linux-kernel - [lkp-robot] [fw_cfg] d5daa79dd1: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Wed, 22 Nov 2017 10:16:09 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Marc-André Lureau <marcandre.lureau@...hat.com>
Cc:     "Michael S. Tsirkin" <mst@...hat.com>,
        LKML <linux-kernel@...r.kernel.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>, lkp@...org
Subject: [lkp-robot] [fw_cfg]  d5daa79dd1: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-5):

commit: d5daa79dd1c013fb9dbec70c7e371eed1feb09db ("fw_cfg: do DMA read operation")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -cpu Nehalem -smp 2 -m 512M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | 2199115e4b | d5daa79dd1 |
+------------------------------------------+------------+------------+
| boot_successes                           | 16         | 4          |
| boot_failures                            | 0          | 10         |
| BUG:unable_to_handle_kernel              | 0          | 10         |
| Oops:#[##]                               | 0          | 10         |
| RIP:nommu_map_page                       | 0          | 10         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 10         |
+------------------------------------------+------------+------------+



[   64.571579] BUG: unable to handle kernel paging request at 00000000008000c0
[   64.572878] IP: nommu_map_page+0x5/0x70
[   64.573627] PGD 1f3c8067 P4D 1f3c8067 PUD 1f3c9067 PMD 0 
[   64.580011] Oops: 0000 [#1] SMP
[   64.580011] Modules linked in: qemu_fw_cfg(+)
[   64.580011] CPU: 1 PID: 185 Comm: udevd Not tainted 4.14.0-00009-gd5daa79 #1
[   64.580011] task: ffff880015c58200 task.stack: ffff88001ef20000
[   64.580011] RIP: 0010:nommu_map_page+0x5/0x70
[   64.580011] RSP: 0018:ffff88001ef23a60 EFLAGS: 00010206
[   64.580011] RAX: ffff88001ffda080 RBX: 0000000004000000 RCX: 0000000000000010
[   64.580011] RDX: 00000000000006c0 RSI: 00000000008000c0 RDI: ffff88001d697810
[   64.580011] RBP: ffff88001ef23a68 R08: 0000000000000000 R09: 0000000000000000
[   64.580011] R10: ffffffff8101e940 R11: d9b5e5fe00000000 R12: 0000000000000004
[   64.580011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[   64.580011] FS:  00007fdd303f1780(0000) GS:ffff88001e700000(0000) knlGS:0000000000000000
[   64.580011] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.580011] CR2: 00000000008000c0 CR3: 000000001f3c7000 CR4: 00000000000006e0
[   64.580011] Call Trace:
[   64.580011]  fw_cfg_dma_transfer+0x1a1/0x350 [qemu_fw_cfg]
[   64.580011]  fw_cfg_read_blob+0xa5/0x180 [qemu_fw_cfg]
[   64.580011]  fw_cfg_sysfs_probe+0x25a/0x1550 [qemu_fw_cfg]
[   64.580011]  ? acpi_device_wakeup_disable+0x4d/0x50
[   64.580011]  platform_drv_probe+0x36/0x90
[   64.580011]  driver_probe_device+0x199/0x380
[   64.580011]  __driver_attach+0x9a/0xa0
[   64.580011]  ? driver_probe_device+0x380/0x380
[   64.580011]  bus_for_each_dev+0x61/0xa0
[   64.580011]  driver_attach+0x19/0x20
[   64.580011]  bus_add_driver+0x1a1/0x210
[   64.580011]  ? 0xffffffffa0006000
[   64.580011]  driver_register+0x5b/0xd0
[   64.580011]  ? 0xffffffffa0006000
[   64.580011]  __platform_driver_register+0x31/0x40
[   64.580011]  fw_cfg_sysfs_init+0x3e/0x1000 [qemu_fw_cfg]
[   64.580011]  ? 0xffffffffa0006000
[   64.580011]  do_one_initcall+0x3f/0x164
[   64.580011]  ? __might_sleep+0x45/0x80
[   64.580011]  do_init_module+0x78/0x3d9
[   64.580011]  load_module+0x2267/0x2710
[   64.580011]  SYSC_finit_module+0xba/0xc0
[   64.580011]  ? SYSC_finit_module+0xba/0xc0
[   64.580011]  SyS_finit_module+0x9/0x10
[   64.580011]  do_syscall_64+0x74/0x1f0
[   64.580011]  entry_SYSCALL64_slow_path+0x25/0x25
[   64.580011] RIP: 0033:0x7fdd2fac64a9
[   64.580011] RSP: 002b:00007ffcecc0b848 EFLAGS: 00000206 ORIG_RAX: 0000000000000139
[   64.580011] RAX: ffffffffffffffda RBX: 0000000000653380 RCX: 00007fdd2fac64a9
[   64.580011] RDX: 0000000000000000 RSI: 00007fdd2fd920aa RDI: 0000000000000007
[   64.580011] RBP: 00007fdd2fd920aa R08: 0000000000000000 R09: 0000000000653380
[   64.580011] R10: 0000000000000007 R11: 0000000000000206 R12: 0000000000000000
[   64.580011] R13: 0000000000020000 R14: 0000000000000000 R15: 0000000000653380
[   64.580011] Code: 49 89 c6 74 12 49 8b 16 48 83 e2 fc 75 83 0f 0b 0f ff e9 66 ff ff ff 44 89 e0 5b 41 5c 41 5d 41 5e 5d c3 0f 1f 00 55 48 89 e5 53 <4c> 8b 06 4c 89 c0 49 c1 e8 34 4e 8b 04 c5 00 e7 a3 82 48 c1 e8 
[   64.580011] RIP: nommu_map_page+0x5/0x70 RSP: ffff88001ef23a60
[   64.580011] CR2: 00000000008000c0
[   64.813564] ---[ end trace c6675425e1ab9b4d ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.14.0-00009-gd5daa79" of type "text/plain" (109335 bytes)

View attachment "job-script" of type "text/plain" (4237 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (23416 bytes)