linux-kernel - [mm, memory_hotplug] efad4e475c: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Fri, 22 Feb 2019 08:54:33 +0800
From:   kernel test robot <lkp@...el.com>
To:     Michal Hocko <mhocko@...e.com>
Cc:     Linus Torvalds <torvalds@...ux-foundation.org>,
        Mikhail Zaslonko <zaslonko@...ux.ibm.com>,
        Gerald Schaefer <gerald.schaefer@...ibm.com>,
        Mikhail Gavrilov <mikhail.v.gavrilov@...il.com>,
        Oscar Salvador <osalvador@...e.de>,
        Pavel Tatashin <pasha.tatashin@...een.com>,
        Heiko Carstens <heiko.carstens@...ibm.com>,
        Martin Schwidefsky <schwidefsky@...ibm.com>,
        Andrew Morton <akpm@...ux-foundation.org>,
        LKML <linux-kernel@...r.kernel.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>, lkp@...org
Subject: [mm, memory_hotplug]  efad4e475c: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-8):

commit: efad4e475c312456edb3c789d0996d12ed744c13 ("mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 1G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+---------------------------------------------------------+------------+------------+
|                                                         | 9bcdeb51bd | efad4e475c |
+---------------------------------------------------------+------------+------------+
| boot_successes                                          | 0          | 0          |
| boot_failures                                           | 6          | 4          |
| WARNING:at_mm/page_alloc.c:#__alloc_pages_nodemask      | 6          | 4          |
| RIP:__alloc_pages_nodemask                              | 6          | 4          |
| Mem-Info                                                | 6          | 4          |
| WARNING:at_lib/debugobjects.c:#__debug_object_init.cold | 6          | 4          |
| RIP:__debug_object_init.cold                            | 6          | 4          |
| BUG:unable_to_handle_kernel                             | 0          | 4          |
| Oops:#[##]                                              | 0          | 4          |
| RIP:page_mapping                                        | 0          | 4          |
| Kernel_panic-not_syncing:Fatal_exception                | 0          | 4          |
| WARNING:at_kernel/locking/lockdep.c:#lock_downgrade     | 0          | 1          |
| RIP:lock_downgrade                                      | 0          | 1          |
+---------------------------------------------------------+------------+------------+



[   50.067610] BUG: unable to handle kernel NULL pointer dereference at 0000000000000006
[   50.069651] #PF error: [normal kernel read fault]
[   50.070222] PGD 800000003549b067 P4D 800000003549b067 PUD 0 
[   50.070899] Oops: 0000 [#1] SMP PTI
[   50.071353] CPU: 1 PID: 410 Comm: udevd Tainted: G        W         5.0.0-rc4-00149-gefad4e4 #1
[   50.072399] RIP: 0010:page_mapping+0xe/0x70
[   50.072905] Code: c2 48 83 e0 fc 83 e2 03 48 83 fa 01 ba 00 00 00 00 48 0f 45 c2 c3 66 0f 1f 44 00 00 48 8b 47 08 48 8d 50 ff a8 01 48 0f 45 fa <48> 8b 57 08 48 8d 42 ff 83 e2 01 48 0f 44 c7 48 83 38 ff 74 2e 48
[   50.075101] RSP: 0000:ffffc90000477d40 EFLAGS: 00010202
[   50.075726] RAX: ffffffffffffffff RBX: ffff88803dfc0000 RCX: 0000000000000080
[   50.076581] RDX: fffffffffffffffe RSI: ffffffffa29e34e8 RDI: fffffffffffffffe
[   50.077448] RBP: 6db6db6db6db6db7 R08: 0000000000000001 R09: 0000000000000400
[   50.078310] R10: ffff88803ffd4000 R11: ffff88803e3fd000 R12: ffffffffa29e34e8
[   50.079143] R13: 0000000000000001 R14: ffff888033e74d40 R15: ffff888035abd1c8
[   50.080002] FS:  0000000000000000(0000) GS:ffff88803d300000(0063) knlGS:00000000f7d23b00
[   50.080984] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   50.081704] CR2: 0000000000000006 CR3: 0000000035ee6000 CR4: 00000000000406a0
[   50.082544] Call Trace:
[   50.082861]  __dump_page+0xf/0x120
[   50.083286]  dump_page+0x9/0x20
[   50.083683]  is_mem_section_removable+0x210/0x240
[   50.084258]  removable_show+0x6b/0xa0
[   50.084718]  dev_attr_show+0x14/0x40
[   50.085174]  sysfs_kf_seq_show+0xa8/0xf0
[   50.085629]  seq_read+0x141/0x3d0
[   50.086017]  __vfs_read+0x1e/0x170
[   50.086438]  ? free_unref_page_prepare+0xd1/0x180
[   50.087002]  vfs_read+0x9e/0x130
[   50.087420]  ksys_read+0x3d/0xa0
[   50.087837]  do_int80_syscall_32+0x45/0xf0
[   50.088345]  entry_INT80_compat+0x82/0x87
[   50.088844] CR2: 0000000000000006
[   50.089276] ---[ end trace d2d035d77c3b428d ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen

View attachment "config-5.0.0-rc4-00149-gefad4e4" of type "text/plain" (129927 bytes)

View attachment "job-script" of type "text/plain" (4206 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (20688 bytes)