 00 00 8d bc 27 00 00 00 00 8b 10 a3 f4 3c ad 08 85
[ 202.509788] EAX: ffffffda EBX: 00000000 ECX: 08f16330 EDX: 00000014
[ 202.510687] ESI: 000000ec EDI: b961eb7b EBP: 6e9ccbde ESP: bfcc5198
[ 202.511654] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b EFLAGS: 00000296
[ 202.516675] ---[ end trace a53f2f3149ae6ed7 ]---
To reproduce:
# build kernel
cd linux
cp config-5.9.0-13423-g8aaeed81fcb9 .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
Oliver Sang
View attachment "config-5.9.0-13423-g8aaeed81fcb9" of type "text/plain" (182607 bytes)
View attachment "job-script" of type "text/plain" (4323 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (29164 bytes)
View attachment "trinity" of type "text/plain" (9369 bytes)
Powered by blists - more mailing lists