| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 25 Oct 2017 09:57:08 +0800
From: kernel test robot <fengguang.wu@...el.com>
To: Bart Van Assche <bart.vanassche@....com>
Cc: LKP <lkp@...org>, linux-scsi@...r.kernel.org,
linux-kernel@...r.kernel.org,
virtualization@...ts.linux-foundation.org,
Jens Axboe <axboe@...nel.dk>, wfg@...ux.intel.com
Subject: a570843ee9 ("virtio_blk: Fix an SG_IO regression"): kernel BUG
at include/linux/scatterlist.h:92!
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux-block.git for-linus
commit a570843ee9f0d1f613ccf167c6ddb95aaa3f509c
Author: Bart Van Assche <bart.vanassche@....com>
AuthorDate: Tue Oct 24 08:04:36 2017 +0200
Commit: Jens Axboe <axboe@...nel.dk>
CommitDate: Tue Oct 24 07:47:16 2017 -0600
virtio_blk: Fix an SG_IO regression
Avoid that submitting an SG_IO ioctl triggers a kernel oops that
is preceded by:
usercopy: kernel memory overwrite attempt detected to (null) (<null>) (6 bytes)
kernel BUG at mm/usercopy.c:72!
Additionally, make it easier to diagnose crashes like the one
fixed by this patch.
Reported-by: Dann Frazier <dann.frazier@...onical.com>
Fixes: commit ca18d6f769d2 ("block: Make most scsi_req_init() calls implicit")
Signed-off-by: Bart Van Assche <bart.vanassche@....com>
Tested-by: Dann Frazier <dann.frazier@...onical.com>
Cc: Dann Frazier <dann.frazier@...onical.com>
Cc: Martin K. Petersen <martin.petersen@...cle.com>
Cc: <stable@...r.kernel.org> # v4.13
Signed-off-by: Jens Axboe <axboe@...nel.dk>
875397464a Merge branch 'nvme-4.14' of git://git.infradead.org/nvme into for-linus
a570843ee9 virtio_blk: Fix an SG_IO regression
a570843ee9 virtio_blk: Fix an SG_IO regression
+-------------------------------------------+------------+------------+------------+
| | 875397464a | a570843ee9 | a570843ee9 |
+-------------------------------------------+------------+------------+------------+
| boot_successes | 37 | 4 | 4 |
| boot_failures | 0 | 11 | 11 |
| kernel_BUG_at_include/linux/scatterlist.h | 0 | 11 | 11 |
| invalid_opcode:#[##] | 0 | 11 | 11 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 11 | 11 |
+-------------------------------------------+------------+------------+------------+
/etc/rcS.d/S00fbsetup: line 3: /sbin/modprobe: not found
[ 13.837041] rc (245) used greatest stack depth: 13632 bytes left
Starting udev
[ 14.814165] udevadm (257) used greatest stack depth: 13360 bytes left
[ 15.128722] ------------[ cut here ]------------
[ 15.131755] kernel BUG at include/linux/scatterlist.h:92!
[ 15.135624] invalid opcode: 0000 [#1] SMP
[ 15.138724] Modules linked in:
[ 15.141381] CPU: 0 PID: 261 Comm: udevd Not tainted 4.14.0-rc5-00038-ga570843 #48
[ 15.146353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 15.152690] task: ffffa0e3e7c9c340 task.stack: ffffb2f180a08000
[ 15.156851] RIP: 0010:sg_assign_page+0x16/0x2e
[ 15.159923] RSP: 0018:ffffb2f180a0b9e8 EFLAGS: 00010293
[ 15.167822] RAX: 0000000087654321 RBX: ffffa0e3ea16f248 RCX: ffffa0e3e7424b08
[ 15.183066] RDX: 0000000000000000 RSI: fffff2e600883a00 RDI: ffffa0e3ea2a41f8
[ 15.187252] RBP: ffffb2f180a0b9e8 R08: 000000052d22ceb2 R09: ffffa0e3e7424a80
[ 15.191824] R10: ffffb2f180a0b8e8 R11: 0000000000004704 R12: ffffa0e3ea2a41f8
[ 15.196063] R13: 0000000000000014 R14: ffffa0e3ea2a41f8 R15: ffffa0e3ea2a4080
[ 15.200217] FS: 00007f923d33d700(0000) GS:ffffa0e3efa00000(0000) knlGS:0000000000000000
[ 15.205139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 15.208338] CR2: 00007ffed11dcf68 CR3: 000000002744f004 CR4: 00000000001606f0
[ 15.213302] Call Trace:
[ 15.215631] blk_rq_map_sg+0x228/0x3cd
[ 15.218466] virtio_queue_rq+0xd0/0x1e5
[ 15.221570] ? blk_mq_get_driver_tag+0x91/0xf6
[ 15.224803] blk_mq_dispatch_rq_list+0x195/0x2b0
[ 15.227598] blk_mq_sched_dispatch_requests+0x146/0x167
[ 15.230733] __blk_mq_run_hw_queue+0x68/0xd8
[ 15.233415] __blk_mq_delay_run_hw_queue+0x67/0xba
[ 15.236257] blk_mq_run_hw_queue+0x14/0x16
[ 15.239477] blk_mq_sched_insert_request+0xd8/0x11f
[ 15.243490] blk_execute_rq_nowait+0x78/0xd3
[ 15.246775] blk_execute_rq+0x68/0x9f
