| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <202410091622.3d66a78c-lkp@intel.com>
Date: Wed, 9 Oct 2024 21:52:05 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Gilad Naaman <gnaaman@...venets.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, <netdev@...r.kernel.org>,
"David S. Miller" <davem@...emloft.net>, Eric Dumazet <edumazet@...gle.com>,
Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>, "Gilad
Naaman" <gnaaman@...venets.com>, <oliver.sang@...el.com>
Subject: Re: [PATCH net-next v2 1/2] Convert neighbour-table to use hlist
Hello,
kernel test robot noticed "BUG:unable_to_handle_page_fault_for_address" on:
commit: febd2a80c498e3be8afdfe826ca49966bd9aca9a ("[PATCH net-next v2 1/2] Convert neighbour-table to use hlist")
url: https://github.com/intel-lab-lkp/linux/commits/Gilad-Naaman/Convert-neighbour-table-to-use-hlist/20241006-145017
base: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git 8f602276d3902642fdc3429b548d73c745446601
patch link: https://lore.kernel.org/all/20241006064747.201773-2-gnaaman@drivenets.com/
patch subject: [PATCH net-next v2 1/2] Convert neighbour-table to use hlist
in testcase: trinity
version: trinity-i386-abe9de86-1_20230429
with following parameters:
runtime: 300s
group: group-02
nr_groups: 5
compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+--------------------------------------------------------------+------------+------------+
| | 8f602276d3 | febd2a80c4 |
+--------------------------------------------------------------+------------+------------+
| BUG:unable_to_handle_page_fault_for_address | 0 | 100 |
| Oops | 0 | 100 |
| RIP:___neigh_lookup_noref | 0 | 100 |
+--------------------------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202410091622.3d66a78c-lkp@intel.com
[ 42.953184][ T23] BUG: unable to handle page fault for address: ffffffffdeaf2215
[ 42.954660][ T23] #PF: supervisor read access in kernel mode
[ 42.955397][ T23] #PF: error_code(0x0000) - not-present page
[ 42.956085][ T23] PGD 3441067 P4D 3441067 PUD 3443067 PMD 0
[ 42.956877][ T23] Oops: Oops: 0000 [#1] PREEMPT SMP
[ 42.957461][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G T 6.12.0-rc1-00350-gfebd2a80c498 #1 b68071eb3c38aea083990c8ab76066a73681badf
[ 42.959169][ T23] Tainted: [T]=RANDSTRUCT
[ 42.959657][ T23] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 42.960816][ T23] Workqueue: mld mld_ifc_work
[ 42.968090][ T23] RIP: 0010:___neigh_lookup_noref (include/net/neighbour.h:310)
[ 42.969009][ T23] Code: 00 00 48 c7 c2 de e1 0a 83 48 c7 c7 fc 39 1f 83 e8 b0 ea 08 ff 48 85 db 0f 84 85 00 00 00 48 8d bb 28 03 00 00 e8 31 18 1a ff <4c> 3b ab 28 03 00 00 75 0f 4c 89 e6 48 89 df e8 59 f8 ff ff 84 c0
All code
========
0: 00 00 add %al,(%rax)
2: 48 c7 c2 de e1 0a 83 mov $0xffffffff830ae1de,%rdx
9: 48 c7 c7 fc 39 1f 83 mov $0xffffffff831f39fc,%rdi
10: e8 b0 ea 08 ff call 0xffffffffff08eac5
15: 48 85 db test %rbx,%rbx
18: 0f 84 85 00 00 00 je 0xa3
1e: 48 8d bb 28 03 00 00 lea 0x328(%rbx),%rdi
25: e8 31 18 1a ff call 0xffffffffff1a185b
2a:* 4c 3b ab 28 03 00 00 cmp 0x328(%rbx),%r13 <-- trapping instruction
31: 75 0f jne 0x42
33: 4c 89 e6 mov %r12,%rsi
36: 48 89 df mov %rbx,%rdi
39: e8 59 f8 ff ff call 0xfffffffffffff897
3e: 84 c0 test %al,%al
Code starting with the faulting instruction
===========================================
0: 4c 3b ab 28 03 00 00 cmp 0x328(%rbx),%r13
7: 75 0f jne 0x18
9: 4c 89 e6 mov %r12,%rsi
c: 48 89 df mov %rbx,%rdi
f: e8 59 f8 ff ff call 0xfffffffffffff86d
14: 84 c0 test %al,%al
[ 42.971354][ T23] RSP: 0018:ffffc900000cbb88 EFLAGS: 00210246
[ 42.972125][ T23] RAX: 0000000000000000 RBX: ffffffffdeaf1eed RCX: 0000000000000000
