| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 28 Jun 2024 17:14:03 -0700
From: syzbot <syzbot+6754751ad05524dae739@...kaller.appspotmail.com>
To: linux-kernel@...r.kernel.org, peili.dev@...il.com,
syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [dri?] WARNING in drm_mode_create_lease_ioctl
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
fg: CoreSight Configuration manager initialised
[ 5.554271][ T1] gnss: GNSS driver registered with major 478
[ 5.614826][ T1] usbcore: registered new interface driver snd-usb-audio
[ 5.616707][ T1] usbcore: registered new interface driver snd-ua101
[ 5.618430][ T1] usbcore: registered new interface driver snd-usb-caiaq
[ 5.620204][ T1] usbcore: registered new interface driver snd-usb-6fire
[ 5.622004][ T1] usbcore: registered new interface driver snd-usb-hiface
[ 5.623809][ T1] usbcore: registered new interface driver snd-bcd2000
[ 5.625591][ T1] usbcore: registered new interface driver snd_usb_pod
[ 5.627398][ T1] usbcore: registered new interface driver snd_usb_podhd
[ 5.629181][ T1] usbcore: registered new interface driver snd_usb_toneport
[ 5.631021][ T1] usbcore: registered new interface driver snd_usb_variax
[ 5.678593][ T1] NET: Registered PF_LLC protocol family
[ 5.679960][ T1] GACT probability on
[ 5.680831][ T1] Mirror/redirect action on
[ 5.681938][ T1] Simple TC action Loaded
[ 5.684540][ T1] netem: version 1.3
[ 5.685447][ T1] u32 classifier
[ 5.686408][ T1] Performance counters on
[ 5.687365][ T1] input device check on
[ 5.688298][ T1] Actions configured
[ 5.699675][ T1] xt_time: kernel timezone is -0000
[ 5.700966][ T1] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[ 5.702524][ T1] IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
[ 5.704746][ T1] IPVS: ipvs loaded.
[ 5.705643][ T1] IPVS: [rr] scheduler registered.
[ 5.706901][ T1] IPVS: [wrr] scheduler registered.
[ 5.708018][ T1] IPVS: [lc] scheduler registered.
[ 5.709123][ T1] IPVS: [wlc] scheduler registered.
[ 5.710242][ T1] IPVS: [fo] scheduler registered.
[ 5.711340][ T1] IPVS: [ovf] scheduler registered.
[ 5.712471][ T1] IPVS: [lblc] scheduler registered.
[ 5.713610][ T1] IPVS: [lblcr] scheduler registered.
[ 5.714765][ T1] IPVS: [dh] scheduler registered.
[ 5.715857][ T1] IPVS: [sh] scheduler registered.
[ 5.717066][ T1] IPVS: [mh] scheduler registered.
[ 5.718160][ T1] IPVS: [sed] scheduler registered.
[ 5.719266][ T1] IPVS: [nq] scheduler registered.
[ 5.720363][ T1] IPVS: [twos] scheduler registered.
[ 5.721640][ T1] IPVS: [sip] pe registered.
[ 5.722759][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 5.725755][ T1] gre: GRE over IPv4 demultiplexor driver
[ 5.727112][ T1] ip_gre: GRE over IPv4 tunneling driver
[ 5.732258][ T1] IPv4 over IPsec tunneling driver
[ 5.737153][ T1] Initializing XFRM netlink socket
[ 5.739156][ T1] IPsec XFRM device driver
[ 5.740433][ T1] NET: Registered PF_INET6 protocol family
[ 5.748663][ T1] Segment Routing with IPv6
[ 5.749695][ T1] RPL Segment Routing with IPv6
[ 5.750919][ T1] In-situ OAM (IOAM) with IPv6
[ 5.752137][ T1] mip6: Mobile IPv6
[ 5.754848][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 5.759136][ T1] ip6_gre: GRE over IPv6 tunneling driver
[ 5.761779][ T1] NET: Registered PF_PACKET protocol family
[ 5.763124][ T1] NET: Registered PF_KEY protocol family
[ 5.764596][ T1] Bridge firewalling registered
[ 5.766655][ T1] NET: Registered PF_X25 protocol family
[ 5.767957][ T1] X25: Linux Version 0.2
[ 5.772797][ T1] NET: Registered PF_NETROM protocol family
[ 5.783449][ T1] NET: Registered PF_ROSE protocol family
[ 5.784922][ T1] NET: Registered PF_AX25 protocol family
[ 5.786291][ T1] can: controller area network core
[ 5.787573][ T1] NET: Registered PF_CAN protocol family
[ 5.788797][ T1] can: raw protocol
[ 5.789691][ T1] can: broadcast manager protocol
[ 5.790814][ T1] can: netlink gateway - max_hops=1
[ 5.792011][ T1] can: SAE J1939
[ 5.792825][ T1] can: isotp protocol (max_pdu_size 8300)
[ 5.794397][ T1] Bluetooth: RFCOMM TTY layer initialized
[ 5.795654][ T1] Bluetooth: RFCOMM socket layer initialized
[ 5.797116][ T1] Bluetooth: RFCOMM ver 1.11
[ 5.798151][ T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 5.799499][ T1] Bluetooth: BNEP filters: protocol multicast
[ 5.800816][ T1] Bluetooth: BNEP socket layer initialized
[ 5.802096][ T1] Bluetooth: CMTP (CAPI Emulation) ver 1.0
[ 5.803361][ T1] Bluetooth: CMTP socket layer initialized
[ 5.804618][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 5.806596][ T1] Bluetooth: HIDP socket layer initialized
[ 5.809888][ T1] NET: Registered PF_RXRPC protocol family
[ 5.811217][ T1] Key type rxrpc registered
[ 5.812185][ T1] Key type rxrpc_s registered
[ 5.813647][ T1] NET: Registered PF_KCM protocol family
