lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Sat, 30 Sep 2017 21:44:51 +0800
From:   kernel test robot <fengguang.wu@...el.com>
To:     Byungchul Park <byungchul.park@....com>
Cc:     LKP <lkp@...org>, linux-kernel@...r.kernel.org,
        "Peter Zijlstra (Intel)" <peterz@...radead.org>,
        Ingo Molnar <mingo@...nel.org>, wfg@...ux.intel.com
Subject: ce07a9415f ("locking/lockdep: Make check_prev_add() able to .."):  BUG: unable to handle kernel NULL pointer dereference at 00000020

Greetings,

0day kernel testing robot got the below dmesg and the first bad commit is

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

commit ce07a9415f266e181a0a33033a5f7138760240a4
Author:     Byungchul Park <byungchul.park@....com>
AuthorDate: Mon Aug 7 16:12:51 2017 +0900
Commit:     Ingo Molnar <mingo@...nel.org>
CommitDate: Thu Aug 10 12:29:06 2017 +0200

    locking/lockdep: Make check_prev_add() able to handle external stack_trace
    
    Currently, a space for stack_trace is pinned in check_prev_add(), that
    makes us not able to use external stack_trace. The simplest way to
    achieve it is to pass an external stack_trace as an argument.
    
    A more suitable solution is to pass a callback additionally along with
    a stack_trace so that callers can decide the way to save or whether to
    save. Actually crossrelease needs to do other than saving a stack_trace.
    So pass a stack_trace and callback to handle it, to check_prev_add().
    
    Signed-off-by: Byungchul Park <byungchul.park@....com>
    Signed-off-by: Peter Zijlstra (Intel) <peterz@...radead.org>
    Cc: Linus Torvalds <torvalds@...ux-foundation.org>
    Cc: Peter Zijlstra <peterz@...radead.org>
    Cc: Thomas Gleixner <tglx@...utronix.de>
    Cc: akpm@...ux-foundation.org
    Cc: boqun.feng@...il.com
    Cc: kernel-team@....com
    Cc: kirill@...temov.name
    Cc: npiggin@...il.com
    Cc: walken@...gle.com
    Cc: willy@...radead.org
    Link: http://lkml.kernel.org/r/1502089981-21272-5-git-send-email-byungchul.park@lge.com
    Signed-off-by: Ingo Molnar <mingo@...nel.org>

70911fdc95  locking/lockdep: Change the meaning of check_prev_add()'s return value
ce07a9415f  locking/lockdep: Make check_prev_add() able to handle external stack_trace
74d83ec2b7  Merge tag 'platform-drivers-x86-v4.14-2' of git://git.infradead.org/linux-platform-drivers-x86
1418b85217  Add linux-next specific files for 20170929
+-------------------------------------------------------+------------+------------+------------+---------------+
|                                                       | 70911fdc95 | ce07a9415f | 74d83ec2b7 | next-20170929 |
+-------------------------------------------------------+------------+------------+------------+---------------+
| boot_successes                                        | 516        | 129        | 167        | 479           |
| boot_failures                                         | 0          | 6          | 43         | 146           |
| BUG:unable_to_handle_kernel                           | 0          | 6          | 24         | 42            |
| Oops:#[##]                                            | 0          | 6          | 24         | 42            |
| EIP:iput                                              | 0          | 5          |            |               |
| Kernel_panic-not_syncing:Fatal_exception              | 0          | 6          | 1          |               |
| EIP:do_raw_spin_trylock                               | 0          | 1          | 1          |               |
| WARNING:kernel_stack                                  | 0          | 0          | 20         | 110           |
| EIP:update_stack_state                                | 0          | 0          | 23         | 42            |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0          | 0          | 23         | 42            |
| invoked_oom-killer:gfp_mask=0x                        | 0          | 0          | 0          | 16            |
| Mem-Info                                              | 0          | 0          | 0          | 16            |
| EIP:clear_user                                        | 0          | 0          | 0          | 2             |
| EIP:copy_page_to_iter                                 | 0          | 0          | 0          | 1             |
+-------------------------------------------------------+------------+------------+------------+---------------+

