kernel oops in aafs_create in noble/oracular
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-realtime |
Confirmed
|
High
|
Unassigned | ||
linux (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned | ||
Noble |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Ubuntu Noble, Real Time kernel:
cking@noble-
Linux noble-amd64-efi 6.8.1-1002-realtime #2-Ubuntu SMP PREEMPT_RT Tue May 21 21:13:36 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
How to reproduce issue:
git clone https:/
cd stress-ng
make clean; make -j 8
sudo ./stress-ng --apparmor 8 --vmstat 1
after a while I observed the kernel oops splat message:
[ 131.881354] AppArmor DFA next/check upper bounds error
[ 131.993510] BUG: kernel NULL pointer dereference, address: 0000000000000040
[ 131.993512] #PF: supervisor read access in kernel mode
[ 131.993513] #PF: error_code(0x0000) - not-present page
[ 131.993514] PGD 0 P4D 0
[ 131.993516] Oops: 0000 [#1] PREEMPT_RT SMP PTI
[ 131.993518] CPU: 1 PID: 2357 Comm: stress-ng-appar Not tainted 6.8.1-1002-realtime #2-Ubuntu
[ 131.993521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 2024.02-2 03/11/2024
[ 131.993522] RIP: 0010:aafs_
[ 131.993532] Code: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d> 8b 55 40 4d 8d ba c0 00 00 00 4c 89 55 c0 4c 89 ff e8 6a d3 af
[ 131.993533] RSP: 0018:ffffb58981
[ 131.993535] RAX: 0000000000000000 RBX: 00000000000041ed RCX: 0000000000000000
[ 131.993536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 131.993537] RBP: ffffb589810efc28 R08: 0000000000000000 R09: 0000000000000000
[ 131.993538] R10: ffff8bf44a786040 R11: 0000000000000000 R12: ffffffffa9babb88
[ 131.993539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 131.993540] FS: 00007ed4e777cf4
[ 131.993541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 131.993542] CR2: 0000000000000040 CR3: 00000001093ba004 CR4: 0000000000370ef0
[ 131.993546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 131.993547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 131.993548] Call Trace:
[ 131.993549] <TASK>
[ 131.993551] ? show_regs+0x6d/0x80
[ 131.993567] ? __die+0x24/0x80
[ 131.993569] ? page_fault_
[ 131.993572] ? do_user_
[ 131.993575] ? exc_page_
[ 131.993577] ? asm_exc_
[ 131.993582] ? aafs_create.
[ 131.993584] ? aafs_create.
[ 131.993587] __aafs_
[ 131.993589] aa_replace_
[ 131.993606] policy_
[ 131.993608] profile_
[ 131.993610] ? preempt_
[ 131.993612] vfs_write+
[ 131.993629] ? putname+0x5b/0x80
[ 131.993632] ksys_write+
[ 131.993634] __x64_sys_
[ 131.993636] x64_sys_
[ 131.993638] do_syscall_
[ 131.993641] ? do_syscall_
[ 131.993643] ? debug_smp_
[ 131.993645] ? fpregs_
[ 131.993648] ? syscall_
[ 131.993650] ? do_syscall_
[ 131.993652] ? do_syscall_
[ 131.993654] ? do_syscall_
[ 131.993656] ? do_syscall_
[ 131.993658] ? irqentry_
[ 131.993660] entry_SYSCALL_
[ 131.993661] RIP: 0033:0x7ed4e8041574
[ 131.993674] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d d5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89
[ 131.993676] RSP: 002b:00007fff57
[ 131.993677] RAX: ffffffffffffffda RBX: 0000592cb9ed38f0 RCX: 00007ed4e8041574
[ 131.993678] RDX: 000000000001916a RSI: 0000592cb9ed96d0 RDI: 0000000000000007
[ 131.993679] RBP: 00007fff57a267f0 R08: 0000592cb9eb1010 R09: 0000000000000007
[ 131.993680] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000001916a
[ 131.993681] R13: 0000592cb9ed96d0 R14: 0000592cb9ed96d0 R15: 0000000000000003
[ 131.993684] </TASK>
[ 131.993685] Modules linked in: pcbc lrw chacha_generic chacha_x86_64 libchacha xxhash_generic xcbc wp512 vmac sm3_generic sm3_avx_x86_64 sm3 poly1305_generic poly1305_x86_64 nhpoly1305_avx2 nhpoly1305_sse2 nhpoly1305 libpoly1305 michael_mic md4 streebog_generic rmd160 cmac algif_rng twofish_generic twofish_avx_x86_64 twofish_x86_64_3way twofish_x86_64 twofish_common serpent_avx2 serpent_avx_x86_64 serpent_sse2_x86_64 serpent_generic fcrypt cast6_avx_x86_64 cast6_generic cast5_avx_x86_64 cast5_generic cast_common camellia_generic camellia_aesni_avx2 camellia_
