linux-kernel - Re: [PATCH v11 02/11] LSM: Maintain a table of LSM attribute data

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <202306262112.c14a7466-oliver.sang@intel.com>
Date:   Mon, 26 Jun 2023 22:11:06 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     Casey Schaufler <casey@...aufler-ca.com>
CC:     <oe-lkp@...ts.linux.dev>, <lkp@...el.com>,
        Kees Cook <keescook@...omium.org>,
        Serge Hallyn <serge@...lyn.com>,
        <linux-kernel@...r.kernel.org>,
        <linux-security-module@...r.kernel.org>, <casey@...aufler-ca.com>,
        <paul@...l-moore.com>, <jmorris@...ei.org>,
        <john.johansen@...onical.com>,
        <penguin-kernel@...ove.sakura.ne.jp>,
        <stephen.smalley.work@...il.com>, <linux-api@...r.kernel.org>,
        <mic@...ikod.net>, <oliver.sang@...el.com>
Subject: Re: [PATCH v11 02/11] LSM: Maintain a table of LSM attribute data



Hello,

kernel test robot noticed "Kernel_panic-not_syncing:security_add_hooks_Too_many_LSMs_registered" on:

commit: 17e790c80fd532e2f5381ab9bc30a911229ec560 ("[PATCH v11 02/11] LSM: Maintain a table of LSM attribute data")
url: https://github.com/intel-lab-lkp/linux/commits/Casey-Schaufler/LSM-Identify-modules-by-more-than-name/20230617-005918
base: https://git.kernel.org/cgit/linux/kernel/git/tip/tip.git 228020b490eda9133c9cb6f59a5ee1278d8c463f
patch link: https://lore.kernel.org/all/20230616165055.4705-3-casey@schaufler-ca.com/
patch subject: [PATCH v11 02/11] LSM: Maintain a table of LSM attribute data

in testcase: boot

compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202306262112.c14a7466-oliver.sang@intel.com



[    3.070161][    T0] LSM: initializing lsm=lockdown,capability,landlock
[    3.072793][    T0] Kernel panic - not syncing: security_add_hooks Too many LSMs registered.
[    3.074648][    T0] CPU: 0 PID: 0 Comm: swapper Not tainted 6.4.0-rc1-00008-g17e790c80fd5 #1
[    3.076714][    T0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[    3.076714][    T0] Call Trace:
[    3.076714][    T0]  dump_stack_lvl+0x50/0x65
[    3.076714][    T0]  dump_stack+0xd/0x12
[    3.076714][    T0]  panic+0xe3/0x238
[    3.076714][    T0]  security_add_hooks+0xe1/0xef
[    3.076714][    T0]  landlock_add_ptrace_hooks+0x1c/0x24
[    3.076714][    T0]  landlock_init+0x12/0x2c
[    3.076714][    T0]  initialize_lsm+0x31/0x50
[    3.076714][    T0]  ordered_lsm_init+0x296/0x2b3
[    3.076714][    T0]  security_init+0xbf/0xca
[    3.076714][    T0]  start_kernel+0x2ed/0x329
[    3.076714][    T0]  i386_start_kernel+0x47/0x47
[    3.076714][    T0]  startup_32_smp+0x151/0x154



To reproduce:

        # build kernel
	cd linux
	cp config-6.4.0-rc1-00008-g17e790c80fd5 .config
	make HOSTCC=gcc-12 CC=gcc-12 ARCH=i386 olddefconfig prepare modules_prepare bzImage modules
	make HOSTCC=gcc-12 CC=gcc-12 ARCH=i386 INSTALL_MOD_PATH=<mod-install-dir> modules_install
	cd <mod-install-dir>
	find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki



View attachment "config-6.4.0-rc1-00008-g17e790c80fd5" of type "text/plain" (151038 bytes)

View attachment "job-script" of type "text/plain" (5261 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (5528 bytes)