[ 5.815384][ T1] lec:lane_module_init: lec.c: initialized
[ 5.816776][ T1] mpoa:atm_mpoa_init: mpc.c: initialized
[ 5.818148][ T1] l2tp_core: L2TP core driver, V2.0
[ 5.819296][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 5.820515][ T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[ 5.821931][ T1] l2tp_netlink: L2TP netlink interface
[ 5.823214][ T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[ 5.824657][ T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[ 5.826390][ T1] NET: Registered PF_PHONET protocol family
[ 5.827807][ T1] 8021q: 802.1Q VLAN Support v1.8
[ 5.836194][ T1] DCCP: Activated CCID 2 (TCP-like)
[ 5.837377][ T1] DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
[ 5.838965][ T1] DCCP is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 5.841512][ T1] sctp: Hash tables configured (bind 32/56)
[ 5.843863][ T1] NET: Registered PF_RDS protocol family
[ 5.845580][ T1] Registered RDS/infiniband transport
[ 5.847501][ T1] Registered RDS/tcp transport
[ 5.848551][ T1] tipc: Activated (version 2.0.0)
[ 5.849972][ T1] NET: Registered PF_TIPC protocol family
[ 5.851789][ T1] tipc: Started in single node mode
[ 5.853435][ T1] NET: Registered PF_SMC protocol family
[ 5.854739][ T1] 9pnet: Installing 9P2000 support
[ 5.856239][ T1] NET: Registered PF_CAIF protocol family
[ 5.859758][ T1] NET: Registered PF_IEEE802154 protocol family
[ 5.861187][ T1] Key type dns_resolver registered
[ 5.862270][ T1] Key type ceph registered
[ 5.863561][ T1] libceph: loaded (mon/osd proto 15/24)
[ 5.865484][ T1] batman_adv: B.A.T.M.A.N. advanced 2024.2 (compatibility version 15) loaded
[ 5.867585][ T1] openvswitch: Open vSwitch switching datapath
[ 5.870517][ T1] NET: Registered PF_VSOCK protocol family
[ 5.871927][ T1] mpls_gso: MPLS GSO support
[ 6.318229][ T1] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
[ 6.330188][ T1] registered taskstats version 1
[ 6.331557][ T1] Loading compiled-in X.509 certificates
[ 6.336923][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: d82365048398fac280b79dbcef24e55526f29c91'
[ 6.487723][ T1] zswap: loaded using pool lzo/zsmalloc
[ 6.491613][ T1] Demotion targets for Node 0: null
[ 6.492833][ T1] debug_vm_pgtable: [debug_vm_pgtable ]: Validating architecture page table helpers
[ 6.496265][ T1] page_owner is disabled
[ 6.497624][ T1] Key type .fscrypt registered
[ 6.498674][ T1] Key type fscrypt-provisioning registered
[ 6.501890][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 6.521210][ T1] Btrfs loaded, assert=on, ref-verify=on, zoned=yes, fsverity=yes
[ 6.523390][ T1] Key type big_key registered
[ 6.524478][ T1] Key type encrypted registered
[ 6.525614][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 6.527167][ T1] Loading compiled-in module X.509 certificates
[ 6.530971][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: d82365048398fac280b79dbcef24e55526f29c91'
[ 6.533324][ T1] ima: Allocated hash algorithm: sha256
[ 6.534658][ T1] ima: No architecture policies found
[ 6.536167][ T1] evm: Initialising EVM extended attributes:
[ 6.537466][ T1] evm: security.selinux (disabled)
[ 6.538564][ T1] evm: security.SMACK64
[ 6.539461][ T1] evm: security.SMACK64EXEC
[ 6.540433][ T1] evm: security.SMACK64TRANSMUTE
[ 6.541489][ T1] evm: security.SMACK64MMAP
[ 6.542478][ T1] evm: security.apparmor (disabled)
[ 6.543608][ T1] evm: security.ima
[ 6.544426][ T1] evm: security.capability
[ 6.545377][ T1] evm: HMAC attrs: 0x1
[ 6.549186][ T1] printk: legacy console [netcon0] enabled
[ 6.550495][ T1] netconsole: network logging started
[ 6.551983][ T1] gtp: GTP module loaded (pdp ctx size 128 bytes)
[ 6.554178][ T1] rdma_rxe: loaded
[ 6.555332][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 6.558672][ T1] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 6.560977][ T1] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[ 6.563095][ T1] clk: Disabling unused clocks
[ 6.564982][ T2208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 6.566138][ T1] PM: genpd: Disabling unused power domains
[ 6.567322][ T2208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 6.568518][ T1] ALSA device list:
[ 6.571132][ T1] #0: Dummy 1
[ 6.571832][ T1] #1: Loopback 1
[ 6.572585][ T1] #2: Virtual MIDI Card 1
[ 64.516640][ T57] nvme nvme0: I/O tag 20 (1014) QID 0 timeout, completion polled
[ 69.626924][ T2208] cfg80211: failed to load regulatory.db
[ 125.947012][ T57] nvme nvme0: I/O tag 12 (100c) QID 0 timeout, completion polled
[ 187.386634][ T57] nvme nvme0: I/O tag 13 (100d) QID 0 timeout, completion polled
[ 248.826889][ T57] nvme nvme0: I/O tag 14 (100e) QID 0 timeout, completion polled
[ 284.666278][ T31] INFO: task swapper/0:1 blocked for more than 143 seconds.
