| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20191107090808.GW29418@shao2-debian>
Date: Thu, 7 Nov 2019 17:08:08 +0800
From: kernel test robot <lkp@...el.com>
To: Peter Zijlstra <peterz@...radead.org>
Cc: Aaron Lu <aaron.lwe@...il.com>,
Valentin Schneider <valentin.schneider@....com>,
Phil Auld <pauld@...hat.com>,
Julien Desfossez <jdesfossez@...italocean.com>,
Nishanth Aravamudan <naravamudan@...italocean.com>,
LKML <linux-kernel@...r.kernel.org>,
Linus Torvalds <torvalds@...ux-foundation.org>, lkp@...org
Subject: [sched] 10e7071b2f: BUG:kernel_NULL_pointer_dereference,address
FYI, we noticed the following commit (built with gcc-7):
commit: 10e7071b2f491b0fb981717ea0a585c441906ede ("sched: Rework CPU hotplug task selection")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: kernel_selftests
with following parameters:
group: kselftests-01
test-description: The kernel contains a set of "self tests" under the tools/testing/selftests/ directory. These are intended to be small unit tests to exercise individual code paths in the kernel.
test-url: https://www.kernel.org/doc/Documentation/kselftest.txt
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------+------------+------------+
| | f95d4eaee6 | 10e7071b2f |
+-------------------------------------------------+------------+------------+
| boot_successes | 54 | 12 |
| boot_failures | 0 | 82 |
| BUG:kernel_NULL_pointer_dereference,address | 0 | 79 |
| Oops:#[##] | 0 | 79 |
| RIP:pick_next_task_dl | 0 | 79 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 79 |
| BUG:kernel_reboot-without-warning_in_test_stage | 0 | 3 |
+-------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp@...el.com>
[ 84.432464] BUG: kernel NULL pointer dereference, address: 0000000000000064
[ 84.433700] #PF: supervisor read access in kernel mode
[ 84.434589] #PF: error_code(0x0000) - not-present page
[ 84.435499] PGD 0 P4D 0
[ 84.435933] Oops: 0000 [#1] SMP PTI
[ 84.436581] CPU: 1 PID: 15 Comm: migration/1 Not tainted 5.3.0-rc1-00086-g10e7071b2f491 #1
[ 84.438004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 84.439461] RIP: 0010:pick_next_task_dl+0xe/0xf0
[ 84.440266] Code: ed bd 70 01 01 e8 42 2d fb ff 0f 0b e9 6b ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 53 48 89 fb 48 83 ec 10 <8b> 46 64 85 c0 78 73 48 81 7e 78 a0 3f e2 a7 74 57 48 83 bb 10 09
[ 84.443485] RSP: 0000:ffffa5518008bd40 EFLAGS: 00010082
[ 84.444423] RAX: ffffffffa6eeeae0 RBX: ffff98ebbfd2b0c0 RCX: ffff98ebbfd2d040
[ 84.445641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff98ebbfd2b0c0
[ 84.446877] RBP: ffffa5518008bdc0 R08: 0000001ac1016512 R09: 0000000000000001
[ 84.448128] R10: ffffffffa863e640 R11: 0000000000000003 R12: ffff98ebbfd2b0c0
[ 84.449349] R13: ffffffffa7e23fa0 R14: ffffffffa7e24060 R15: 0000000000000000
[ 84.450603] FS: 0000000000000000(0000) GS:ffff98ebbfd00000(0000) knlGS:0000000000000000
[ 84.452007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 84.453022] CR2: 0000000000000064 CR3: 00000001aab84000 CR4: 00000000000406e0
[ 84.454244] Call Trace:
[ 84.455263] ? update_rq_clock+0x6d/0xe0
[ 84.456081] sched_cpu_dying+0x104/0x380
[ 84.456777] ? sched_cpu_starting+0xf0/0xf0
[ 84.457510] cpuhp_invoke_callback+0x86/0x5d0
[ 84.458279] ? cpu_disable_common+0x292/0x2b0
[ 84.459047] take_cpu_down+0x60/0xb0
[ 84.459649] multi_cpu_stop+0x6b/0x100
[ 84.460339] ? stop_machine_yield+0x10/0x10
[ 84.461078] cpu_stopper_thread+0x9e/0x110
[ 84.461809] ? smpboot_thread_fn+0x2f/0x1e0
[ 84.462539] ? smpboot_thread_fn+0x74/0x1e0
[ 84.463280] ? smpboot_thread_fn+0x14e/0x1e0
[ 84.464024] smpboot_thread_fn+0x149/0x1e0
[ 84.464768] ? sort_range+0x20/0x20
[ 84.465389] kthread+0x11e/0x140
[ 84.465961] ? kthread_park+0xa0/0xa0
[ 84.466605] ret_from_fork+0x35/0x40
[ 84.467236] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver binfmt_misc intel_rapl_msr intel_rapl_common sr_mod crct10dif_pclmul cdrom crc32_pclmul sg crc32c_intel ghash_clmulni_intel ata_generic pata_acpi ppdev bochs_drm drm_vram_helper ttm drm_kms_helper syscopyarea sysfillrect snd_pcm sysimgblt fb_sys_fops drm aesni_intel snd_timer ata_piix crypto_simd snd cryptd glue_helper libata soundcore pcspkr joydev serio_raw parport_pc i2c_piix4 parport floppy ip_tables
[ 84.474471] CR2: 0000000000000064
[ 84.475066] ---[ end trace af8f1919a81ca744 ]---
To reproduce:
# build kernel
cd linux
cp config-5.3.0-rc1-00086-g10e7071b2f491 .config
make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
View attachment "config-5.3.0-rc1-00086-g10e7071b2f491" of type "text/plain" (199569 bytes)
View attachment "job-script" of type "text/plain" (7120 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (18656 bytes)
Powered by blists - more mailing lists