| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20141001060005.GA16272@wfg-t540p.sh.intel.com>
Date: Wed, 1 Oct 2014 14:00:05 +0800
From: Fengguang Wu <fengguang.wu@...el.com>
To: Jan Kara <jack@...e.cz>
Cc: Jet Chen <jet.chen@...el.com>, Su Tao <tao.su@...el.com>,
Yuanhan Liu <yuanhan.liu@...el.com>, LKP <lkp@...org>,
linux-fsdevel@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: [vfs] BUG: unable to handle kernel NULL pointer dereference at
(null)
Hi Jan,
0day kernel testing robot got the below dmesg and the first bad commit is
commit 82d9745eb11a03c976778629e15f5a752c09c346
Author: Jan Kara <jack@...e.cz>
AuthorDate: Mon Sep 29 15:10:26 2014 +0200
Commit: Jan Kara <jack@...e.cz>
CommitDate: Tue Sep 30 22:44:10 2014 +0200
vfs: Remove i_dquot field from inode
All filesystems using VFS quotas are now converted to use their private
i_dquot fields. Remove the i_dquot field from generic inode structure.
Signed-off-by: Jan Kara <jack@...e.cz>
+------------------------------------------+------------+------------+------------------+
| | f1b4496910 | 82d9745eb1 | v3.17-rc7_100105 |
+------------------------------------------+------------+------------+------------------+
| boot_successes | 900 | 110 | 21 |
| boot_failures | 0 | 7 | 11 |
| BUG:unable_to_handle_kernel | 0 | 7 | 11 |
| Oops | 0 | 7 | 11 |
| RIP:dquot_drop | 0 | 7 | 11 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 7 | 11 |
| backtrace:do_mount | 0 | 7 | 11 |
| backtrace:SyS_mount | 0 | 7 | 11 |
+------------------------------------------+------------+------------+------------------+
[ 7.565155] UDF-fs: warning (device vde): udf_fill_super: No partition found (2)
[ 7.574458] Mount JFS Failure: -22
[ 7.588464] UDF-fs: warning (device vdf): udf_fill_super: No partition found (2)
[ 7.590200] BUG: unable to handle kernel NULL pointer dereference at (null)
[ 7.591153] IP: [<ffffffff811596d9>] dquot_drop+0x19/0x40
[ 7.591153] PGD 10c97067 PUD 11166067 PMD 0
[ 7.591153] Oops: 0000 [#1]
[ 7.591153] CPU: 0 PID: 378 Comm: mount Not tainted 3.17.0-rc5-00035-g82d9745 #2
[ 7.591153] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 7.591153] task: ffff8800110de660 ti: ffff8800113f0000 task.ti: ffff8800113f0000
[ 7.591153] RIP: 0010:[<ffffffff811596d9>] [<ffffffff811596d9>] dquot_drop+0x19/0x40
[ 7.591153] RSP: 0018:ffff8800113f3d10 EFLAGS: 00010246
[ 7.591153] RAX: 0000000000000000 RBX: ffff880012a20b28 RCX: 00000001c4692862
[ 7.591153] RDX: 00000001c46928b4 RSI: ffff8800110de660 RDI: ffff880012a20b28
[ 7.591153] RBP: ffff8800113f3d10 R08: 000000000000003c R09: ffff8800111b8cb0
[ 7.591153] R10: ffffffff82693280 R11: 0000000000000000 R12: ffffffff81ebdd80
[ 7.591153] R13: ffffffff81ebdd80 R14: 0000000000000001 R15: ffff880012803940
[ 7.591153] FS: 00007f08c87d9700(0000) GS:ffffffff82421000(0000) knlGS:0000000000000000
[ 7.591153] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 7.591153] CR2: 0000000000000000 CR3: 0000000011070000 CR4: 00000000000006f0
[ 7.591153] Stack:
[ 7.591153] ffff8800113f3d28 ffffffff81267174 ffff880012a20b28 ffff8800113f3d48
[ 7.591153] ffffffff81120354 ffff880012a20b28 ffff8800111f9c00 ffff8800113f3d70
[ 7.591153] ffffffff81121054 ffff8800111f9c00 ffff8800114e3200 00000000ffffffea
[ 7.591153] Call Trace:
[ 7.591153] [<ffffffff81267174>] jfs_evict_inode+0x44/0xb0
[ 7.591153] [<ffffffff81120354>] evict+0xa4/0x170
[ 7.591153] [<ffffffff81121054>] iput+0xe4/0x180
[ 7.591153] [<ffffffff812662f9>] jfs_fill_super+0x1b9/0x380
