linux-kernel - [lkp-robot] [mm] f7f99100d8: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Tue, 6 Feb 2018 16:26:58 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Pavel Tatashin <pasha.tatashin@...cle.com>
Cc:     linux-kernel@...r.kernel.org, lkp@...org
Subject: [lkp-robot] [mm]  f7f99100d8: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-7):

commit: f7f99100d8d95dbcf09e0216a143211e79418b9f ("mm: stop zeroing memory during allocation in vmemmap")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -smp 2 -m 32G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------+------------+------------+
|                                                 | e17d8025f0 | f7f99100d8 |
+-------------------------------------------------+------------+------------+
| boot_successes                                  | 2          | 1          |
| boot_failures                                   | 10         | 11         |
| BUG:kernel_reboot-without-warning_in_boot_stage | 10         |            |
| BUG:unable_to_handle_kernel                     | 0          | 11         |
| Oops:#[##]                                      | 0          | 11         |
| RIP:per_cpu_ptr_to_phys                         | 0          | 11         |
| Kernel_panic-not_syncing:Fatal_exception        | 0          | 11         |
+-------------------------------------------------+------------+------------+



[    0.000000] BUG: unable to handle kernel NULL pointer dereference at           (null)
[    0.000000] IP: per_cpu_ptr_to_phys+0x7f/0xd8
[    0.000000] PGD 0 P4D 0 
[    0.000000] Oops: 0000 [#1]
[    0.000000] Modules linked in:
[    0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 4.14.0-04321-gf7f9910 #1
[    0.000000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    0.000000] task: ffffffff9741a500 task.stack: ffffffff97400000
[    0.000000] RIP: 0010:per_cpu_ptr_to_phys+0x7f/0xd8
[    0.000000] RSP: 0000:ffffffff97403ee0 EFLAGS: 00010046
[    0.000000] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9f1274b33230
[    0.000000] RDX: ffff9f127ffc2000 RSI: 0000000000000000 RDI: 000000000007ffff
[    0.000000] RBP: 0000000000000000 R08: ffffffff97403ef4 R09: ffff9f12607bd000
[    0.000000] R10: 0000000000042000 R11: ffffffff97fb482c R12: ffffffff97668640
[    0.000000] R13: ffff9f127ffbd8c0 R14: 0000000000000000 R15: 0000000000000000
[    0.000000] FS:  0000000000000000(0000) GS:ffffffff97436000(0000) knlGS:0000000000000000
[    0.000000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    0.000000] CR2: 0000000000000000 CR3: 000000052b415000 CR4: 00000000000006b0
[    0.000000] Call Trace:
[    0.000000]  cpu_init+0x1da/0x1f9
[    0.000000]  trap_init+0x42/0x52
[    0.000000]  start_kernel+0x277/0x48a
[    0.000000]  secondary_startup_64+0xa5/0xb0
[    0.000000] Code: 75 0c 48 39 d8 b9 01 00 00 00 76 ed eb 45 48 89 df e8 da ed ff ff 48 8b 38 48 89 c1 81 e3 ff 0f 00 00 48 c1 ef 2d e8 95 e8 ff ff <48> 8b 00 48 83 e0 f8 48 29 c1 48 89 c8 48 b9 b7 6d db b6 6d db 
[    0.000000] RIP: per_cpu_ptr_to_phys+0x7f/0xd8 RSP: ffffffff97403ee0
[    0.000000] CR2: 0000000000000000
[    0.000000] ---[ end trace 142a0423c71f6258 ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.14.0-04321-gf7f9910" of type "text/plain" (86682 bytes)

View attachment "job-script" of type "text/plain" (4035 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (4224 bytes)