linux-kernel - [random] e85c0fc1d9: BUG:unable_to_handle_page_fault_for

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <202209302231.88ba36c2-yujie.liu@intel.com>
Date:   Fri, 30 Sep 2022 22:26:11 +0800
From:   kernel test robot <yujie.liu@...el.com>
To:     "Jason A. Donenfeld" <Jason@...c4.com>
CC:     <lkp@...ts.01.org>, <lkp@...el.com>, Theodore Ts'o <tytso@....edu>,
        "Nadia Heninger" <nadiah@...ucsd.edu>,
        Tom Ristenpart <ristenpart@...nell.edu>,
        "Eric Biggers" <ebiggers@...gle.com>,
        <linux-kernel@...r.kernel.org>
Subject: [random] e85c0fc1d9: BUG:unable_to_handle_page_fault_for_address

Greeting,

FYI, we noticed the following commit (built with gcc-11):

commit: e85c0fc1d94c52483a603651748d4c76d6aa1c6b ("random: do not pretend to handle premature next security model")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

in testcase: boot

on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


[   24.589830][  T129] BUG: unable to handle page fault for address: ee3fe000
[   24.590759][  T129] #PF: supervisor read access in kernel mode
[   24.591447][  T129] #PF: error_code(0x0000) - not-present page
[   24.592077][  T129] *pde = 05734067 *pte = 00000000 
[   24.592642][  T129] Oops: 0000 [#1] SMP
[   24.593070][  T129] CPU: 0 PID: 129 Comm: cryptomgr_test Not tainted 5.18.0-rc6-00024-ge85c0fc1d94c #1
[   24.594122][  T129] EIP: blake2s_compress_generic+0x177/0x1bb0
[   24.594767][  T129] Code: 44 96 1a c5 8b 95 6c ff ff ff 89 47 24 8b 85 0c ff ff ff a3 40 96 1a c5 8d 04 d5 00 00 00 00 03 85 bc fe ff ff 8b 18 8b 50 08 <8b> 48 10 8b 70 14 89 9d 64 ff ff ff 89 9d 74 ff ff ff 8b 58 04 89
[   24.596892][  T129] EAX: ee3fdff0 EBX: 00000000 ECX: 00000781 EDX: 00000000
[   24.597662][  T129] ESI: 00a86b49 EDI: c426edc0 EBP: c7487e94 ESP: c7487d50
[   24.598443][  T129] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010086
[   24.599231][  T129] CR0: 80050033 CR2: ee3fe000 CR3: 0475f000 CR4: 000406d0
[   24.600044][  T129] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[   24.600845][  T129] DR6: fffe0ff0 DR7: 00000400
[   24.601374][  T129] Call Trace:
[   24.601745][  T129]  blake2s_update+0x86/0x140
[   24.602278][  T129]  add_device_randomness+0x5f/0xb0
[   24.602765][  T129]  __exit_signal+0x11c/0x4d0
[   24.603281][  T129]  release_task+0x34d/0x800
[   24.603772][  T129]  exit_notify+0x180/0x370
[   24.604264][  T129]  do_exit+0x369/0x660
[   24.604707][  T129]  ? crypto_acomp_scomp_free_ctx+0x60/0x60
[   24.605327][  T129]  kthread_exit+0x3c/0x40
[   24.605794][  T129]  __module_put_and_kthread_exit+0x33/0x40
[   24.606417][  T129]  cryptomgr_test+0x4c/0x50
[   24.606876][  T129]  kthread+0x1ab/0x1f0
[   24.607313][  T129]  ? crypto_acomp_scomp_free_ctx+0x60/0x60
[   24.607941][  T129]  ? kthread_exit+0x40/0x40
[   24.608355][  T129]  ret_from_fork+0x1c/0x28
[   24.608815][  T129] Modules linked in:
[   24.609243][  T129] CR2: 00000000ee3fe000
[   24.609694][  T129] ---[ end trace 0000000000000000 ]---
[   24.610270][  T129] EIP: blake2s_compress_generic+0x177/0x1bb0
[   24.610909][  T129] Code: 44 96 1a c5 8b 95 6c ff ff ff 89 47 24 8b 85 0c ff ff ff a3 40 96 1a c5 8d 04 d5 00 00 00 00 03 85 bc fe ff ff 8b 18 8b 50 08 <8b> 48 10 8b 70 14 89 9d 64 ff ff ff 89 9d 74 ff ff ff 8b 58 04 89
[   24.613046][  T129] EAX: ee3fdff0 EBX: 00000000 ECX: 00000781 EDX: 00000000
[   24.613831][  T129] ESI: 00a86b49 EDI: c426edc0 EBP: c7487e94 ESP: c7487d50
[   24.614625][  T129] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010086
[   24.615475][  T129] CR0: 80050033 CR2: ee3fe000 CR3: 0475f000 CR4: 000406d0
[   24.616249][  T129] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[   24.617042][  T129] DR6: fffe0ff0 DR7: 00000400
[   24.617544][  T129] Kernel panic - not syncing: Fatal exception
[   25.751619][  T129] Shutting down cpus with NMI
[   25.752352][  T129] Kernel Offset: disabled


If you fix the issue, kindly add following tag
| Reported-by: kernel test robot <yujie.liu@...el.com>
| Link: https://lore.kernel.org/r/202209302231.88ba36c2-yujie.liu@intel.com


To reproduce:

        # build kernel
	cd linux
	cp config-5.18.0-rc6-00024-ge85c0fc1d94c .config
	make HOSTCC=gcc-11 CC=gcc-11 ARCH=i386 olddefconfig prepare modules_prepare bzImage modules
	make HOSTCC=gcc-11 CC=gcc-11 ARCH=i386 INSTALL_MOD_PATH=<mod-install-dir> modules_install
	cd <mod-install-dir>
	find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.


-- 
0-DAY CI Kernel Test Service
https://01.org/lkp

View attachment "config-5.18.0-rc6-00024-ge85c0fc1d94c" of type "text/plain" (137183 bytes)

View attachment "job-script" of type "text/plain" (4881 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (42308 bytes)