[openssl-dev] [openssl.org #4411] VIA C7-D processor: Hang in 30-test_afalg.t

[Jeffrey Walton]

> OK, I've got two hung processes from two attempts to debug this:
>
>     $ ps -A | grep afalgtest
>      1030 pts/0    00:00:00 afalgtest
>      1196 pts/0    00:00:00 afalgtest
>
> Both appear to be hanging in syscall 248:
>
>     via:test$ sudo cat /proc/1030/syscall
>     248 0xb7fd6000 0x1 0xbfff98d4 0xb7fb9270 0xbfff98e0 0xb7ec45f7
> 0xbfff986c 0xb7fdbbe8
>     $ sudo cat /proc/1196/syscall
>     248 0xb7fd6000 0x1 0xbfff98d4 0xb7fb9270 0xbfff98e0 0xb7ec45f7
> 0xbfff986c 0xb7fdbbe8
>

I found this in dmesg/syslog. I'm guessing this is a kernel bug?

[  671.209915] BUG: unable to handle kernel NULL pointer dereference at 00000008
[  671.209931] IP: [<f8a6ccf2>]
skcipher_recvmsg_async.isra.13+0x4b2/0x500 [algif_skcipher]
[  671.209945] *pdpt = 000000003363b001 *pde = 0000000000000000
[  671.209952] Oops: 0000 [#2] SMP
[  671.209959] Modules linked in: jitterentropy_rng drbg ansi_cprng
algif_skcipher af_alg snd_hda_codec_realtek snd_hda_codec_generic
snd_hda_intel snd_hda_codec snd_hda_core snd_hwdep snd_pcm
snd_seq_midi snd_seq_midi_event snd_rawmidi padlock_sha snd_seq
padlock_aes snd_seq_device via_cputemp snd_timer hwmon_vid via_rng snd
input_leds serio_raw soundcore i2c_viapro shpchp 8250_fintek mac_hid
parport_pc ppdev lp parport autofs4 pata_acpi hid_generic usbhid hid
psmouse r8169 pata_via sata_via mii
[  671.210026] CPU: 0 PID: 1196 Comm: afalgtest Tainted: G      D
   4.2.0-30-generic #36-Ubuntu
[  671.210033] Hardware name: To Be Filled By O.E.M. To Be Filled By
O.E.M./Weibu, BIOS 080014  11/17/2011
[  671.210038] task: f4e0cec0 ti: f3fa8000 task.ti: f3fa8000
[  671.210043] EIP: 0060:[<f8a6ccf2>] EFLAGS: 00010202 CPU: 0
[  671.210050] EIP is at skcipher_recvmsg_async.isra.13+0x4b2/0x500
[algif_skcipher]
[  671.210055] EAX: f3f99400 EBX: f3f63c00 ECX: f3f99400 EDX: 00000000
[  671.210059] ESI: f3f63c00 EDI: 00000ff0 EBP: f3fa9dc8 ESP: f3fa9d70
[  671.210064]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[  671.210069] CR0: 80050033 CR2: 00000008 CR3: 32fd0de0 CR4: 000006b0
[  671.210073] Stack:
[  671.210076]  f3f995f4 f3f99400 f3f995e0 00000000 f3f99404 00000020
f3fa9d00 00000018
[  671.210088]  00001ff0 f3f98c00 f3f99404 00000ff0 f3fa9e40 f3f995e8
f3fa9e38 f3f99000
[  671.210099]  00000002 00000002 f3f99400 f1f58480 c1210510 f3fa9e38
f3fa9df4 f8a6cd6b
[  671.210110] Call Trace:
[  671.210125]  [<c1210510>] ? free_ioctx_users+0xa0/0xa0
[  671.210133]  [<f8a6cd6b>] skcipher_recvmsg+0x2b/0x1f0 [algif_skcipher]
[  671.210140]  [<f8a6c71a>] ? skcipher_check_key.isra.8+0x2a/0xb0
[algif_skcipher]
[  671.210148]  [<f8a6cf61>] skcipher_recvmsg_nokey+0x31/0x40 [algif_skcipher]
[  671.210157]  [<c164e1fd>] sock_recvmsg+0x3d/0x50
[  671.210164]  [<c164e294>] sock_read_iter+0x84/0xd0
[  671.210171]  [<c164e210>] ? sock_recvmsg+0x50/0x50
[  671.210177]  [<c12108b0>] aio_run_iocb+0x110/0x2c0
[  671.210183]  [<c164e210>] ? sock_recvmsg+0x50/0x50
[  671.210192]  [<c1767b8f>] ? error_code+0x67/0x6c
[  671.210203]  [<c11b25e4>] ? kmem_cache_alloc+0x1b4/0x1e0
[  671.210212]  [<c11e5112>] ? __fdget+0x12/0x20
[  671.210219]  [<c121168f>] do_io_submit+0x1ef/0x4a0
[  671.210230]  [<c12ddd2f>] ? security_file_alloc+0x2f/0x50
[  671.210238]  [<c1211960>] SyS_io_submit+0x20/0x30
[  671.210249]  [<c176695f>] sysenter_do_call+0x12/0x12
[  671.210252] Code: 00 00 00 75 24 8b 45 ac ff 52 0c 89 c7 83 ff 8d
75 8f 8b 45 e4 3e ff 80 fc 01 00 00 bf ef fd ff ff e9 62 fc ff ff 8d
76 00 89 c8 <ff> 52 08 89 c7 eb db 8b 45 e4 31 d2 8b 80 20 02 00 00 8b
58 1c
[  671.210319] EIP: [<f8a6ccf2>]
skcipher_recvmsg_async.isra.13+0x4b2/0x500 [algif_skcipher] SS:ESP
0068:f3fa9d70
[  671.210328] CR2: 0000000000000008
[  671.210334] ---[ end trace 3cce7cc6be0ad95f ]---