| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <9401208f-2db1-4397-a615-a03fd7520e53@amd.com>
Date: Mon, 17 Nov 2025 17:38:31 +0530
From: "Longia, Amandeep Kaur" <AmandeepKaur.Longia@....com>
To: <catalin.marinas@....com>, Linux Kernel Mailing List
<linux-kernel@...r.kernel.org>, <akpm@...ux-foundation.org>,
<david@...hat.com>
CC: <lance.yang@...ux.dev>, <will@...nel.org>, <b-padhi@...com>,
<aishwarya.tcv@....com>, <david@...nel.org>, <broonie@...nel.org>,
<Raghavendra.KodsaraThimmappa@....com>
Subject: [BUG] General Protection Faults During Git Clone and Kernel Build on
Latest Kernel
Hi all,
We've encountered critical issues while running our CI pipeline on the
latest kernel (v6.18-rc6), which involves cloning multiple repositories
for testing and building the kernel. During this process, we observed
two major issues:
Case 1: Repository Cloning Error
Attempts to clone a large repository with full depth triggered general
protection fault errors, as noted in the dmesg logs. For instance,
cloning the QEMU repository produced the following output:
$ git clone https://github.com/qemu/qemu
Cloning into 'qemu'...
remote: Enumerating objects: 854210, done.
remote: Counting objects: 100% (1059/1059), done.
remote: Compressing objects: 100% (344/344), done.
fatal: fetch-pack: invalid index-pack output7 MiB | 25.86 MiB/s
Traces in the dmesg:
kernel: traps: git[4191] general protection fault ip:564bfe97aee9
sp:7ffee8a4d6c8 error:0 in git[315ee9,564bfe683000+304000]
kernel: traps: git[4199] general protection fault ip:55dc31828ee9
sp:7ffd9893cd88 error:0 in git[315ee9,55dc31531000+304000]
kernel: traps: git[4209] general protection fault ip:55a2df633ee9
sp:7ffd51324b88 error:0 in git[315ee9,55a2df33c000+304000]
Case 2: Kernel Build Failure
Kernel builds failed with the "internal compiler error: Segmentation
fault". Multiple general protection fault messages were recorded in the
dmesg logs. Relevant excerpts include:
during GIMPLE pass: einline
net/core/skbuff.c: In function ‘skb_queue_head’:
net/core/skbuff.c:4016:9: internal compiler error: Segmentation fault
4016 | __skb_queue_head(list, newsk);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
0x108d8f4 internal_error(char const*, ...)
???:0
0x1168be9 htab_find_slot_with_hash
???:0
0x118a549 get_combined_adhoc_loc(line_maps*, unsigned int,
source_range, void*, unsigned int)
???:0
0x12c723c optimize_inline_calls(tree_node*)
???:0
0x132d9d3 early_inliner(function*)
???:0
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <file:///usr/share/doc/gcc-13/README.Bugs> for instructions.
make[4]: *** [scripts/Makefile.build:287: net/core/skbuff.o] Error 1
make[4]: *** Waiting for unfinished jobs....