[ 42.973071][ T23] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 42.974124][ T23] RBP: ffff88811af34b40 R08: 0000000000000000 R09: 0000000000000000
[ 42.975040][ T23] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811c6fa028
[ 42.975974][ T23] R13: ffff88811bc7a000 R14: 000000000000001d R15: 0000607bd0004020
[ 42.976897][ T23] FS: 0000000000000000(0000) GS:ffff88842fc00000(0000) knlGS:0000000000000000
[ 42.977854][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.978590][ T23] CR2: ffffffffdeaf2215 CR3: 000000000343f000 CR4: 00000000000406b0
[ 42.979442][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.980369][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.981266][ T23] Call Trace:
[ 42.981636][ T23] <TASK>
[ 42.981988][ T23] ? __die_body (arch/x86/kernel/dumpstack.c:421)
[ 42.982475][ T23] ? page_fault_oops (arch/x86/mm/fault.c:715)
[ 42.983091][ T23] ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1539)
[ 42.983677][ T23] ? asm_exc_page_fault (arch/x86/include/asm/idtentry.h:623)
[ 42.984326][ T23] ? ___neigh_lookup_noref (include/net/neighbour.h:310)
[ 42.985102][ T23] ? ___neigh_lookup_noref (include/net/neighbour.h:310)
[ 42.985789][ T23] ip6_finish_output2 (include/net/ndisc.h:368 net/ipv6/ip6_output.c:128)
[ 42.986377][ T23] ip6_output (net/ipv6/ip6_output.c:251)
[ 42.986913][ T23] dst_output+0x59/0x64
[ 42.987506][ T23] mld_sendpack (net/ipv6/mcast.c:1823)
[ 42.988064][ T23] mld_send_cr (net/ipv6/mcast.c:2121)
[ 42.988539][ T23] mld_ifc_work (net/ipv6/mcast.c:2653)
[ 42.989034][ T23] ? process_one_work (kernel/workqueue.c:3205)
[ 42.989680][ T23] process_one_work (kernel/workqueue.c:3234)
[ 42.990204][ T23] ? process_one_work (kernel/workqueue.c:3205)
[ 42.990790][ T23] process_scheduled_works (kernel/workqueue.c:3310)
[ 42.991361][ T23] worker_thread (include/linux/list.h:373 kernel/workqueue.c:946 kernel/workqueue.c:3392)
[ 42.991863][ T23] ? drain_dead_softirq_workfn (kernel/workqueue.c:3337)
[ 42.992581][ T23] kthread (kernel/kthread.c:391)
[ 42.993075][ T23] ? kthread (kernel/kthread.c:374)
[ 42.993578][ T23] ? list_del_init (include/linux/lockdep.h:249)
[ 42.994107][ T23] ret_from_fork (arch/x86/kernel/process.c:153)
[ 42.994606][ T23] ? list_del_init (include/linux/lockdep.h:249)
[ 42.995189][ T23] ret_from_fork_asm (arch/x86/entry/entry_64.S:254)
[ 42.995794][ T23] </TASK>
[ 42.996192][ T23] Modules linked in:
[ 42.996717][ T23] CR2: ffffffffdeaf2215
[ 42.997192][ T23] ---[ end trace 0000000000000000 ]---
[ 42.997790][ T23] RIP: 0010:___neigh_lookup_noref (include/net/neighbour.h:310)
[ 42.998628][ T23] Code: 00 00 48 c7 c2 de e1 0a 83 48 c7 c7 fc 39 1f 83 e8 b0 ea 08 ff 48 85 db 0f 84 85 00 00 00 48 8d bb 28 03 00 00 e8 31 18 1a ff <4c> 3b ab 28 03 00 00 75 0f 4c 89 e6 48 89 df e8 59 f8 ff ff 84 c0
All code
========
0: 00 00 add %al,(%rax)
2: 48 c7 c2 de e1 0a 83 mov $0xffffffff830ae1de,%rdx
9: 48 c7 c7 fc 39 1f 83 mov $0xffffffff831f39fc,%rdi
10: e8 b0 ea 08 ff call 0xffffffffff08eac5
15: 48 85 db test %rbx,%rbx
18: 0f 84 85 00 00 00 je 0xa3
1e: 48 8d bb 28 03 00 00 lea 0x328(%rbx),%rdi
25: e8 31 18 1a ff call 0xffffffffff1a185b
2a:* 4c 3b ab 28 03 00 00 cmp 0x328(%rbx),%r13 <-- trapping instruction
31: 75 0f jne 0x42
33: 4c 89 e6 mov %r12,%rsi
36: 48 89 df mov %rbx,%rdi
39: e8 59 f8 ff ff call 0xfffffffffffff897
3e: 84 c0 test %al,%al
Code starting with the faulting instruction
===========================================
0: 4c 3b ab 28 03 00 00 cmp 0x328(%rbx),%r13
7: 75 0f jne 0x18
9: 4c 89 e6 mov %r12,%rsi
c: 48 89 df mov %rbx,%rdi
f: e8 59 f8 ff ff call 0xfffffffffffff86d
14: 84 c0 test %al,%al
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20241009/202410091622.3d66a78c-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
Powered by blists - more mailing lists