[ 7.591153] [<ffffffff8110b5d9>] mount_bdev+0x189/0x1c0
[ 7.591153] [<ffffffff81266140>] ? jfs_remount+0x1b0/0x1b0
[ 7.591153] [<ffffffff81265300>] jfs_do_mount+0x10/0x20
[ 7.591153] [<ffffffff8110b813>] mount_fs+0x33/0x1c0
[ 7.591153] [<ffffffff81124d86>] vfs_kern_mount+0x66/0x110
[ 7.591153] [<ffffffff81126b43>] do_mount+0x243/0xad0
[ 7.591153] [<ffffffff810e4f23>] ? strndup_user+0x43/0x60
[ 7.591153] [<ffffffff81127780>] SyS_mount+0x80/0xc0
[ 7.591153] [<ffffffff81c05f30>] tracesys+0xcf/0xd4
[ 7.591153] Code: 00 00 55 be ff ff ff ff 48 89 e5 e8 22 f4 ff ff 5d c3 f6 47 0c 20 55 48 89 e5 75 23 48 8b 47 28 48 63 80 50 02 00 00 85 c0 75 17 <48> 83 3c 25 00 00 00 00 00 75 15 31 c0 48 83 78 08 00 75 0c 5d
[ 7.591153] RIP [<ffffffff811596d9>] dquot_drop+0x19/0x40
[ 7.591153] RSP <ffff8800113f3d10>
[ 7.591153] CR2: 0000000000000000
[ 7.701394] ---[ end trace d15805ff3c6dc4f0 ]---
[ 7.702424] Kernel panic - not syncing: Fatal exception
git bisect start b7dc959e9806a432742f3b0281ddcb2b815d5ee0 fe82dcec644244676d55a1384c958d5f67979adb --
git bisect bad 896c409a43c873671d6d4e76e273268d37ed3dc0 # 09:49 0- 9 Merge 'mlankhorst/for-airlied-next' into devel-hourly-2014100105
git bisect bad 261017646561f0325ec0114cee6436d7d35876a8 # 09:49 0- 39 Merge 'asoc/topic/fsl-ssi' into devel-hourly-2014100105
git bisect bad 7b2a30edb3fef527829150a866aefcd0b27ef80f # 09:49 0- 27 Merge 'ext3/for_testing' into devel-hourly-2014100105
git bisect good e86c44f8456590196d1144baa71d80f1c32e953e # 10:00 117+ 0 0day base guard for 'devel-hourly-2014100105'
git bisect good 10ca79a39f393163d05dd628c8d83551e4bbcf8f # 10:11 117+ 0 ocfs2: Convert to private i_dquot field
git bisect good 37993271cfa22b5620304f1fa3bf72eabb5b557b # 10:32 117+ 0 udf: remove redundant sys_tz declaration
git bisect bad 82d9745eb11a03c976778629e15f5a752c09c346 # 10:42 64- 1 vfs: Remove i_dquot field from inode
git bisect good f1b4496910c730f7938b6777a610576275a3bb31 # 10:58 300+ 0 reiserfs: Convert to private i_dquot field
# first bad commit: [82d9745eb11a03c976778629e15f5a752c09c346] vfs: Remove i_dquot field from inode
git bisect good f1b4496910c730f7938b6777a610576275a3bb31 # 11:12 900+ 0 reiserfs: Convert to private i_dquot field
git bisect bad b7dc959e9806a432742f3b0281ddcb2b815d5ee0 # 11:12 0- 11 0day head guard for 'devel-hourly-2014100105'
git bisect good aad7fb916a10f1065ad23de0c80a4a04bcba8437 # 11:50 900+ 0 Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm
git bisect good cb4b16caa8a58ee593c22f0876f9d921f10cd237 # 12:04 900+ 0 Add linux-next specific files for 20140930
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
initrd=yocto-minimal-x86_64.cgz
wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
kvm=(
qemu-system-x86_64
-cpu kvm64
-enable-kvm
-kernel $kernel
-initrd $initrd
-m 320
-smp 1
-net nic,vlan=1,model=e1000
-net user,vlan=1
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
Thanks,
Fengguang
View attachment "dmesg-yocto-vp-55:20141001104247:x86_64-randconfig-s0-10010819:3.17.0-rc5-00035-g82d9745:2" of type "text/plain" (74674 bytes)
Download attachment "x86_64-randconfig-s0-10010819-b7dc959e9806a432742f3b0281ddcb2b815d5ee0-BUG:-unable-to-handle-kernel-35707.log" of type "application/octet-stream" (80880 bytes)
View attachment "config-3.17.0-rc5-00035-g82d9745" of type "text/plain" (83659 bytes)
_______________________________________________
LKP mailing list
LKP@...ux.intel.com
Powered by blists - more mailing lists