| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CAAVpQUBROuDa2mSaq4AR9c9WO8W=Ziyv9CoH2kijPjTvq-gr8g@mail.gmail.com>
Date: Mon, 21 Jul 2025 16:12:13 -0700
From: Kuniyuki Iwashima <kuniyu@...gle.com>
To: oliver.sang@...el.com
Cc: edumazet@...gle.com, gnaaman@...venets.com, kuba@...nel.org,
linux-kernel@...r.kernel.org, lkp@...el.com, netdev@...r.kernel.org,
oe-lkp@...ts.linux.dev
Subject: Re: [linus:master] [neighbour] [confidence: ] f7f5273863: Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN
On Mon, Jul 21, 2025 at 4:00 PM Kuniyuki Iwashima <kuniyu@...gle.com> wrote:
>
> From: kernel test robot <oliver.sang@...el.com>
> Date: Sun, 20 Jul 2025 16:12:07 +0800
> > Hello,
> >
> > kernel test robot noticed "Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN" on:
> >
> > commit: f7f52738637f4361c108cad36e23ee98959a9006 ("neighbour: Create netdev->neighbour association")
> > https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
> >
> > [test failed on linus/master f4a40a4282f467ec99745c6ba62cb84346e42139]
> > [test failed on linux-next/master d086c886ceb9f59dea6c3a9dae7eb89e780a20c9]
> >
> > in testcase: boot
> >
> > config: x86_64-randconfig-123-20250718
> > compiler: clang-20
> > test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
> >
> > (please refer to attached dmesg/kmsg for entire log/backtrace)
> >
> >
> > +----------------------------------------------------------------------------------+------------+------------+
> > | | a01a67ab2f | f7f5273863 |
> > +----------------------------------------------------------------------------------+------------+------------+
> > | BUG_RAWv6 | 7 | |
> > | WARNING:at_mm/slab_common.c:#kmem_cache_destroy | 7 | |
> > | RIP:kmem_cache_destroy | 7 | |
> > | UBSAN:signed-integer-overflow_in_include/linux/atomic/atomic-arch-fallback.h | 7 | |
> > | Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN | 0 | 7 |
> > | KASAN:null-ptr-deref_in_range[#-#] | 0 | 7 |
> > | RIP:neigh_flush_dev.llvm | 0 | 7 |
> > | Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 7 |
> > +----------------------------------------------------------------------------------+------------+------------+
> >
> >
> > If you fix the issue in a separate patch/commit (i.e. not just a new version of
> > the same patch/commit), kindly add following tags
> > | Reported-by: kernel test robot <oliver.sang@...el.com>
> > | Closes: https://lore.kernel.org/oe-lkp/202507200931.7a89ecd8-lkp@intel.com
> >
> >
> > [ 21.205230][ T1] systemd[1]: RTC configured in localtime, applying delta of 0 minutes to system time.
> > [ 21.328503][ T1] NET: Registered PF_INET6 protocol family
> > [ 21.412618][ T1] IPv6: Attempt to unregister permanent protocol 6
> > [ 21.433405][ T1] IPv6: Attempt to unregister permanent protocol 136
> > [ 21.443410][ T1] IPv6: Attempt to unregister permanent protocol 17
>
> Probably this is IPv6 module unloading path (init failed).
>
> Then, neigh_table_clear() calls neigh_ifdown() with dev=NULL,
> which is not handled in neigh_flush_dev().
I noticed the full stack trace was uploaded here and saw it was
during module initialisation.
https://download.01.org/0day-ci/archive/20250720/202507200931.7a89ecd8-lkp@intel.com
[ 21.205230][ T1] systemd[1]: RTC configured in localtime,
applying delta of 0 minutes to system time.