In file included from ./fs/xfs/xfs_trace.h:56,
from fs/xfs/libxfs/xfs_attr.c:26:
./fs/xfs/xfs_trace.h:2827:31: internal compiler error: Segmentation fault
2827 | TP_PROTO(const struct xfs_group *xg, xfs_agblock_t
agbno, \
| ^~~~~~~~~
./include/linux/tracepoint.h:278:41: note: in definition of macro
‘__DECLARE_TRACE’
278 | static inline void trace_##name(proto) \
| ^~~~~
./include/linux/tracepoint.h:481:31: note: in expansion of macro ‘PARAMS’
481 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args),
\
| ^~~~~~
./include/linux/tracepoint.h:608:9: note: in expansion of macro
‘DECLARE_TRACE_EVENT’
608 | DECLARE_TRACE_EVENT(name, PARAMS(proto), PARAMS(args))
| ^~~~~~~~~~~~~~~~~~~
./include/linux/tracepoint.h:608:35: note: in expansion of macro ‘PARAMS’
608 | DECLARE_TRACE_EVENT(name, PARAMS(proto), PARAMS(args))
| ^~~~~~
./fs/xfs/xfs_trace.h:2826:1: note: in expansion of macro ‘DEFINE_EVENT’
2826 | DEFINE_EVENT(xfs_discard_class, name, \
| ^~~~~~~~~~~~
./fs/xfs/xfs_trace.h:2827:9: note: in expansion of macro ‘TP_PROTO’
2827 | TP_PROTO(const struct xfs_group *xg, xfs_agblock_t
agbno, \
| ^~~~~~~~
./fs/xfs/xfs_trace.h:2831:1: note: in expansion of macro
‘DEFINE_DISCARD_EVENT’
2831 | DEFINE_DISCARD_EVENT(xfs_discard_toosmall);
| ^~~~~~~~~~~~~~~~~~~~
0x108d8f4 internal_error(char const*, ...)
???:0
0x1168c62 htab_find_slot_with_hash
???:0
0x118a549 get_combined_adhoc_loc(line_maps*, unsigned int,
source_range, void*, unsigned int)
???:0
0x1630ad5 c_parse_file()
???:0
0x162bf41 c_common_parse_file()
???:0
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <file:///usr/share/doc/gcc-13/README.Bugs> for instructions.
make[4]: *** [scripts/Makefile.build:287: fs/xfs/libxfs/xfs_attr.o]
Error 1
make[4]: *** Waiting for unfinished jobs....
In file included from ./include/trace/define_trace.h:132,
from net/wireless/trace.h:4231,
from net/wireless/trace.c:5:
./net/wireless/./trace.h: In function
‘do_trace_event_raw_event_rdev_set_monitor_channel’:
./arch/x86/include/asm/bug.h:71:45: internal compiler error:
Segmentation fault
71 | "i" (sizeof(struct bug_entry)));
\
| ^~~~~~~~~
./include/trace/trace_events.h:427:11: note: in definition of macro
‘__DECLARE_EVENT_CLASS’
427 | { assign; } \
| ^~~~~~
./include/trace/trace_events.h:435:23: note: in expansion of macro
‘PARAMS’
435 | PARAMS(assign), PARAMS(print)) \
| ^~~~~~
./include/trace/trace_events.h:40:9: note: in expansion of macro
‘DECLARE_EVENT_CLASS’
40 | DECLARE_EVENT_CLASS(name, \
| ^~~~~~~~~~~~~~~~~~~
./include/trace/trace_events.h:44:30: note: in expansion of macro
‘PARAMS’
44 | PARAMS(assign), \
| ^~~~~~
./net/wireless/./trace.h:1352:1: note: in expansion of macro
‘TRACE_EVENT’
1352 | TRACE_EVENT(rdev_set_monitor_channel,
| ^~~~~~~~~~~
./net/wireless/./trace.h:1361:9: note: in expansion of macro
‘TP_fast_assign’
1361 | TP_fast_assign(
| ^~~~~~~~~~~~~~
./arch/x86/include/asm/bug.h:104:9: note: in expansion of macro
‘_BUG_FLAGS’
104 | _BUG_FLAGS(ASM_UD2, __flags, ARCH_WARN_REACHABLE); \
| ^~~~~~~~~~
./include/asm-generic/bug.h:107:17: note: in expansion of macro
‘__WARN_FLAGS’
107 | __WARN_FLAGS(BUGFLAG_NO_CUT_HERE |
BUGFLAG_TAINT(taint));\
| ^~~~~~~~~~~~
./include/asm-generic/bug.h:134:17: note: in expansion of macro
‘__WARN_printf’
134 | __WARN_printf(TAINT_WARN, format); \
| ^~~~~~~~~~~~~
./include/linux/once_lite.h:31:25: note: in expansion of macro ‘WARN’
31 | func(__VA_ARGS__); \
| ^~~~
./include/asm-generic/bug.h:152:9: note: in expansion of macro
