| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CA+G9fYvZqytp3gMnC4-no9EB=Jnzqmu44i8JQo6apiZat-xxPg@mail.gmail.com>
Date: Thu, 16 Feb 2023 17:43:33 +0530
From: Naresh Kamboju <naresh.kamboju@...aro.org>
To: kasan-dev <kasan-dev@...glegroups.com>,
open list <linux-kernel@...r.kernel.org>,
kunit-dev@...glegroups.com, lkft-triage@...ts.linaro.org,
regressions@...ts.linux.dev
Cc: Marco Elver <elver@...gle.com>,
Anders Roxell <anders.roxell@...aro.org>,
Arnd Bergmann <arnd@...db.de>
Subject: next: x86_64: kunit test crashed and kernel panic
Following kernel panic noticed while running KUNIT testing on qemu-x86_64
with KASAN enabled kernel.
CONFIG_KASAN=y
CONFIG_KUNIT=y
CONFIG_KUNIT_ALL_TESTS=y
Reported-by: Linux Kernel Functional Testing <lkft@...aro.org>
Boot log:
---------
<5>[ 0.000000] Linux version 6.2.0-rc8-next-20230216
(tuxmake@...make) (x86_64-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU
ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC @1676522550
<6>[ 0.000000] Command line: console=ttyS0,115200 rootwait
root=/dev/sda debug verbose console_msg_format=syslog earlycon
<6>[ 0.000000] x86/fpu: x87 FPU will use FXSAVE
<6>[ 0.000000] signal: max sigframe size: 1440
...
<6>[ 0.001000] kasan: KernelAddressSanitizer initialized
...
<6>[ 16.570308] KTAP version 1
<6>[ 16.570801] 1..62
<6>[ 16.574277] KTAP version 1
...
<6>[ 38.688296] ok 16 kmalloc_uaf_16
<3>[ 38.692992] # kmalloc_oob_in_memset: EXPECTATION FAILED at
mm/kasan/kasan_test.c:558
<3>[ 38.692992] KASAN failure expected in \"memset(ptr, 0, size
+ KASAN_GRANULE_SIZE)\", but none occurred
<6>[ 38.695659] not ok 17 kmalloc_oob_in_memset
<3>[ 38.702362] # kmalloc_oob_memset_2: EXPECTATION FAILED at
mm/kasan/kasan_test.c:505
<3>[ 38.702362] KASAN failure expected in \"memset(ptr + size -
1, 0, 2)\", but none occurred
<6>[ 38.704750] not ok 18 kmalloc_oob_memset_2
<3>[ 38.710076] # kmalloc_oob_memset_4: EXPECTATION FAILED at
mm/kasan/kasan_test.c:518
<3>[ 38.710076] KASAN failure expected in \"memset(ptr + size -
3, 0, 4)\", but none occurred
<6>[ 38.712349] not ok 19 kmalloc_oob_memset_4
<3>[ 38.718545] # kmalloc_oob_memset_8: EXPECTATION FAILED at
mm/kasan/kasan_test.c:531
<3>[ 38.718545] KASAN failure expected in \"memset(ptr + size -
7, 0, 8)\", but none occurred
<6>[ 38.721274] not ok 20 kmalloc_oob_memset_8
<3>[ 38.726201] # kmalloc_oob_memset_16: EXPECTATION FAILED at
mm/kasan/kasan_test.c:544
<3>[ 38.726201] KASAN failure expected in \"memset(ptr + size -
15, 0, 16)\", but none occurred
<6>[ 38.728269] not ok 21 kmalloc_oob_memset_16
<4>[ 38.735350] general protection fault, probably for non-canonical