[ 284.667976][ T31] Not tainted 6.10.0-rc5-syzkaller-00071-g59ed70ca3c29-dirty #0
[ 284.669744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 284.671615][ T31] task:swapper/0 state:D stack:0 pid:1 tgid:1 ppid:0 flags:0x0000000c
[ 284.673819][ T31] Call trace:
[ 284.674529][ T31] __switch_to+0x314/0x560
[ 284.675483][ T31] __schedule+0x14ac/0x24d8
[ 284.676569][ T31] schedule+0xbc/0x238
[ 284.677462][ T31] wait_for_device_probe+0x120/0x1c0
[ 284.678613][ T31] prepare_namespace+0x5c/0x11c
[ 284.679676][ T31] kernel_init_freeable+0x360/0x478
[ 284.680802][ T31] kernel_init+0x24/0x2a0
[ 284.681739][ T31] ret_from_fork+0x10/0x20
[ 284.682768][ T31]
[ 284.682768][ T31] Showing all locks held in the system:
[ 284.684437][ T31] 2 locks held by kworker/u8:1/13:
[ 284.685537][ T31] #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8
[ 284.688122][ T31] #1: ffff800094f97c20 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8
[ 284.690763][ T31] 1 lock held by khungtaskd/31:
[ 284.691809][ T31] #0: ffff80008f3779e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[ 284.693868][ T31] 3 locks held by kworker/u8:5/315:
[ 284.694984][ T31] #0: ffff0000c181d148 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8
[ 284.697322][ T31] #1: ffff8000982f7c20 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8
[ 284.699762][ T31] #2: ffff0000c27d01b0 (&dev->mutex){....}-{3:3}, at: __driver_attach_async_helper+0xc8/0x230
[ 284.702020][ T31] 1 lock held by hwrng/1370:
[ 284.703020][ T31] #0: ffff800090adf948 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0x6c/0x2b4
[ 284.705041][ T31]
[ 284.705542][ T31] =============================================
[ 284.705542][ T31]
[ 284.707474][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 284.708940][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00071-g59ed70ca3c29-dirty #0
[ 284.711186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 284.713328][ T31] Call trace:
[ 284.714019][ T31] dump_backtrace+0x1b8/0x1e4
[ 284.715028][ T31] show_stack+0x2c/0x3c
[ 284.715915][ T31] dump_stack_lvl+0xe4/0x150
[ 284.716944][ T31] dump_stack+0x1c/0x28
[ 284.717883][ T31] panic+0x300/0x884
[ 284.718760][ T31] hung_task_panic+0x0/0x2c
[ 284.719773][ T31] kthread+0x288/0x310
[ 284.720697][ T31] ret_from_fork+0x10/0x20
[ 284.721698][ T31] SMP: stopping secondary CPUs
[ 284.722840][ T31] Kernel Offset: disabled
[ 284.723807][ T31] CPU features: 0x00,00000103,80100128,42017203
[ 284.725213][ T31] Memory Limit: none
[ 285.124581][ T31] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build636392712=/tmp/go-build -gno-record-gcc-switches'
git status (err=<nil>)
HEAD detached at edc5149ad2
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
go fmt ./sys/... >/dev/null
touch .descriptions
GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=edc5149ad2ab7a38db6b3bcb1b594e0264a92163 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240621-090414'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=edc5149ad2ab7a38db6b3bcb1b594e0264a92163 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240621-090414'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_arm64
aarch64-linux-gnu-g++ -o ./bin/linux_arm64/syz-executor executor/executor.cc \
-O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -fpermissive -w -DGOOS_linux=1 -DGOARCH_arm64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"edc5149ad2ab7a38db6b3bcb1b594e0264a92163\"
Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=17c2e3a9980000
Tested on:
commit: 59ed70ca Merge remote-tracking branch 'tglx/devmsi-arm..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
kernel config: https://syzkaller.appspot.com/x/.config?x=4e37fbf116261f0b
dashboard link: https://syzkaller.appspot.com/bug?extid=6754751ad05524dae739
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
patch: https://syzkaller.appspot.com/x/patch.diff?x=167172d1980000
Powered by blists - more mailing lists