[ 21.328503][ T1] NET: Registered PF_INET6 protocol family
[ 21.412618][ T1] IPv6: Attempt to unregister permanent protocol 6
[ 21.433405][ T1] IPv6: Attempt to unregister permanent protocol 136
[ 21.443410][ T1] IPv6: Attempt to unregister permanent protocol 17
[ 22.737430][ T1] Oops: general protection fault, probably for
non-canonical address 0xdffffc00000001a0: 0000 [#1] SMP KASAN
[ 22.738764][ T1] KASAN: null-ptr-deref in range
[0x0000000000000d00-0x0000000000000d07]
[ 22.739736][ T1] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G
T 6.12.0-rc6-01246-gf7f52738637f #1
[ 22.740972][ T1] Tainted: [T]=RANDSTRUCT
[ 22.741513][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX,
1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 22.742641][ T1] RIP:
0010:neigh_flush_dev.llvm.6395807810224103582+0x52/0x570
[ 22.743530][ T1] Code: c1 e8 03 42 8a 04 38 84 c0 0f 85 15 05 00
00 31 c0 41 83 3e 0a 0f 94 c0 48 8d 1c c3 48 81 c3 f8 0c 00 00 48 89
d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 f7 49 93 fe 4c 8b 3b
4d 85 ff 0f
[ 22.745585][ T1] RSP: 0000:ffff88810026f408 EFLAGS: 00010206
[ 22.746292][ T1] RAX: 00000000000001a0 RBX: 0000000000000d00
RCX: 0000000000000000
[ 22.747239][ T1] RDX: 0000000000000000 RSI: 0000000000000000
RDI: ffffffffc0631640
[ 22.748176][ T1] RBP: ffff88810026f470 R08: 0000000000000000
R09: 0000000000000000
[ 22.749092][ T1] R10: 0000000000000000 R11: 0000000000000000
R12: 0000000000000000
[ 22.750004][ T1] R13: ffffffffc0625250 R14: ffffffffc0631640
R15: dffffc0000000000
[ 22.750956][ T1] FS: 00007f575cb83940(0000)
GS:ffff8883aee00000(0000) knlGS:0000000000000000
[ 22.752016][ T1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 22.752799][ T1] CR2: 00007f575db40008 CR3: 00000002bf936000
CR4: 00000000000406f0
[ 22.753770][ T1] DR0: 0000000000000000 DR1: 0000000000000000
DR2: 0000000000000000
[ 22.754687][ T1] DR3: 0000000000000000 DR6: 00000000fffe0ff0
DR7: 0000000000000400
[ 22.755620][ T1] Call Trace:
[ 22.756076][ T1] <TASK>
[ 22.761164][ T1] __neigh_ifdown.llvm.6395807810224103582+0x44/0x390
[ 22.763825][ T1] neigh_table_clear+0xb1/0x268
[ 22.768510][ T1] ndisc_cleanup+0x21/0x38 [ipv6]
[ 22.769257][ T1] init_module+0x2f5/0x468 [ipv6]
[ 22.770010][ T1] do_one_initcall+0x1ba/0x628
[ 22.788113][ T1] do_init_module+0x21a/0x530
[ 22.788469][ T1] load_module+0x2550/0x2ea0
[ 22.788823][ T1] __se_sys_finit_module+0x3d2/0x620
[ 22.790672][ T1] __x64_sys_finit_module+0x76/0x88
[ 22.791060][ T1] x64_sys_call+0x7ff/0xde8
[ 22.791408][ T1] do_syscall_64+0xfb/0x1e8
[ 22.796085][ T1] entry_SYSCALL_64_after_hwframe+0x67/0x6f
[ 22.796513][ T1] RIP: 0033:0x7f575d6f2719
[ 22.796860][ T1] Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00
00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b
4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 06 0d 00 f7 d8
64 89 01 48
[ 22.798127][ T1] RSP: 002b:00007fff82a2a268 EFLAGS: 00000246
ORIG_RAX: 0000000000000139
[ 22.798728][ T1] RAX: ffffffffffffffda RBX: 0000557827b45310
RCX: 00007f575d6f2719
[ 22.799306][ T1] RDX: 0000000000000000 RSI: 00007f575d584efd
RDI: 0000000000000004
[ 22.799880][ T1] RBP: 00007f575d584efd R08: 0000000000000000
R09: 0000557827b47b00
[ 22.800463][ T1] R10: 0000000000000004 R11: 0000000000000246
R12: 0000000000020000
[ 22.801038][ T1] R13: 0000000000000000 R14: 0000557827b470e0
R15: 00007f575dbb4270
[ 22.801615][ T1] </TASK>
[ 22.801878][ T1] Modules linked in: ipv6(+)
Powered by blists - more mailing lists