address 0xa0de1c2100000008: 0000 [#1] PREEMPT SMP KASAN PTI
<4>[ 38.737084] CPU: 0 PID: 131 Comm: kunit_try_catch Tainted: G
B N 6.2.0-rc8-next-20230216 #1
<4>[ 38.738232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009),
BIOS 1.14.0-2 04/01/2014
<4>[ 38.739202] RIP: 0010:__stack_depot_save+0x16b/0x4a0
<4>[ 38.740158] Code: 29 c8 89 c3 48 8b 05 bc ef 4a 03 89 de 23 35
ac ef 4a 03 4c 8d 04 f0 4d 8b 20 4d 85 e4 75 0b eb 77 4d 8b 24 24 4d
85 e4 74 6e <41> 39 5c 24 08 75 f0 41 3b 54 24 0c 75 e9 31 c0 49 8b 7c
c4 18 49
<4>[ 38.742135] RSP: 0000:ffff88815b409a00 EFLAGS: 00000286
<4>[ 38.743055] RAX: ffff88815a600000 RBX: 00000000a0de1c21 RCX:
000000000000000e
<4>[ 38.744084] RDX: 000000000000000e RSI: 00000000000e1c21 RDI:
00000000282127a7
<4>[ 38.745061] RBP: ffff88815b409a58 R08: ffff88815ad0e108 R09:
0000000005d4305e
<4>[ 38.746039] R10: ffffed1020693eb9 R11: ffff88815b409ff8 R12:
a0de1c2100000000
<4>[ 38.747012] R13: 0000000000000001 R14: 0000000000000800 R15:
ffff88815b409a68
<4>[ 38.748039] FS: 0000000000000000(0000)
GS:ffff88815b400000(0000) knlGS:0000000000000000
<4>[ 38.749066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
<4>[ 38.749848] CR2: a0de1c2100000008 CR3: 000000012c2ae000 CR4:
00000000000006f0
<4>[ 38.750769] DR0: ffffffff97419b80 DR1: ffffffff97419b81 DR2:
ffffffff97419b82
<4>[ 38.751712] DR3: ffffffff97419b83 DR6: 00000000ffff0ff0 DR7:
0000000000000600
<4>[ 38.752692] Call Trace:
<4>[ 38.753288] <IRQ>
<4>[ 38.753795] kasan_save_stack+0x4c/0x60
<4>[ 38.754479] ? kasan_save_stack+0x3c/0x60
<4>[ 38.755112] ? kasan_set_track+0x29/0x40
<4>[ 38.756690] ? kasan_save_free_info+0x32/0x50
<4>[ 38.757186] ? ____kasan_slab_free+0x175/0x1d0
<4>[ 38.757830] ? __kasan_slab_free+0x16/0x20
<4>[ 38.758525] ? __kmem_cache_free+0x18c/0x300
<4>[ 38.759187] ? kfree+0x7c/0x120
<4>[ 38.759756] ? free_kthread_struct+0x78/0xa0
<4>[ 38.760516] ? free_task+0x96/0xa0
<4>[ 38.761127] ? __put_task_struct+0x1a2/0x1f0
<4>[ 38.761843] ? delayed_put_task_struct+0xec/0x110
<4>[ 38.762595] ? rcu_core+0x4e3/0x1010
<4>[ 38.763180] ? rcu_core_si+0x12/0x20
<4>[ 38.763842] ? __do_softirq+0x18f/0x502
<4>[ 38.764464] ? __irq_exit_rcu+0xa1/0xe0
<4>[ 38.764982] ? irq_exit_rcu+0x12/0x20
<4>[ 38.765760] ? sysvec_apic_timer_interrupt+0x7d/0xa0
<4>[ 38.766544] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
<4>[ 38.767391] ? memmove+0x3c/0x1c0
<4>[ 38.767994] ? kunit_try_run_case+0x8e/0x130
<4>[ 38.768718] ? kunit_generic_run_threadfn_adapter+0x33/0x50
<4>[ 38.769477] ? kthread+0x17f/0x1b0
<4>[ 38.769871] ? ret_from_fork+0x2c/0x50
<4>[ 38.770841] ? kfree+0x7c/0x120
