lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <202507200931.7a89ecd8-lkp@intel.com>
Date: Sun, 20 Jul 2025 16:12:07 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Gilad Naaman <gnaaman@...venets.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, <linux-kernel@...r.kernel.org>,
	Jakub Kicinski <kuba@...nel.org>, Eric Dumazet <edumazet@...gle.com>,
	Kuniyuki Iwashima <kuniyu@...zon.com>, <netdev@...r.kernel.org>,
	<oliver.sang@...el.com>
Subject: [linus:master] [neighbour]  [confidence: ] f7f5273863:
 Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN



Hello,

kernel test robot noticed "Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN" on:

commit: f7f52738637f4361c108cad36e23ee98959a9006 ("neighbour: Create netdev->neighbour association")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

[test failed on linus/master      f4a40a4282f467ec99745c6ba62cb84346e42139]
[test failed on linux-next/master d086c886ceb9f59dea6c3a9dae7eb89e780a20c9]

in testcase: boot

config: x86_64-randconfig-123-20250718
compiler: clang-20
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+----------------------------------------------------------------------------------+------------+------------+
|                                                                                  | a01a67ab2f | f7f5273863 |
+----------------------------------------------------------------------------------+------------+------------+
| BUG_RAWv6                                                                        | 7          |            |
| WARNING:at_mm/slab_common.c:#kmem_cache_destroy                                  | 7          |            |
| RIP:kmem_cache_destroy                                                           | 7          |            |
| UBSAN:signed-integer-overflow_in_include/linux/atomic/atomic-arch-fallback.h     | 7          |            |
| Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN | 0          | 7          |
| KASAN:null-ptr-deref_in_range[#-#]                                               | 0          | 7          |
| RIP:neigh_flush_dev.llvm                                                         | 0          | 7          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt                            | 0          | 7          |
+----------------------------------------------------------------------------------+------------+------------+


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202507200931.7a89ecd8-lkp@intel.com


[   21.205230][    T1] systemd[1]: RTC configured in localtime, applying delta of 0 minutes to system time.
[   21.328503][    T1] NET: Registered PF_INET6 protocol family
[   21.412618][    T1] IPv6: Attempt to unregister permanent protocol 6
[   21.433405][    T1] IPv6: Attempt to unregister permanent protocol 136
[   21.443410][    T1] IPv6: Attempt to unregister permanent protocol 17
[   22.737430][    T1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000001a0: 0000 [#1] SMP KASAN
[   22.738764][    T1] KASAN: null-ptr-deref in range [0x0000000000000d00-0x0000000000000d07]
[   22.739736][    T1] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G                T  6.12.0-rc6-01246-gf7f52738637f #1
[   22.740972][    T1] Tainted: [T]=RANDSTRUCT
[   22.741513][    T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 22.742641][ T1] RIP: 0010:neigh_flush_dev.llvm.6395807810224103582 (kbuild/src/consumer/net/core/neighbour.c:380) 
[ 22.743530][ T1] Code: c1 e8 03 42 8a 04 38 84 c0 0f 85 15 05 00 00 31 c0 41 83 3e 0a 0f 94 c0 48 8d 1c c3 48 81 c3 f8 0c 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 f7 49 93 fe 4c 8b 3b 4d 85 ff 0f
All code
========
   0:	c1 e8 03             	shr    $0x3,%eax
   3:	42 8a 04 38          	mov    (%rax,%r15,1),%al
   7:	84 c0                	test   %al,%al
   9:	0f 85 15 05 00 00    	jne    0x524
   f:	31 c0                	xor    %eax,%eax
  11:	41 83 3e 0a          	cmpl   $0xa,(%r14)
  15:	0f 94 c0             	sete   %al
  18:	48 8d 1c c3          	lea    (%rbx,%rax,8),%rbx
  1c:	48 81 c3 f8 0c 00 00 	add    $0xcf8,%rbx
  23:	48 89 d8             	mov    %rbx,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1)		<-- trapping instruction
  2f:	74 08                	je     0x39
  31:	48 89 df             	mov    %rbx,%rdi
  34:	e8 f7 49 93 fe       	call   0xfffffffffe934a30
  39:	4c 8b 3b             	mov    (%rbx),%r15
  3c:	4d 85 ff             	test   %r15,%r15
  3f:	0f                   	.byte 0xf

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1)
   5:	74 08                	je     0xf
   7:	48 89 df             	mov    %rbx,%rdi
   a:	e8 f7 49 93 fe       	call   0xfffffffffe934a06
   f:	4c 8b 3b             	mov    (%rbx),%r15
  12:	4d 85 ff             	test   %r15,%r15
  15:	0f                   	.byte 0xf
[   22.745585][    T1] RSP: 0000:ffff88810026f408 EFLAGS: 00010206
[   22.746292][    T1] RAX: 00000000000001a0 RBX: 0000000000000d00 RCX: 0000000000000000
[   22.747239][    T1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffc0631640
[   22.748176][    T1] RBP: ffff88810026f470 R08: 0000000000000000 R09: 0000000000000000
[   22.749092][    T1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[   22.750004][    T1] R13: ffffffffc0625250 R14: ffffffffc0631640 R15: dffffc0000000000
[   22.750956][    T1] FS:  00007f575cb83940(0000) GS:ffff8883aee00000(0000) knlGS:0000000000000000
[   22.752016][    T1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   22.752799][    T1] CR2: 00007f575db40008 CR3: 00000002bf936000 CR4: 00000000000406f0
[   22.753770][    T1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   22.754687][    T1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   22.755620][    T1] Call Trace:
[   22.756076][    T1]  <TASK>
[ 22.756491][ T1] ? show_regs (kbuild/src/consumer/arch/x86/kernel/dumpstack.c:?) 
[ 22.757025][ T1] ? __die_body.llvm.18112809324785033505 (kbuild/src/consumer/arch/x86/kernel/dumpstack.c:421) 
[ 22.757760][ T1] ? die_addr (kbuild/src/consumer/arch/x86/kernel/dumpstack.c:?) 
[ 22.758289][ T1] ? exc_general_protection (kbuild/src/consumer/arch/x86/kernel/traps.c:751) 


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250720/202507200931.7a89ecd8-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