lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:	Wed, 30 Jul 2014 12:10:09 +0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	Jonathan Cameron <jic23@....ac.uk>
Cc:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Jet Chen <jet.chen@...el.com>, Su Tao <tao.su@...el.com>,
	Yuanhan Liu <yuanhan.liu@...el.com>, LKP <lkp@...org>,
	linux-kernel@...r.kernel.org, linux-iio@...r.kernel.org,
	devel@...verdev.osuosl.org
Subject: [iio:dummy] BUG: unable to handle kernel NULL pointer dereference at
 00000000000000e0

Greetings,

0day kernel testing robot got the below dmesg and the first bad commit is

git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
commit 9ad2e2e1d6506252f31a142a9b04121992af25e3
Author:     Jonathan Cameron <jic23@....ac.uk>
AuthorDate: Fri Oct 14 16:34:15 2011 +0100
Commit:     Greg Kroah-Hartman <gregkh@...e.de>
CommitDate: Mon Oct 17 15:36:30 2011 -0700

    staging:iio:dummy Add buffered reading support
    
    Very simple buffered reading.  Did not provide a trigger as
    the sysfs trigger already meets that requirement.
    
    Signed-off-by: Jonathan Cameron <jic23@....ac.uk>
    Signed-off-by: Greg Kroah-Hartman <gregkh@...e.de>

===================================================
PARENT COMMIT NOT CLEAN. LOOK OUT FOR WRONG BISECT!
===================================================
Attached dmesg for the parent commit, too, to help confirm whether it is a noise error.

+-------------------------------------------------------+------------+------------+
|                                                       | e6477000fc | 9ad2e2e1d6 |
+-------------------------------------------------------+------------+------------+
| boot_successes                                        | 774        | 0          |
| boot_failures                                         | 426        | 300        |
| BUG:kernel_boot_hang                                  | 426        | 0          |
| BUG:unable_to_handle_kernel_NULL_pointer_dereference  | 0          | 300        |
| Oops                                                  | 0          | 300        |
| RIP:iio_buffer_register                               | 0          | 300        |
| Kernel_panic-not_syncing:Attempted_to_kill_init       | 0          | 300        |
| backtrace:iio_dummy_init                              | 0          | 300        |
| backtrace:async_page_fault                            | 0          | 300        |
+-------------------------------------------------------+------------+------------+