<4>[ 38.771470] kasan_set_track+0x29/0x40
<4>[ 38.772101] kasan_save_free_info+0x32/0x50
<4>[ 38.772855] ____kasan_slab_free+0x175/0x1d0
<4>[ 38.773536] ? free_kthread_struct+0x78/0xa0
<4>[ 38.774175] __kasan_slab_free+0x16/0x20
<4>[ 38.774865] __kmem_cache_free+0x18c/0x300
<4>[ 38.775553] kfree+0x7c/0x120
<4>[ 38.776137] free_kthread_struct+0x78/0xa0
<4>[ 38.776840] free_task+0x96/0xa0
<4>[ 38.777220] __put_task_struct+0x1a2/0x1f0
<4>[ 38.778103] delayed_put_task_struct+0xec/0x110
<4>[ 38.778786] rcu_core+0x4e3/0x1010
<4>[ 38.779450] ? __pfx_rcu_core+0x10/0x10
<4>[ 38.780147] ? __pfx_read_tsc+0x10/0x10
<4>[ 38.780750] ? __do_softirq+0x11f/0x502
<4>[ 38.781480] rcu_core_si+0x12/0x20
<4>[ 38.782073] __do_softirq+0x18f/0x502
<4>[ 38.782755] ? __pfx___do_softirq+0x10/0x10
<4>[ 38.783442] ? trace_preempt_on+0x20/0xa0
<4>[ 38.784070] ? __irq_exit_rcu+0x17/0xe0
<4>[ 38.784767] __irq_exit_rcu+0xa1/0xe0
<4>[ 38.785377] irq_exit_rcu+0x12/0x20
<4>[ 38.786028] sysvec_apic_timer_interrupt+0x7d/0xa0
<4>[ 38.786781] </IRQ>
<4>[ 38.787107] <TASK>
<4>[ 38.787639] asm_sysvec_apic_timer_interrupt+0x1f/0x30
<4>[ 38.788698] RIP: 0010:memmove+0x3c/0x1c0
<4>[ 38.789436] Code: 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82
01 01 00 00 0f 1f 44 00 00 48 81 fa a8 02 00 00 72 05 40 38 fe 74 48
48 83 ea 20 <48> 83 ea 20 4c 8b 1e 4c 8b 56 08 4c 8b 4e 10 4c 8b 46 18
48 8d 76
<4>[ 38.791297] RSP: 0000:ffff888103507e08 EFLAGS: 00000286
<4>[ 38.792130] RAX: ffff8881033e9000 RBX: ffff8881033e9000 RCX:
0000000000000000
<4>[ 38.792969] RDX: fffffffffff8727e RSI: ffff888103461d64 RDI:
ffff888103461d60
<4>[ 38.793818] RBP: ffff888103507eb8 R08: 0000000100000000 R09:
0000000000000000
<4>[ 38.794643] R10: 0000000000000000 R11: 0000000000000000 R12:
1ffff110206a0fc2
<4>[ 38.795458] R13: ffff888100327b60 R14: ffff888103507e90 R15:
fffffffffffffffe
<4>[ 38.796558] ? kmalloc_memmove_negative_size+0xeb/0x1f0
<4>[ 38.797376] ? __pfx_kmalloc_memmove_negative_size+0x10/0x10
<4>[ 38.798257] ? __kasan_check_write+0x18/0x20
<4>[ 38.798923] ? _raw_spin_lock_irqsave+0xa2/0x110
<4>[ 38.799617] ? _raw_spin_unlock_irqrestore+0x2c/0x60
<4>[ 38.800491] ? trace_preempt_on+0x20/0xa0
<4>[ 38.801150] ? __kthread_parkme+0x4f/0xd0
<4>[ 38.801778] kunit_try_run_case+0x8e/0x130
<4>[ 38.802505] ? __pfx_kunit_try_run_case+0x10/0x10
<4>[ 38.803197] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
<4>[ 38.803997] kunit_generic_run_threadfn_adapter+0x33/0x50
<4>[ 38.804749] kthread+0x17f/0x1b0
<4>[ 38.805377] ? __pfx_kthread+0x10/0x10
<4>[ 38.806025] ret_from_fork+0x2c/0x50
<4>[ 38.806716] </TASK>