[ 15.249864] virtblk_serial_show+0x79/0xd7
[ 15.253033] ? virtblk_cache_type_show+0x46/0x46
[ 15.256436] dev_attr_show+0x25/0x49
[ 15.259273] sysfs_kf_seq_show+0x7f/0xcf
[ 15.262768] kernfs_seq_show+0x27/0x29
[ 15.265724] seq_read+0x177/0x333
[ 15.268372] kernfs_fop_read+0x3c/0x15d
[ 15.271562] __vfs_read+0x26/0x9d
[ 15.274213] ? fsnotify_perm+0x63/0x6f
[ 15.276933] ? security_file_permission+0x3b/0x42
[ 15.280369] ? rw_verify_area+0x7c/0xb5
[ 15.283008] vfs_read+0xb7/0xef
[ 15.285395] SyS_read+0x50/0x7e
[ 15.287702] entry_SYSCALL_64_fastpath+0x1f/0xbe
[ 15.290831] RIP: 0033:0x7f923ce63cf0
[ 15.293299] RSP: 002b:00007ffed11dcad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 15.296542] RAX: ffffffffffffffda RBX: ffffffffa5128e4a RCX: 00007f923ce63cf0
[ 15.300152] RDX: 0000000000001000 RSI: 00007ffed11dcae0 RDI: 0000000000000004
[ 15.304009] RBP: ffffb2f180a0bf98 R08: 0000000000937ebc R09: 00007f923ceb9c50
[ 15.307885] R10: 3a30303a30303030 R11: 0000000000000246 R12: 0000000000000046
[ 15.311815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000942ff3
[ 15.315720] ? trace_hardirqs_off_caller+0x3f/0xa1
[ 15.318761] Code: 00 00 00 75 0b 48 83 bf 18 01 00 00 00 0f 95 c0 83 e0 01 5d c3 55 40 f6 c6 03 48 89 e5 74 02 0f 0b b8 21 43 65 87 48 39 07 74 02 <0f> 0b 48 8b 47 08 a8 01 74 02 0f 0b 83 e0 03 48 09 c6 48 89 77
[ 15.330449] RIP: sg_assign_page+0x16/0x2e RSP: ffffb2f180a0b9e8
[ 15.334064] ---[ end trace 33be88842cc9b58e ]---
[ 15.337050] Kernel panic - not syncing: Fatal exception
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start f87a8651aad0983d194b9688fe06921be29f7c28 bb176f67090ca54869fc1262c913aa69d2ede070 --
git bisect bad f58179bc54ed2bde90a55cecfa2bb40948fb7fb8 # 07:24 B 0 11 25 1 Merge 'tip/locking/core' into devel-spot-201710250552
git bisect good 057aa65e2803457d6baab53bf335b9b479be0424 # 07:52 G 10 0 0 0 Merge 'rockchip/for-next' into devel-spot-201710250552
git bisect good 3540fb496ed4a91280579e9250543fbf9845227c # 08:08 G 11 0 0 0 Merge 'usb/usb-testing' into devel-spot-201710250552
git bisect bad 1b444e55dd9bfb2c61c75d002d69f5c4d1a361b6 # 08:18 B 0 9 22 0 Merge 'open-channel-ssd/for-4.15/cnex' into devel-spot-201710250552
git bisect bad ba1317402d6391acb478b36f656c1cd3652f3e54 # 08:27 B 0 9 24 2 Merge 'gfs2/dev' into devel-spot-201710250552
git bisect bad 922dd1dcce5deb7c56dc053ae3a61dd492ad0626 # 08:39 B 0 5 23 4 Merge 'block/for-linus' into devel-spot-201710250552
git bisect good bd9f07590a17f3158b51fb869dca723f1f606bdc # 08:56 G 11 0 0 0 nvme-rdma: Fix possible double free in reconnect flow
git bisect good 875397464a55dd750198f799626959ad4cf45563 # 09:06 G 11 0 0 0 Merge branch 'nvme-4.14' of git://git.infradead.org/nvme into for-linus
git bisect bad a570843ee9f0d1f613ccf167c6ddb95aaa3f509c # 09:17 B 0 11 24 0 virtio_blk: Fix an SG_IO regression
# first bad commit: [a570843ee9f0d1f613ccf167c6ddb95aaa3f509c] virtio_blk: Fix an SG_IO regression
git bisect good 875397464a55dd750198f799626959ad4cf45563 # 09:24 G 31 0 0 0 Merge branch 'nvme-4.14' of git://git.infradead.org/nvme into for-linus
# extra tests on HEAD of linux-devel/devel-spot-201710250552
git bisect bad f87a8651aad0983d194b9688fe06921be29f7c28 # 09:25 B 0 14 44 1 0day head guard for 'devel-spot-201710250552'
# extra tests on tree/branch block/for-linus
git bisect bad a570843ee9f0d1f613ccf167c6ddb95aaa3f509c # 09:31 B 0 11 25 0 virtio_blk: Fix an SG_IO regression
# extra tests with first bad commit reverted
git bisect good fe92c073050308bb1baee9b2b5ff53961249a321 # 09:56 G 11 0 0 0 Revert "virtio_blk: Fix an SG_IO regression"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
Download attachment "dmesg-yocto-ivb41-116:20171025091600:x86_64-allyesdebian:4.14.0-rc5-00038-ga570843:48.gz" of type "application/gzip" (31011 bytes)
View attachment "reproduce-yocto-ivb41-116:20171025091600:x86_64-allyesdebian:4.14.0-rc5-00038-ga570843:48" of type "text/plain" (903 bytes)
View attachment "config-4.14.0-rc5-00038-ga570843" of type "text/plain" (163008 bytes)
Powered by blists - more mailing lists