procd: Instance odhcpd::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
procd: Instance uhttpd::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
procd: Instance dnsmasq::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
[  187.661000] Writes:  Total: 2  Max/Min: 0/0   Fail: 0 
procd: - shutdown -
[  220.353842] BUG: unable to handle kernel NULL pointer dereference at 00000020
[  220.354946] IP: iput+0x544/0x650
[  220.355441] *pde = 00000000 
[  220.355444] 
[  220.356100] Oops: 0000 [#1] PREEMPT SMP
[  220.356647] CPU: 0 PID: 29697 Comm: umount Not tainted 4.13.0-rc4-00169-gce07a941 #627
[  220.357790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[  220.359217] task: c0a0ba00 task.stack: c0a1e000
[  220.359881] EIP: iput+0x544/0x650
[  220.360384] EFLAGS: 00010246 CPU: 0
[  220.360900] EAX: 00000001 EBX: c0100218 ECX: 00000000 EDX: 00000000
[  220.361778] ESI: 00000000 EDI: 00000000 EBP: c0a1fdd8 ESP: c0a1fdc0
[  220.362689]  DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
[  220.363502] CR0: 80050033 CR2: 00000020 CR3: 10a03000 CR4: 00000690
[  220.364427] Call Trace:
[  220.364816]  dentry_unlink_inode+0x176/0x180
[  220.365449]  ? preempt_count_sub+0x1c5/0x2e0
[  220.366092]  __dentry_kill+0x207/0x330
[  220.366663]  shrink_dentry_list+0x5df/0x610
[  220.367311]  shrink_dcache_parent+0x65/0x80
[  220.367939]  do_one_tree+0x13/0x40
[  220.368449]  shrink_dcache_for_umount+0x84/0xe0
[  220.369132]  generic_shutdown_super+0x3e/0x1b0
[  220.369823]  kill_anon_super+0x11/0x20
[  220.370382]  kernfs_kill_sb+0x6c/0x80
[  220.370912]  sysfs_kill_sb+0x1a/0x30
[  220.371450]  deactivate_locked_super+0x4c/0x80
[  220.372109]  deactivate_super+0x100/0x110
[  220.372701]  cleanup_mnt+0xc0/0xe0
[  220.373206]  __cleanup_mnt+0x10/0x20
[  220.373716]  task_work_run+0x7f/0xa0
[  220.374255]  exit_to_usermode_loop+0x100/0x16f
[  220.374908]  do_int80_syscall_32+0x27f/0x2e0
[  220.375514]  entry_INT80_32+0x2f/0x2f
[  220.376046] EIP: 0xa7f34a69
[  220.376478] EFLAGS: 00000292 CPU: 0
[  220.376993] EAX: 00000000 EBX: 080960f0 ECX: a7f76ff4 EDX: 080960d0
[  220.377904] ESI: 080960d0 EDI: 080960f0 EBP: afe22258 ESP: afe22208
[  220.378773]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[  220.379565] Code: b5 20 56 3c b7 0f 84 64 fe ff ff e9 6b fe ff ff 8d b4 26 00 00 00 00 8b 7b 1c c1 ee 03 31 c9 83 05 ac 56 3c b7 01 83 e6 01 89 f2 <8b> 47 20 89 45 ec b8 c0 1f 30 b7 c7 04 24 00 00 00 00 e8 15 89
[  220.382358] EIP: iput+0x544/0x650 SS:ESP: 0068:c0a1fdc0
[  220.383125] CR2: 0000000000000020
[  220.383597] ---[ end trace 0bfc95b7cf7c8ea4 ]---
[  220.384273] Kernel panic - not syncing: Fatal exception

