linux-kernel - test_power_init BUG: unable to handle kernel paging request at 853a92a8

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20120825063039.GA20566@localhost>
Date:	Sat, 25 Aug 2012 14:30:39 +0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	Anton Vorontsov <cbouatmailru@...il.com>
Cc:	John Stultz <john.stultz@...aro.org>, linux-kernel@...r.kernel.org
Subject: test_power_init BUG: unable to handle kernel paging request at
 853a92a8

Greetings,

This is an aged bug and happens also in 3.4:

[   28.015694] bus: 'platform': add driver wm831x-backup
[   28.015762] device: 'test_ac': device_add
[   28.015896] BUG: unable to handle kernel paging request at 853a92a8
[   28.015936] IP: [<817735c1>] strcmp+0x1c/0x3e
[   28.015943] *pde = 0530f067 *pte = 053a9160 
[   28.015952] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
[   28.015965] Pid: 1, comm: swapper/0 Not tainted 3.6.0-rc3-04525-ge838580 #605  
[   28.015968] EIP: 0060:[<817735c1>] EFLAGS: 00010246 CPU: 0
[   28.015972] EIP is at strcmp+0x1c/0x3e
[   28.015975] EAX: 853a92a8 EBX: 86bf0420 ECX: 8111a623 EDX: 860ff8f0
[   28.015979] ESI: 853a92a8 EDI: 860ff8f0 EBP: 8b43bf50 ESP: 8b43bf48
[   28.015982]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[   28.015986] CR0: 8005003b CR2: 853a92a8 CR3: 043e4000 CR4: 00000690
[   28.015996] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[   28.016000] DR6: ffff0ff0 DR7: 00000400
[   28.016007] Process swapper/0 (pid: 1, ti=8b43a000 task=8b440000 task.ti=8b43a000)
[   28.016009] Stack:
[   28.016025]  869a1de0 83c75a1c 8b43bf64 8260c2ee 86bf0420 860ff8f0 83c75a1c 8b43bf7c
[   28.016040]  8260c7a3 00000000 83c759a4 00000001 00000000 8b43bf8c 825bba00 83c759a4
[   28.016055]  85344400 8b43bfa0 825bb2ad 00000000 84224a0f 83c759a4 8b43bfb4 84224a48
[   28.016057] Call Trace:
[   28.016084]  [<8260c2ee>] led_trigger_register+0x70/0x242
[   28.016092]  [<8260c7a3>] led_trigger_register_simple+0x5a/0x10b
[   28.016102]  [<825bba00>] power_supply_create_triggers+0x31e/0x34a
[   28.016108]  [<825bb2ad>] power_supply_register+0x2a2/0x351
[   28.016187]  [<84224a0f>] ? wm831x_backup_driver_init+0x2b/0x2b
[   28.016196]  [<84224a48>] test_power_init+0x39/0xee
[   28.016202]  [<84224a0f>] ? wm831x_backup_driver_init+0x2b/0x2b
[   28.016216]  [<8419c998>] do_one_initcall+0xf7/0x305
[   28.016222]  [<8419cf33>] kernel_init+0x38d/0x52e
[   28.016229]  [<8419cba6>] ? do_one_initcall+0x305/0x305
[   28.016248]  [<82cc3c82>] kernel_thread_helper+0x6/0x10
[   28.016345] Code: 89 d8 83 15 84 b6 bf 84 00 5e 5b 5e 5f 5d c3 55 89 e5 57 56 e8 dd 06 55 01 83 05 88 b6 bf 84 01 83 15 8c b6 bf 84 00 89 c6 89 d7 <ac> ae 75 08 84 c0 75 f8 31 c0 eb 04 19 c0 0c 01 83 05 90 b6 bf
[   28.016352] EIP: [<817735c1>] strcmp+0x1c/0x3e SS:ESP 0068:8b43bf48
[   28.016355] CR2: 00000000853a92a8

source line for led_trigger_register+0x70/0x242 is:

        156 int led_trigger_register(struct led_trigger *trigger)
        157 {   
        158         struct led_classdev *led_cdev;
        159         struct led_trigger *trig;
        160 
        161         rwlock_init(&trigger->leddev_list_lock);
        162         INIT_LIST_HEAD(&trigger->led_cdevs);
        163 
        164         down_write(&triggers_list_lock);
        165         /* Make sure the trigger's name isn't already in use */
        166         list_for_each_entry(trig, &trigger_list, next_trig) {
>       167                 if (!strcmp(trig->name, trigger->name)) {
        168                         up_write(&triggers_list_lock);
        169                         return -EEXIST;
        170                 }
        171         }

The bisected first bad commit seems to be an innocent one..

commit 32efe08d77f5902ce7315fc9003c010ffffb8268
Merge: da19431 b01543d
Author:     David S. Miller <davem@...emloft.net>
AuthorDate: Sun Feb 19 16:03:15 2012 -0500
Commit:     David S. Miller <davem@...emloft.net>
CommitDate: Sun Feb 19 16:03:15 2012 -0500

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
    
    Conflicts:
        drivers/net/ethernet/broadcom/bnx2x/bnx2x_stats.c
    
    Small minor conflict in bnx2x, wherein one commit changed how
    statistics were stored in software, and another commit
    fixed endianness bugs wrt. reading the values provided by
    the chip in memory.
    
    Signed-off-by: David S. Miller <davem@...emloft.net>

Thanks,
Fengguang

View attachment "dmesg-kvm-fat-3563-2012-08-23-14-38-44-3.6.0-rc3-04525-ge838580-605" of type "text/plain" (128802 bytes)

View attachment "config-3.6.0-rc3-04525-ge838580" of type "text/plain" (78227 bytes)