netdev - Re: [net] eedbbb0d98: RIP:inet_hashinfo2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Mon, 24 Dec 2018 13:04:40 -0800
From:   Peter Oskolkov <posk.devel@...il.com>
To:     kernel test robot <lkp@...el.com>
Cc:     Peter Oskolkov <posk@...gle.com>,
        "David S. Miller" <davem@...emloft.net>,
        syzcaller <syzkaller@...glegroups.com>,
        LKML <linux-kernel@...r.kernel.org>,
        netdev <netdev@...r.kernel.org>, lkp@...org
Subject: Re: [net] eedbbb0d98: RIP:inet_hashinfo2_init

A fix sent to netdev: https://patchwork.ozlabs.org/patch/1018304/

On Mon, Dec 24, 2018 at 5:01 AM kernel test robot <lkp@...el.com> wrote:
>
>
> FYI, we noticed the following commit (built with gcc-7):
>
> commit: eedbbb0d98b2a89250a8bb83d9c71b77881e5247 ("net: dccp: initialize (addr,port) listening hashtable")
> https://git.kernel.org/cgit/linux/kernel/git/davem/net-next.git master
>
> in testcase: trinity
> with following parameters:
>
>         runtime: 300s
>
> test-description: Trinity is a linux system call fuzz tester.
> test-url: http://codemonkey.org.uk/projects/trinity/
>
>
> on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 2G
>
> caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
>
>
> +-------------------------------------------------------+------------+------------+
> |                                                       | 6a95147c51 | eedbbb0d98 |
> +-------------------------------------------------------+------------+------------+
> | boot_successes                                        | 4          | 4          |
> | boot_failures                                         | 1          | 6          |
> | BUG:unable_to_handle_kernel                           | 1          | 6          |
> | Oops:#[##]                                            | 1          | 6          |
> | RIP:inet_lhash2_lookup                                | 1          |            |
> | Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 1          |            |
> | RIP:inet_hashinfo2_init                               | 0          | 6          |
> | Kernel_panic-not_syncing:Fatal_exception              | 0          | 6          |
> +-------------------------------------------------------+------------+------------+
>
>
>
> [   11.577638] BUG: unable to handle kernel paging request at ffffffff82cea1d0
> [   11.579009] PGD 260e067 P4D 260e067 PUD 260f063 PMD 7ef32063 PTE 800ffffffd315062
> [   11.580404] Oops: 0010 [#1] SMP PTI
> [   11.581114] CPU: 1 PID: 523 Comm: modprobe Not tainted 4.20.0-rc6-01475-geedbbb0 #1
> [   11.582531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
> [   11.584073] RIP: 0010:inet_hashinfo2_init+0x0/0x64
> [   11.584971] Code: Bad RIP value.
> [   11.585649] RSP: 0018:ffffc90000997ca0 EFLAGS: 00010246
> [   11.586596] RAX: ffffffffa01aa000 RBX: 0000000000000000 RCX: 0000000000000015
> [   11.587813] RDX: 0000000000000020 RSI: ffffffffa01a32b1 RDI: ffffffffa01a9dc0
> [   11.589037] RBP: ffffffffa01b12ed R08: 0000000000000000 R09: 0000000000010000
> [   11.590259] R10: 0000000000000000 R11: 00000000ffffffff R12: ffff8880632d6ce0
> [   11.591475] R13: 0000000000000001 R14: ffff88807ee8fc00 R15: ffffc90000997e98
> [   11.592711] FS:  00007f454c916700(0000) GS:ffff888072500000(0000) knlGS:0000000000000000
> [   11.594189] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   11.595215] CR2: ffffffff82cea1a6 CR3: 000000007978a000 CR4: 00000000000406e0
> [   11.596436] Call Trace:
> [   11.597014]  dccp_init+0x61/0x309 [dccp]
> [   11.597788]  ? trace_event_define_fields_dccp_probe+0x227/0x227 [dccp]
> [   11.598947]  do_one_initcall+0x46/0x1e4
> [   11.599700]  ? _cond_resched+0x19/0x30
> [   11.600430]  ? kmem_cache_alloc_trace+0x3e/0x1e0
> [   11.601299]  do_init_module+0x5b/0x200
> [   11.602068]  load_module+0x1836/0x1cd0
> [   11.602814]  ? ima_post_read_file+0xe2/0x120
> [   11.603630]  ? __do_sys_finit_module+0xe9/0x110
> [   11.604471]  __do_sys_finit_module+0xe9/0x110
> [   11.605301]  do_syscall_64+0x5b/0x180
> [   11.606037]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> [   11.606968] RIP: 0033:0x7f454c441229
> [   11.607693] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
> [   11.610809] RSP: 002b:00007fff3363ec38 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
> [   11.612204] RAX: ffffffffffffffda RBX: 0000559e818104c0 RCX: 00007f454c441229
> [   11.613426] RDX: 0000000000000000 RSI: 0000559e81177638 RDI: 0000000000000000
> [   11.614653] RBP: 0000559e81177638 R08: 0000000000000000 R09: 0000000000000001
> [   11.615865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
> [   11.617090] R13: 0000559e8180f500 R14: 0000000000040000 R15: 0000000000000000
> [   11.618310] Modules linked in: dccp(+) sr_mod cdrom sg ata_generic pata_acpi crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel ppdev aesni_intel crypto_simd cryptd glue_helper snd_pcm snd_timer snd soundcore pcspkr serio_raw ata_piix libata i2c_piix4 parport_pc parport floppy ip_tables
> [   11.622675] CR2: ffffffff82cea1d0
> [   11.623348] ---[ end trace b5a7a7e0716fa2b3 ]---
>
>
> To reproduce:
>
>         git clone https://github.com/intel/lkp-tests.git
>         cd lkp-tests
>         bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
>
>
>
> Thanks,
> Rong Chen