                                                          # HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 988e175b9df683ac8c465fca60d64dbe9e4dd81e 520eccdfe187591a51ea9ab4c1a024ae4d0f68d9 --
git bisect good d68e68e5fb7134427c6d79c58beaaf869543f3f7  # 08:24  G     19     0    0   0  IB/hfi1: Fix whitespace alignment issue for MAD
git bisect good 64b19e1323e96c34af7ca90d1954e70890c7a98e  # 08:44  G     19     0    0   0  IB/core: Export ioctl enum types to user-space
git bisect good 1993519be8bc86342687c61d8d11c3ade62b3b84  # 09:16  G     19     0    0   0  bnxt_re: Fix memory leak in FRMR path
git bisect  bad e930b4d8a52067c773d9cd6f6bdd7d4ddc99563f  # 09:28  B     10     2    1   1  RDMA/hns: remove redundant assignment to variable j
git bisect  bad 0ff4b7e6db6db3341a99a3f0afb5eb8927feb8ab  # 10:05  B     16     3    4   4  Merge branch 'vnic' into k.o/for-next
git bisect  bad 7ae6f2a3d552dc01c4423c0cdede1daa9fd07991  # 10:20  B      0     1   14   0  Merge branch 'qedr' into k.o/for-next
git bisect good 89aaca54ba60e91f02c1c168fbef5d71f71a6d43  # 10:55  G     55     0    0   2  bnxt_re: Don't issue cmd to delete GID for QP1 GID entry before the QP is destroyed
git bisect  bad 0d9c2ff1c9f7f8b339fc42ac9763b28c71f1c115  # 11:19  B     19     1    2   3  Merge tag 'v4.14-rc2' into k.o/for-next
git bisect  bad aae3dbb4776e7916b6cd442d00159bea27a695c1  # 11:41  B      1     1    0   0  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
git bisect  bad 04759194dc447ff0b9ef35bc641ce3bb076c2930  # 12:19  B     52     1    5   5  Merge tag 'arm64-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux
git bisect good 735f463af70e9601881ec879961ec42aef051733  # 13:15  G    177     0    0   5  Merge tag 'drm-intel-next-2017-08-18' of git://anongit.freedesktop.org/git/drm-intel into drm-next
git bisect good 0081a0ce809b611c1f37da5d6ae5bc8027ffd1c4  # 13:15  G    309     0    0   1  Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect  bad 5f82e71a001d14824a7728ad9e49f6aea420f161  # 13:15  B     42     5    0  13  Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect good 475fb533fb7d3dcf009a434f9b9ea238b93f4cb8  # 13:56  G    180     0    0   3  perf evsel: Fix buffer overflow while freeing events
git bisect good b0c79f49c343cda8954b3322984c32f258ca4ccb  # 15:32  G    174     0    0   0  Merge branch 'x86-asm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect  bad 0c2364791343e4b04cd1f097ff2abc2799062448  # 15:46  B     11     1    4   6  Merge branch 'x86/asm' into locking/core
git bisect good a9668cd6ee288c4838bc668880ac085be551cac2  # 16:27  G    175     0    0   6  locking: Remove smp_mb__before_spinlock()
git bisect  bad cd8084f91c02c1afd256a39aa833bff737631304  # 16:45  B     32     1    3   6  locking/lockdep: Apply crossrelease to completions
git bisect good 70911fdc9576f4eeb3986689a1c9a778a4a4aacb  # 17:42  G    174     0    0   0  locking/lockdep: Change the meaning of check_prev_add()'s return value
git bisect  bad 23f873d8f9526ed7e49a1a02a45f8afb9ae5fb84  # 17:51  B      0     1   14   0  locking/lockdep: Detect and handle hist_lock ring buffer overwrite
git bisect  bad b09be676e0ff25bd6d2e7637e26d349f9109ad75  # 17:52  B     54    10    0  11  locking/lockdep: Implement the 'crossrelease' feature
git bisect  bad ce07a9415f266e181a0a33033a5f7138760240a4  # 17:52  B     71     6    0   0  locking/lockdep: Make check_prev_add() able to handle external stack_trace
# first bad commit: [ce07a9415f266e181a0a33033a5f7138760240a4] locking/lockdep: Make check_prev_add() able to handle external stack_trace
git bisect good 70911fdc9576f4eeb3986689a1c9a778a4a4aacb  # 21:42  G    512     0    0   0  locking/lockdep: Change the meaning of check_prev_add()'s return value
# extra tests on HEAD of dledford/k.o/for-next
git bisect  bad 988e175b9df683ac8c465fca60d64dbe9e4dd81e  # 21:43  B      6     5    0   3  RDMA/hns: Fix calltrace for sleeping in atomic
# extra tests on tree/branch linus/master
git bisect  bad 74d83ec2b73457449918c315e40622c03a3659a6  # 21:43  B    163    24    0  19  Merge tag 'platform-drivers-x86-v4.14-2' of git://git.infradead.org/linux-platform-drivers-x86
# extra tests on tree/branch linux-next/master
git bisect  bad 1418b852174ad50b3cb4738b8801626aefdc0bd9  # 21:44  B    472    42    0 104  Add linux-next specific files for 20170929

---
0-DAY kernel test infrastructure                Open Source Technology Center
https://lists.01.org/pipermail/lkp                          Intel Corporation

Download attachment "dmesg-openwrt-lkp-nhm-dp2-12:20170930050756:i386-randconfig-i0-201739:4.13.0-rc4-00169-gce07a941:627.gz" of type "application/gzip" (15899 bytes)

View attachment "reproduce-openwrt-lkp-nhm-dp2-12:20170930050756:i386-randconfig-i0-201739:4.13.0-rc4-00169-gce07a941:627" of type "text/plain" (877 bytes)

View attachment "config-4.13.0-rc4-00169-gce07a941" of type "text/plain" (87721 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