[    1.369812] device-mapper: multipath service-time: version 0.2.0 loaded
[    1.370969] Bluetooth: Virtual HCI driver ver 1.3
[    1.371923] cpuidle: using governor ladder
[    1.374155] BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0
[    1.375337] IP: [<ffffffff81a111de>] iio_buffer_register+0x2e/0x600
[    1.376212] PGD 0 
[    1.376515] Oops: 0000 [#1] DEBUG_PAGEALLOC
[    1.376709] CPU 0 
[    1.376709] Pid: 1, comm: swapper Not tainted 3.1.0-rc4-01470-g9ad2e2e #10  
[    1.376709] RIP: 0010:[<ffffffff81a111de>]  [<ffffffff81a111de>] iio_buffer_register+0x2e/0x600
[    1.376709] RSP: 0018:ffff880013425e50  EFLAGS: 00010246
[    1.376709] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[    1.376709] RDX: 0000000000000005 RSI: ffffffff82a77640 RDI: ffff880011be3008
[    1.376709] RBP: ffff880013425ec0 R08: 0000000000000000 R09: 0000000000000000
[    1.376709] R10: 0000000000000001 R11: 0000000000000002 R12: ffff880011be3008
[    1.376709] R13: 00000000fffffff4 R14: 0000000000000000 R15: ffff880011be3008
[    1.376709] FS:  0000000000000000(0000) GS:ffffffff82652000(0000) knlGS:0000000000000000
[    1.376709] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[    1.376709] CR2: 00000000000000e0 CR3: 000000000260d000 CR4: 00000000000006b0
[    1.376709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    1.376709] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[    1.376709] Process swapper (pid: 1, threadinfo ffff880013424000, task ffff880013422000)
[    1.376709] Stack:
[    1.376709]  0000000000000000 0000000000000000 ffff880013425e90 ffffffff81158c61
[    1.376709]  ffff880013425ea0 ffff880011be3668 ffffffff823f05d3 ffffffff82a77640
[    1.376709]  ffff880013425ec0 0000000000000000 ffff880011be3008 00000000fffffff4
[    1.376709] Call Trace:
[    1.376709]  [<ffffffff81158c61>] ? debug_mutex_init+0x41/0x60
[    1.376709]  [<ffffffff82f39dc6>] iio_dummy_init+0x1a5/0x272
[    1.376709]  [<ffffffff82f39c21>] ? iio_init+0xe6/0xe6
[    1.376709]  [<ffffffff82ee3420>] do_one_initcall+0xd2/0x27b
[    1.376709]  [<ffffffff82ee36fa>] kernel_init+0x131/0x243
[    1.376709]  [<ffffffff81c65004>] kernel_thread_helper+0x4/0x10
[    1.376709]  [<ffffffff81c637b0>] ? retint_restore_args+0x13/0x13
[    1.376709]  [<ffffffff82ee35c9>] ? do_one_initcall+0x27b/0x27b
[    1.376709]  [<ffffffff81c65000>] ? gs_change+0x13/0x13
[    1.376709] Code: e5 41 57 41 56 41 55 41 54 53 48 83 ec 48 e8 7a 2c 25 00 4c 8b b7 48 04 00 00 48 83 05 ab e4 1b 02 01 31 c0 49 89 ff 48 89 75 c8 
[    1.376709]  83 be e0 00 00 00 00 0f 95 c0 48 63 c8 48 83 c1 02 48 83 04 
[    1.376709] RIP  [<ffffffff81a111de>] iio_buffer_register+0x2e/0x600
[    1.376709]  RSP <ffff880013425e50>
[    1.376709] CR2: 00000000000000e0
[    1.408095] ---[ end trace 45d5343e36d694cc ]---
[    1.408926] Kernel panic - not syncing: Attempted to kill init!

