| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20220414145519.GE6935@xsang-OptiPlex-9020>
Date: Thu, 14 Apr 2022 22:55:19 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Christoph Hellwig <hch@....de>
Cc: Christoph Hellwig <hch@....de>, lkp@...ts.01.org, lkp@...el.com,
ltp@...ts.linux.it, LKML <linux-kernel@...r.kernel.org>
Subject: [block, fs] ab9946bbfc: canonical_address#:#[##]
Greeting,
FYI, we noticed the following commit (built with gcc-11):
commit: ab9946bbfcc9b6e9bb91b59dd2bf96c84ea1d92b ("block, fs: move sync_blockdev calls out of sync_filesystem")
git://git.infradead.org/users/hch/misc.git sync_filesystem
in testcase: ltp
version: ltp-x86_64-14c1f76-1_20220313
with following parameters:
disk: 1HDD
fs: btrfs
test: syscalls-06
ucode: 0xec
test-description: The LTP testsuite contains a collection of tools for testing the Linux kernel and related features.
test-url: http://linux-test-project.github.io/
on test machine: 4 threads Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz with 32G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 232.185978][ T322]
[ 232.201626][ T322] chdir01.c:105: TPASS: nobody: chdir("testfile") returned correct value: ENOTDIR (20)
[ 232.201632][ T322]
[ 232.216468][ T322] chdir01.c:112: TINFO: Testing 'keep_out'
[ 232.216474][ T322]
[ 232.226390][ T3807] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[ 232.228289][ T322] chdir01.c:105: TPASS: root: chdir("keep_out") returned correct value: SUCCESS (0)
[ 232.239059][ T3807] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[ 232.239062][ T3807] CPU: 1 PID: 3807 Comm: chdir01 Tainted: G I 5.18.0-rc1-00017-gab9946bbfcc9 #2
[ 232.239065][ T3807] Hardware name: Dell Inc. OptiPlex 7040/0Y7WYT, BIOS 1.1.1 10/07/2015
[ 232.249554][ T322]
[ 232.258992][ T3807] RIP: 0010:sync_fs_blockdev (kbuild/src/x86_64/block/bdev.c:185 kbuild/src/x86_64/block/bdev.c:202 kbuild/src/x86_64/block/bdev.c:199)
[ 232.258997][ T3807] Code: 48 83 ec 08 80 3c 02 00 0f 85 87 00 00 00 48 8b 9b d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 56 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 30 48 8d
All code
========
0: 48 83 ec 08 sub $0x8,%rsp
4: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
8: 0f 85 87 00 00 00 jne 0x95
e: 48 8b 9b d8 00 00 00 mov 0xd8(%rbx),%rbx
15: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
1c: fc ff df
1f: 48 8d 7b 30 lea 0x30(%rbx),%rdi
23: 48 89 fa mov %rdi,%rdx
26: 48 c1 ea 03 shr $0x3,%rdx
2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction
2e: 75 56 jne 0x86
30: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
37: fc ff df
3a: 48 8b 5b 30 mov 0x30(%rbx),%rbx
3e: 48 rex.W
3f: 8d .byte 0x8d
Code starting with the faulting instruction
===========================================
0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
4: 75 56 jne 0x5c
6: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
d: fc ff df
10: 48 8b 5b 30 mov 0x30(%rbx),%rbx
14: 48 rex.W
15: 8d .byte 0x8d
[ 232.259000][ T3807] RSP: 0018:ffffc90000e8fde0 EFLAGS: 00010206
[ 232.272565][ T322] chdir01.c:105: TPASS: nobody: chdir("keep_out") returned correct value: EACCES (13)
[ 232.279627][ T3807]
[ 232.279628][ T3807] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8888636f1000
[ 232.279630][ T3807] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000030
[ 232.279631][ T3807] RBP: ffffffffc18d9e40 R08: 0000000000000001 R09: 0000000080000163
[ 232.279633][ T3807] R10: ffff888850d14000 R11: 0000000000000001 R12: ffff88885f948000
[ 232.279634][ T3807] R13: ffffed110a57b58a R14: 0000000000000004 R15: ffff888852bdac50
[ 232.279635][ T3807] FS: 00007f7d228ba5c0(0000) GS:ffff8887c1c80000(0000) knlGS:0000000000000000
[ 232.283030][ T322]
[ 232.289620][ T3807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 232.289622][ T3807] CR2: 0000557aa2713008 CR3: 00000001868ca005 CR4: 00000000003706e0
[ 232.289623][ T3807] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 232.289625][ T3807] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 232.289626][ T3807] Call Trace:
[ 232.289627][ T3807] <TASK>
[ 232.289628][ T3807] generic_shutdown_super (kbuild/src/x86_64/fs/super.c:446)
[ 232.312228][ T322] chdir01.c:112: TINFO: Testing 'subdir'
[ 232.318674][ T3807] kill_anon_super (kbuild/src/x86_64/fs/super.c:1043 kbuild/src/x86_64/fs/super.c:1057)
[ 232.318677][ T3807] btrfs_kill_super (kbuild/src/x86_64/fs/btrfs/super.c:2423) btrfs
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
sudo bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
sudo bin/lkp run generated-yaml-file
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
--
0-DAY CI Kernel Test Service
https://01.org/lkp
View attachment "config-5.18.0-rc1-00017-gab9946bbfcc9" of type "text/plain" (167336 bytes)
View attachment "job-script" of type "text/plain" (5761 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (34792 bytes)
View attachment "ltp" of type "text/plain" (122771 bytes)
View attachment "job.yaml" of type "text/plain" (4774 bytes)
Powered by blists - more mailing lists