linux-kernel - [rcu] 56be66c8e4: BUG:unable_to_handle

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20190404005020.jccy2cgkweiuzdop@inn2.lkp.intel.com>
Date:   Thu, 4 Apr 2019 08:50:20 +0800
From:   kernel test robot <lkp@...el.com>
To:     "Paul E. McKenney" <paulmck@...ux.ibm.com>
Cc:     Barret Rhoden <brho@...gle.com>, Tejun Heo <tj@...nel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>, lkp@...org
Subject: [rcu]  56be66c8e4: BUG:unable_to_handle_kernel


FYI, we noticed the following commit (built with gcc-7):

commit: 56be66c8e4c59e63fa5a64b6b1203215989d8b94 ("rcu: Forbid DEFINE{,_STATIC}_SRCU() from modules")
https://git.kernel.org/cgit/linux/kernel/git/paulmck/linux-rcu.git dev.2019.03.26b

in testcase: rcutorture
with following parameters:

	runtime: 300s
	test: default
	torture_type: srcu

test-description: rcutorture is rcutorture kernel module load/unload test.
test-url: https://www.kernel.org/doc/Documentation/RCU/torture.txt


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 2G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------+------------+------------+
|                                                 | 65a82d4a78 | 56be66c8e4 |
+-------------------------------------------------+------------+------------+
| boot_successes                                  | 3          | 0          |
| boot_failures                                   | 3          | 6          |
| BUG:kernel_reboot-without-warning_in_test_stage | 3          |            |
| BUG:unable_to_handle_kernel                     | 0          | 6          |
| Oops:#[##]                                      | 0          | 6          |
| RIP:rcu_torture_init[rcutorture]                | 0          | 6          |
| Kernel_panic-not_syncing:Fatal_exception        | 0          | 6          |
+-------------------------------------------------+------------+------------+



[   10.023434] BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
[   10.025116] #PF error: [normal kernel read fault]
[   10.025775] PGD 800000007ef32067 P4D 800000007ef32067 PUD 54492067 PMD 0 
[   10.026750] Oops: 0000 [#1] SMP PTI
[   10.027263] CPU: 1 PID: 607 Comm: modprobe Not tainted 5.1.0-rc1-00082-g56be66c #1
[   10.028353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   10.029534] RIP: 0010:rcu_torture_init+0xd4/0x1000 [rcutorture]
[   10.030356] Code: c7 c7 20 11 27 c0 31 db e8 c7 91 26 e9 48 c7 c5 4b 14 27 c0 48 c7 c7 bf 14 27 c0 e8 b4 91 26 e9 49 8b 04 de 48 89 ef 48 ff c3 <48> 8b b0 a0 00 00 00 e8 9e 91 26 e9 48 83 fb 06 75 e4 48 c7 c7 5e
[   10.032997] RSP: 0018:ffffbd5d4081bc80 EFLAGS: 00010207
[   10.033769] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[   10.034752] RDX: 0000000000000000 RSI: ffffffffab0f89a9 RDI: ffffffffc027144b
[   10.035756] RBP: ffffffffc027144b R08: ffffffffab0f89a2 R09: 000000000000001d
[   10.036789] R10: ffffeb7f81703b80 R11: 000000000000025f R12: ffffffffc0273040
[   10.037807] R13: ffffffffc02714d4 R14: ffffffffc0271640 R15: ffffffffc0271640
[   10.038829] FS:  00007fbdeb674700(0000) GS:ffff973121f00000(0000) knlGS:0000000000000000
[   10.040000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   10.040828] CR2: 00000000000000a0 CR3: 0000000053784000 CR4: 00000000000406e0
[   10.041852] Call Trace:
[   10.042230]  ? 0xffffffffc0296000
[   10.042721]  do_one_initcall+0x46/0x1e4
[   10.043806]  ? _cond_resched+0x19/0x30
[   10.044358]  ? kmem_cache_alloc_trace+0x3b/0x1d0
[   10.045034]  do_init_module+0x5b/0x210
[   10.045585]  load_module+0x1838/0x1f00
[   10.046131]  ? async_page_fault+0x1e/0x30
[   10.046719]  ? __do_sys_init_module+0x184/0x1c0
[   10.047374]  __do_sys_init_module+0x184/0x1c0
[   10.048013]  do_syscall_64+0x5b/0x1a0
[   10.052442]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   10.053203] RIP: 0033:0x7fbdeb18dbca
[   10.053748] Code: 48 8b 0d 79 32 2c 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 49 89 ca b8 af 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 46 32 2c 00 31 d2 48 29 c2 64
[   10.056421] RSP: 002b:00007ffdf5337b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000af
[   10.057504] RAX: ffffffffffffffda RBX: 0000000001362290 RCX: 00007fbdeb18dbca
[   10.058524] RDX: 0000000001368330 RSI: 000000000004aa26 RDI: 00007fbdeb628000
[   10.059548] RBP: 0000000001368330 R08: 0000000001360000 R09: 0000000000000000
[   10.060553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001360080
[   10.061633] R13: 00000000013600f0 R14: 0000000000000000 R15: 00000000013622a8
[   10.062674] Modules linked in: rcutorture(+) torture sr_mod cdrom ata_generic pata_acpi bochs_drm ttm ppdev drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops floppy drm parport_pc parport ata_piix joydev libata i2c_piix4
[   10.068277] CR2: 00000000000000a0
[   10.069942] ---[ end trace 5e2f071d5c04eea9 ]---


To reproduce:

        # build kernel
	cd linux
	cp config-5.1.0-rc1-00082-g56be66c .config
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 prepare
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 modules_prepare
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 SHELL=/bin/bash
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 bzImage


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen


View attachment "config-5.1.0-rc1-00082-g56be66c" of type "text/plain" (193135 bytes)

View attachment "job-script" of type "text/plain" (4694 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (13460 bytes)