git bisect start v3.2 v3.1 --
git bisect  bad 6aaf05f472c97ebceff47d9eef464574f1a55727  # 22:21      0-    213  Merge branch 'for-linus' of git://git390.marist.edu/pub/scm/linux-2.6
git bisect  bad 3f8ddb032afa729d4bad1bf2965d3ec068de6b72  # 22:25      0-     71  Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ohad/hwspinlock
git bisect  bad 37be944a0270402f9cda291a930b0286f6dc92f5  # 22:28      0-    210  Merge branch 'drm-core-next' of git://people.freedesktop.org/~airlied/linux
git bisect  bad 3cfef9524677a4ecb392d6fbffe6ebce6302f1d4  # 22:33      0-    214  Merge branch 'core-locking-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect good 4e7e2a2008f5d8c49791c412849d5b0232d39bb3  # 22:58    300+     95  Merge branch 'for-linus' of git://opensource.wolfsonmicro.com/regmap
git bisect good 7670c7010c7b367ca40c3aba02afb36149764a6e  # 23:16    300+    106  Merge branch 'for-linus' of git://github.com/gregungerer/m68knommu
git bisect good efb8d21b2c6db3497655cc6a033ae8a9883e4063  # 23:24    300+    140  Merge branch 'tty-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
git bisect  bad 37d96c28ecf0af1215bb6bbf580dbb1fabb5a6ec  # 23:32      0-     32  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
git bisect  bad aa77677e0a288e08073620db5d2a31df83ca4788  # 23:38      0-      6  Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
git bisect good c909ebbd0dcf19c617408c2cfde56c4bbd4f6cb4  # 23:52    300+      0  staging: hv: add newline to log messages in netvsc
git bisect good bb7410b2fd325d889f674d2456ce953c519fb774  # 00:07    300+     35  staging: brcm80211: removed likely/unlikely calls
git bisect good b2d62733e6ea427921e201269c1b55bca3a87936  # 00:17    300+     73  staging: brcm80211: removed redundant code from brcms_c_set_gmode
git bisect good 39f10bf18c80c98d9fec376beabe80b9c59c7498  # 00:36    300+    137  staging: xgifb: eliminate XGIfb_CRT2_write_enable variable
git bisect  bad e63abd0a1b757f6433869c13da4cf1b07fc14284  # 00:45      0-     49  iio: Spell fix - consistent use of Converter - no functional changes
git bisect good b55e073e95804b022075e464b9cf82e269fd457a  # 01:00    300+     66  staging/easycap: kill timeval members of easycap struct
git bisect  bad 9ad2e2e1d6506252f31a142a9b04121992af25e3  # 01:05      0-    148  staging:iio:dummy Add buffered reading support
git bisect good 3e2c96eab9278317569e2baf165f71042c927712  # 01:14    300+    104  staging:iio: gpio build dependency fixing
git bisect good 9c95e01e84e31178b9a83b683a501ed76166c259  # 01:20    300+     89  staging:iio:adc:max1363 incorrect allocation of available_scanmasks
git bisect good e6477000fced2c961c26fa42845bd388fdf95e79  # 01:25    300+     61  staging:iio:dummy Add event support + fake event generator
# first bad commit: [9ad2e2e1d6506252f31a142a9b04121992af25e3] staging:iio:dummy Add buffered reading support
git bisect good e6477000fced2c961c26fa42845bd388fdf95e79  # 01:32    900+    426  staging:iio:dummy Add event support + fake event generator
git bisect  bad eee4ca37c17a74bc97c899b0e68a36ff0f17392a  # 01:32      0-     26  0day head guard for 'devel-hourly-2014072206'
git bisect  bad 15ba2236f3556fc01b9ca91394465152b5ea74b6  # 01:37    283-    180  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
git bisect  bad 594a8bbcd415c795f54ee8b07f64ba313cc6074e  # 01:44      1-      6  Add linux-next specific files for 20140721


This script may reproduce the error.

----------------------------------------------------------------------------
#!/bin/bash

kernel=$1
initrd=yocto-minimal-x86_64.cgz

wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/blob/master/initrd/$initrd

kvm=(
	qemu-system-x86_64
	-cpu kvm64
	-enable-kvm
	-kernel $kernel
	-initrd $initrd
	-m 320
	-smp 1
	-net nic,vlan=1,model=e1000
	-net user,vlan=1
	-boot order=nc
	-no-reboot
	-watchdog i6300esb
	-rtc base=localtime
	-serial stdio
	-display none
	-monitor null 
)

append=(
	hung_task_panic=1
	earlyprintk=ttyS0,115200
	debug
	apic=debug
	sysrq_always_enabled
	rcupdate.rcu_cpu_stall_timeout=100
	panic=10
	softlockup_panic=1
	nmi_watchdog=panic
	prompt_ramdisk=0
	console=ttyS0,115200
	console=tty0
	vga=normal
	root=/dev/ram0
	rw
	drbd.minor_count=8
)

"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------

Thanks,
Fengguang

View attachment "dmesg-yocto-ivb41-92:20140723010438:x86_64-randconfig-s0-07220709::" of type "text/plain" (34318 bytes)

View attachment "dmesg-quantal-ivb41-100:20140723012130:x86_64-randconfig-s0-07220709::" of type "text/plain" (56137 bytes)

Download attachment "x86_64-randconfig-s0-07220709-eee4ca37c17a74bc97c899b0e68a36ff0f17392a-BUG:-unable-to-handle-kernel-NULL-pointer-dereference-75630.log" of type "application/octet-stream" (299621 bytes)

View attachment "config-3.1.0-rc4-01470-g9ad2e2e" of type "text/plain" (56047 bytes)

_______________________________________________
LKP mailing list
LKP@...ux.intel.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