linux-kernel - [zoltrix@..._bus_shutdown] BUG: unable to handle kernel NULL pointer dereference at 0000000c

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20171126061405.nua5hv75fcm2sdc4@wfg-t540p.sh.intel.com>
Date:   Sun, 26 Nov 2017 14:14:05 +0800
From:   Fengguang Wu <fengguang.wu@...el.com>
To:     linux-media@...r.kernel.org
Cc:     Mauro Carvalho Chehab <mchehab@...nel.org>,
        linux-kernel@...r.kernel.org, lkp@...org
Subject: [zoltrix@..._bus_shutdown] BUG: unable to handle kernel NULL pointer
 dereference at 0000000c

Hello,

FYI this happens in mainline kernel 4.14.0-13292-g1d3b78b.
It at least dates back to 4.13.

It occurs in 1 out of 2 boots.

[   12.920044] rcu-perf:    1 writer-duration:   101 690739
[   12.920566] rcu-perf:    1 writer-duration:   102 556061
[   13.600625] radio-aimslab.0: Initialized radio card AIMSlab RadioTrack/RadioReveal on port 0x30f
[   13.601664] : Removed radio card AIMSlab RadioTrack/RadioReveal
[   16.640639] radio-aimslab.0: Initialized radio card AIMSlab RadioTrack/RadioReveal on port 0x30f
[   16.641593] BUG: unable to handle kernel NULL pointer dereference at 0000000c
[   16.642301] IP: isa_bus_shutdown+0x6/0x20:
						isa_bus_shutdown at drivers/base/isa.c:62
[   16.642666] *pde = 00000000
[   16.642964] Oops: 0000 [#1] PREEMPT SMP
[   16.643337] CPU: 1 PID: 43 Comm: rcu_perf_shutdo Tainted: G S               4.14.0-13292-g1d3b78b #1
[   16.644234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   16.645047] task: 4017a000 task.stack: 4032a000
[   16.645448] EIP: isa_bus_shutdown+0x6/0x20:
						isa_bus_shutdown at drivers/base/isa.c:62
[   16.645819] EFLAGS: 00210246 CPU: 1
[   16.646131] EAX: 4e7bfa00 EBX: 4e7bfa0c ECX: 4017a5e8 EDX: 00000000
[   16.646746] ESI: 43063440 EDI: 4e7bfa00 EBP: 4032bf68 ESP: 4032bf54
[   16.647363]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[   16.647845] CR0: 80050033 CR2: 0000000c CR3: 03238000 CR4: 00000690
[   16.648468] Call Trace:
[   16.648715]  ? device_shutdown+0xd3/0x1a0:
						device_unlock at include/linux/device.h:1104
						 (inlined by) device_shutdown at drivers/base/core.c:2814
[   16.649092]  ? kernel_power_off+0x2d/0x60:
						kernel_power_off at kernel/reboot.c:287
[   16.649489]  ? rcu_perf_shutdown+0xa0/0xb0:
						rcu_perf_shutdown at kernel/rcu/rcuperf.c:637
[   16.649885]  ? print_dl_stats+0x20/0x20:
						autoremove_wake_function at kernel/sched/wait.c:376
[   16.650024]  ? kthread+0x101/0x130:
						kthread at kernel/kthread.c:238
[   16.650024]  ? rcu_perf_cleanup+0x320/0x320:
						rcu_perf_shutdown at kernel/rcu/rcuperf.c:627
[   16.650024]  ? kthread_delayed_work_timer_fn+0xa0/0xa0:
						kthread at kernel/kthread.c:198
[   16.650024]  ? ret_from_fork+0x19/0x30:
						ret_from_fork at arch/x86/entry/entry_32.S:299
[   16.650024] Code: 74 13 55 89 e5 8b 90 80 01 00 00 ff d1 5d c3 8d b6 00 00 00 00 31 c0 c3 8d b6 00 00 00 00 8d bc 27 00 00 00 00 8b 90 88 00 00 00 <8b> 4a 0c 85 c9 74 0c 55 89 e5 8b 90 80 01 00 00 ff d1 5d c3 8d
[   16.650024] EIP: isa_bus_shutdown+0x6/0x20:
						isa_bus_shutdown at drivers/base/isa.c:62 SS:ESP: 0068:4032bf54
[   16.650024] CR2: 000000000000000c
[   16.650024] ---[ end trace 07ea2d1affc54db9 ]---
[   16.650024] Kernel panic - not syncing: Fatal exception

Attached the full dmesg, kconfig and reproduce scripts.

Thanks,
Fengguang

View attachment "dmesg-vm-ivb41-yocto-i386-1:20171125115550:i386-randconfig-sb0-11100832:4.14.0-13292-g1d3b78b:1" of type "text/plain" (96497 bytes)

View attachment ".config" of type "text/plain" (127786 bytes)

View attachment "job-script" of type "text/plain" (3765 bytes)

View attachment "reproduce-vm-ivb41-yocto-i386-1:20171125115550:i386-randconfig-sb0-11100832:4.14.0-13292-g1d3b78b:1" of type "text/plain" (2109 bytes)