linux-kernel - [staging] 184ecc5ceb: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 19 Mar 2018 17:19:31 +0800
From:   kernel test robot <fengguang.wu@...el.com>
To:     NeilBrown <neilb@...e.com>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        LKML <linux-kernel@...r.kernel.org>, devel@...verdev.osuosl.org,
        lkp@...org
Subject: [staging]  184ecc5ceb: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-6):

commit: 184ecc5ceb379b43b29fc373f497fca88c73ad38 ("staging: lustre: allow monolithic builds")
https://git.kernel.org/cgit/linux/kernel/git/gregkh/staging.git staging-testing

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -smp 2 -m 320M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 26f7a294e5 | 184ecc5ceb |
+------------------------------------------+------------+------------+
| boot_successes                           | 14         | 4          |
| boot_failures                            | 0          | 12         |
| BUG:unable_to_handle_kernel              | 0          | 12         |
| Oops:#[##]                               | 0          | 12         |
| EIP:cfs_cpt_spread_node                  | 0          | 12         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 12         |
+------------------------------------------+------------+------------+



[  123.548190] BUG: unable to handle kernel NULL pointer dereference at 00000008
[  123.551023] IP: cfs_cpt_spread_node+0x31/0x100
[  123.552032] *pdpt = 0000000000000000 *pde = f000ff53f000ff53 
[  123.552032] Oops: 0000 [#1] PREEMPT SMP
[  123.552032] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.16.0-rc3-00311-g184ecc5 #115
[  123.552032] EIP: cfs_cpt_spread_node+0x31/0x100
[  123.552032] EFLAGS: 00210202 CPU: 1
[  123.552032] EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000
[  123.552032] ESI: cf503ad8 EDI: 00000080 EBP: c02bded8 ESP: c02bded0
[  123.552032]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[  123.552032] CR0: 80050033 CR2: 00000008 CR3: 024b3000 CR4: 000006b0
[  123.552032] Call Trace:
[  123.552032]  cfs_percpt_alloc+0x62/0xb0
[  123.552032]  cfs_percpt_lock_create+0x3a/0x1a0
[  123.552032]  lnet_lib_init+0x28f/0x460
[  123.552032]  ? goldfish_nand_driver_init+0x16/0x16
[  123.552032]  lnet_init+0x22/0x16b
[  123.552032]  ? goldfish_nand_driver_init+0x16/0x16
[  123.581926]  do_one_initcall+0x90/0x13c
[  123.581926]  ? do_early_param+0x7a/0x7a
[  123.581926]  ? parse_args+0x16e/0x2e0
[  123.581926]  kernel_init_freeable+0x18a/0x20d
[  123.581926]  ? rest_init+0x120/0x120
[  123.581926]  kernel_init+0xd/0x100
[  123.581926]  ret_from_fork+0x19/0x24
[  123.581926] Code: 85 d2 89 e5 56 53 78 05 39 50 08 77 15 8b 50 04 8b 70 18 8d 4a 01 89 48 04 eb 1c 8d b4 26 00 00 00 00 8b 40 0c 8d 14 52 8d 04 90 <8b> 50 08 8b 70 04 8d 4a 01 89 48 08 0f b6 06 e8 ab d7 9f ff 85
[  123.581926] EIP: cfs_cpt_spread_node+0x31/0x100 SS:ESP: 0068:c02bded0
[  123.581926] CR2: 0000000000000008
[  123.581926] ---[ end trace d8c2581529145c01 ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
lkp

View attachment "config-4.16.0-rc3-00311-g184ecc5" of type "text/plain" (112541 bytes)

View attachment "job-script" of type "text/plain" (3792 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (13944 bytes)