<4>[ 38.807261] Modules linked in:
<4>[ 38.809163] ---[ end trace 0000000000000000 ]---
<4>[ 38.809731] RIP: 0010:__stack_depot_save+0x16b/0x4a0
<4>[ 38.810988] Code: 29 c8 89 c3 48 8b 05 bc ef 4a 03 89 de 23 35
ac ef 4a 03 4c 8d 04 f0 4d 8b 20 4d 85 e4 75 0b eb 77 4d 8b 24 24 4d
85 e4 74 6e <41> 39 5c 24 08 75 f0 41 3b 54 24 0c 75 e9 31 c0 49 8b 7c
c4 18 49
<4>[ 38.812911] RSP: 0000:ffff88815b409a00 EFLAGS: 00000286
<4>[ 38.813435] RAX: ffff88815a600000 RBX: 00000000a0de1c21 RCX:
000000000000000e
<4>[ 38.815407] RDX: 000000000000000e RSI: 00000000000e1c21 RDI:
00000000282127a7
<4>[ 38.816630] RBP: ffff88815b409a58 R08: ffff88815ad0e108 R09:
0000000005d4305e
<4>[ 38.817540] R10: ffffed1020693eb9 R11: ffff88815b409ff8 R12:
a0de1c2100000000
<4>[ 38.818685] R13: 0000000000000001 R14: 0000000000000800 R15:
ffff88815b409a68
<4>[ 38.819949] FS: 0000000000000000(0000)
GS:ffff88815b400000(0000) knlGS:0000000000000000
<4>[ 38.821375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
<4>[ 38.822431] CR2: a0de1c2100000008 CR3: 000000012c2ae000 CR4:
00000000000006f0
<4>[ 38.823562] DR0: ffffffff97419b80 DR1: ffffffff97419b81 DR2:
ffffffff97419b82
<4>[ 38.824702] DR3: ffffffff97419b83 DR6: 00000000ffff0ff0 DR7:
0000000000000600
<0>[ 38.826157] Kernel panic - not syncing: Fatal exception in interrupt
<0>[ 38.828641] Kernel Offset: 0x12400000 from 0xffffffff81000000
(relocation range: 0xffffffff80000000-0xffffffffbfffffff)
<0>[ 38.830146] ---[ end Kernel panic - not syncing: Fatal exception
in interrupt ]---
links:
----
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20230216/testrun/14817835/suite/log-parser-test/test/check-kernel-panic/log
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20230216/testrun/14817835/suite/log-parser-test/tests/
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20230216/testrun/14817835/suite/log-parser-test/test/check-kernel-panic/details/
steps to reproduce:
---
tuxrun \
--runtime podman \
--device qemu-x86_64 \
--kernel https://storage.tuxsuite.com/public/linaro/lkft/builds/2Lo0yXyxgpsuMQhyLdw5jKk9nSj/bzImage
\
--modules https://storage.tuxsuite.com/public/linaro/lkft/builds/2Lo0yXyxgpsuMQhyLdw5jKk9nSj/modules.tar.xz
\
--rootfs https://storage.tuxsuite.com/public/linaro/lkft/oebuilds/2LUxobLpTjiRrzSKqqYOwhong7e/images/intel-corei7-64/lkft-tux-image-intel-corei7-64-20230209111930.rootfs.ext4.gz
\
--parameters SKIPFILE=skipfile-lkft.yaml \
--image docker.io/lavasoftware/lava-dispatcher:2023.01.0020.gc1598238f \
--tests kunit \
--timeouts boot=15 kunit=30
--
Linaro LKFT
https://lkft.linaro.org
Powered by blists - more mailing lists