‘DO_ONCE_LITE_IF’
152 | DO_ONCE_LITE_IF(condition, WARN, 1, format)
| ^~~~~~~~~~~~~~~
./include/linux/fortify-string.h:24:41: note: in expansion of macro
‘WARN_ONCE’
24 | # define fortify_warn_once(x...) WARN_ONCE(x)
| ^~~~~~~~~
./include/linux/fortify-string.h:634:9: note: in expansion of macro
‘fortify_warn_once’
634 | fortify_warn_once(fortify_memcpy_chk(__fortify_size,
__p_size, \
| ^~~~~~~~~~~~~~~~~
./include/linux/fortify-string.h:690:26: note: in expansion of macro
‘__fortify_memcpy_chk’
690 | #define memcpy(p, q, s) __fortify_memcpy_chk(p, q, s,
\
| ^~~~~~~~~~~~~~~~~~~~
./net/wireless/./trace.h:44:17: note: in expansion of macro ‘memcpy’
44 | memcpy(__entry->name, netdev->name, IFNAMSIZ); \
| ^~~~~~
./net/wireless/./trace.h:1363:17: note: in expansion of macro
‘NETDEV_ASSIGN’
1363 | NETDEV_ASSIGN;
| ^~~~~~~~~~~~~
0x108d8f4 internal_error(char const*, ...)
???:0
0x1168c62 htab_find_slot_with_hash
???:0
0x118a549 get_combined_adhoc_loc(line_maps*, unsigned int,
source_range, void*, unsigned int)
???:0
0x11ed275 set_c_expr_source_range(c_expr*, unsigned int, unsigned int)
???:0
0x1630ad5 c_parse_file()
???:0
0x162bf41 c_common_parse_file()
???:0
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <file:///usr/share/doc/gcc-13/README.Bugs> for instructions.
make[4]: *** [scripts/Makefile.build:287: net/wireless/trace.o] Error 1
make[4]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[5]: *** [scripts/Makefile.build:503:
drivers/scsi/qla2xxx/qla2xxx.o] Error 139
make[5]: *** Deleting file 'drivers/scsi/qla2xxx/qla2xxx.o'
make[4]: *** [scripts/Makefile.build:556: drivers/scsi/qla2xxx] Error 2
make[4]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[8]: *** [scripts/Makefile.build:503:
drivers/net/wireless/broadcom/brcm80211/brcmfmac/brcmfmac.o] Error 139
make[8]: *** Deleting file
'drivers/net/wireless/broadcom/brcm80211/brcmfmac/brcmfmac.o'
make[7]: *** [scripts/Makefile.build:556:
drivers/net/wireless/broadcom/brcm80211/brcmfmac] Error 2
make[6]: *** [scripts/Makefile.build:556:
drivers/net/wireless/broadcom/brcm80211] Error 2
make[5]: *** [scripts/Makefile.build:556:
drivers/net/wireless/broadcom] Error 2
make[5]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[7]: *** [scripts/Makefile.build:503:
drivers/net/wireless/marvell/mwifiex/mwifiex.o] Error 139
make[7]: *** Deleting file
'drivers/net/wireless/marvell/mwifiex/mwifiex.o'
make[6]: *** [scripts/Makefile.build:556:
drivers/net/wireless/marvell/mwifiex] Error 2
make[5]: *** [scripts/Makefile.build:556:
drivers/net/wireless/marvell] Error 2
Segmentation fault (core dumped)
make[6]: *** [scripts/Makefile.build:503:
drivers/gpu/drm/vmwgfx/vmwgfx.o] Error 139
make[6]: *** Deleting file 'drivers/gpu/drm/vmwgfx/vmwgfx.o'
make[5]: *** [scripts/Makefile.build:556: drivers/gpu/drm/vmwgfx] Error 2
make[5]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[7]: *** [scripts/Makefile.build:503:
drivers/net/ethernet/chelsio/cxgb4/cxgb4.o] Error 139
make[7]: *** Deleting file 'drivers/net/ethernet/chelsio/cxgb4/cxgb4.o'
make[6]: *** [scripts/Makefile.build:556:
drivers/net/ethernet/chelsio/cxgb4] Error 2
make[5]: *** [scripts/Makefile.build:556:
drivers/net/ethernet/chelsio] Error 2
make[5]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[4]: *** [scripts/Makefile.build:503: net/tipc/tipc.o] Error 139
make[4]: *** Deleting file 'net/tipc/tipc.o'
make[4]: *** Waiting for unfinished jobs....