[ 131.993740] snd_hda_
[ 131.993785] CR2: 0000000000000040
[ 131.993787] ---[ end trace 0000000000000000 ]---
Changed in qemu (Ubuntu): | |
importance: | Undecided → Medium |
affects: | qemu (Ubuntu) → linux (Ubuntu) |
summary: |
- kernel oops in aafs_create in 6.8.1-1002-realtime + kernel oops in aafs_create in 6.8.1-1002-realtime kernel |
affects: | linux (Ubuntu) → linux-realtime (Ubuntu) |
affects: | linux-realtime (Ubuntu) → ubuntu-realtime |
Changed in ubuntu-realtime: | |
importance: | Medium → High |
summary: |
- kernel oops in aafs_create in 6.8.1-1002-realtime kernel + kernel oops in aafs_create in noble/oracular |
Same issue on ARM64 with 6.8.1-1002-realtime too:
stress-ng: error: [4568] klog-check: alert: [445.413206] 'Unable to handle kernel access to user memory outside uaccess routines at virtual address 0000000000000040' 037000' 00000, p4d=00000000000 00000' constprop. 0+0xc0/ 0x170' constprop. 0+0x70/ 0x170'
stress-ng: error: [4568] klog-check: alert: [445.413235] 'Mem abort info:'
stress-ng: error: [4568] klog-check: alert: [445.413239] ' ESR = 0x0000000096000004'
stress-ng: error: [4568] klog-check: alert: [445.413244] ' EC = 0x25: DABT (current EL), IL = 32 bits'
stress-ng: error: [4568] klog-check: alert: [445.413251] ' SET = 0, FnV = 0'
stress-ng: error: [4568] klog-check: alert: [445.413256] ' EA = 0, S1PTW = 0'
stress-ng: error: [4568] klog-check: alert: [445.413260] ' FSC = 0x04: level 0 translation fault'
stress-ng: error: [4568] klog-check: alert: [445.413265] 'Data abort info:'
stress-ng: error: [4568] klog-check: alert: [445.413268] ' ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000'
stress-ng: error: [4568] klog-check: alert: [445.413273] ' CM = 0, WnR = 0, TnD = 0, TagAccess = 0'
stress-ng: error: [4568] klog-check: alert: [445.413279] ' GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0'
stress-ng: error: [4568] klog-check: alert: [445.413286] 'user pgtable: 4k pages, 48-bit VAs, pgdp=0000000128
stress-ng: error: [4568] klog-check: alert: [445.413295] '[0000000000000040] pgd=00000000000
stress-ng: error: [4568] klog-check: emergency: [445.413316] 'Internal error: Oops: 0000000096000004 [#1] PREEMPT_RT SMP'
stress-ng: info: [4568] klog-check: warning: [445.413385] 'Modules linked in: nhpoly1305_neon nhpoly1305 libpoly1305 michael_mic md4 streebog_generic rmd160 crc32_generic cmac algif_rng twofish_generic twofish_common serpent_generic fcrypt cast6_generic cast5_generic cast_common camellia_generic blowfish_generic blowfish_common aes_arm64 algif_skcipher algif_hash aria_generic sm4_generic sm4_neon ccm aes_ce_ccm des_generic libdes authenc aegis128 algif_aead af_alg tls qrtr cfg80211 binfmt_misc nls_iso8859_1 dm_multipath efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq libcrc32c raid1 raid0 crct10dif_ce polyval_ce polyval_generic ghash_ce sm4 sha2_ce sha256_arm64 sha1_ce arm_smccc_trng virtio_rng xhci_pci xhci_pci_renesas aes_neon_bs aes_neon_blk aes_ce_blk aes_ce_cipher'
stress-ng: info: [4568] klog-check: warning: [445.413741] 'CPU: 18 PID: 8888 Comm: stress-ng-appar Not tainted 6.8.1-1002-realtime #2-Ubuntu'
stress-ng: info: [4568] klog-check: warning: [445.413759] 'Hardware name: QEMU KVM Virtual Machine, BIOS 2023.05-2ubuntu0.1 02/12/2024'
stress-ng: info: [4568] klog-check: warning: [445.413767] 'pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)'
stress-ng: info: [4568] klog-check: warning: [445.413778] 'pc : aafs_create.
stress-ng: info: [4568] klog-check: warning: [445.413802] 'lr : aafs_create.
stress-ng: info: [4568] klog-check: warning: [445.413811] 'sp : ffff800085513b10'
stress-ng: info: [4568] klog-check: warning: [445.413815] 'x29: ffff800085513b10 x28: ffff14ec8bf7967c...