make[3]: *** [scripts/Makefile.build:556: net/tipc] Error 2
make[3]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[6]: *** [scripts/Makefile.build:503:
drivers/gpu/drm/radeon/radeon.o] Error 139
make[6]: *** Deleting file 'drivers/gpu/drm/radeon/radeon.o'
make[5]: *** [scripts/Makefile.build:556: drivers/gpu/drm/radeon] Error 2
Segmentation fault (core dumped)
make[7]: *** [scripts/Makefile.build:503:
drivers/net/wireless/intel/iwlwifi/iwlwifi.o] Error 139
make[7]: *** Deleting file 'drivers/net/wireless/intel/iwlwifi/iwlwifi.o'
make[7]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[7]: *** [scripts/Makefile.build:503:
drivers/crypto/intel/qat/qat_common/intel_qat.o] Error 139
make[7]: *** Deleting file
'drivers/crypto/intel/qat/qat_common/intel_qat.o'
make[6]: *** [scripts/Makefile.build:556:
drivers/crypto/intel/qat/qat_common] Error 2
make[5]: *** [scripts/Makefile.build:556: drivers/crypto/intel/qat]
Error 2
make[4]: *** [scripts/Makefile.build:556: drivers/crypto/intel] Error 2
make[4]: *** Waiting for unfinished jobs....
Segmentation fault (core dumped)
make[5]: *** [scripts/Makefile.build:503:
drivers/infiniband/core/ib_core.o] Error 139
make[5]: *** Deleting file 'drivers/infiniband/core/ib_core.o'
make[5]: *** Waiting for unfinished jobs....
Traces in the dmesg:
[ 324.400301] traps: objtool[65090] general protection fault
ip:56276e8c2970 sp:7ffe82aea4c8 error:0 in objtool[16970,56276e8b1000+1b000]
[ 341.847073] traps: objtool[79123] general protection fault
ip:558ab9a36970 sp:7fff36f85728 error:0 in objtool[16970,558ab9a25000+1b000]
[ 359.246429] traps: objtool[91450] general protection fault
ip:55593319e970 sp:7ffe8bd3eb18 error:0 in objtool[16970,55593318d000+1b000]
[ 362.973036] traps: objtool[94006] general protection fault
ip:5639d2606970 sp:7fffee3994b8 error:0 in objtool[16970,5639d25f5000+1b000]
[ 365.931869] traps: objtool[95866] general protection fault
ip:558922299970 sp:7ffea0764b58 error:0 in objtool[16970,558922288000+1b000]
Using git bisect, the first bad commit identified is:
[adfb6609c6809e107ded9a1cd46f519c882e64ea].
Notably, reverting the specified patch resolves the issue.
I have attached the bisection log and kernel configuration for your
reference. I hope that all necessary prerequisites have been addressed,
but kindly let me know if anything has been overlooked.
Please let me know if further logs or details are required for debugging.
Thanks,
Amandeep Kaur
View attachment "git-bisect.log" of type "text/plain" (3186 bytes)
View attachment "config" of type "text/plain" (242915 bytes)
Powered by blists - more mailing lists