linux-kernel - [driver core] ffbb97fa23: BUG:kernel_NULL_pointer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Fri, 20 Dec 2019 15:51:30 +0800
From:   kernel test robot <rong.a.chen@...el.com>
To:     Simon Schwartz <kern.simon@...schwartz.xyz>
Cc:     gregkh@...uxfoundation.org, rafael@...nel.org,
        linux-kernel@...r.kernel.org, lkp@...ts.01.org
Subject: [driver core] ffbb97fa23: BUG:kernel_NULL_pointer_dereference,address

FYI, we noticed the following commit (built with gcc-7):

commit: ffbb97fa2351f422393d62ede90fd6d905baa7c9 ("[PATCH] driver core: Prevent overflow from causing infinite loops")
url: https://github.com/0day-ci/linux/commits/Simon-Schwartz/driver-core-Prevent-overflow-from-causing-infinite-loops/20191211-114741


in testcase: boot

on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------+----------+------------+
|                                                                         | v5.5-rc1 | ffbb97fa23 |
+-------------------------------------------------------------------------+----------+------------+
| boot_successes                                                          | 0        | 0          |
| boot_failures                                                           | 48       | 4          |
| WARNING:at_drivers/base/core.c:#device_links_supplier_sync_state_resume | 48       |            |
| EIP:device_links_supplier_sync_state_resume                             | 48       |            |
| Mem-Info                                                                | 2        |            |
| BUG:kernel_NULL_pointer_dereference,address                             | 0        | 4          |
| Oops:#[##]                                                              | 0        | 4          |
| EIP:__release_resource                                                  | 0        | 4          |
| Kernel_panic-not_syncing:Fatal_exception                                | 0        | 4          |
+-------------------------------------------------------------------------+----------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <rong.a.chen@...el.com>


[    5.177527] BUG: kernel NULL pointer dereference, address: 0000001b
[    5.178174] #PF: supervisor read access in kernel mode
[    5.178696] #PF: error_code(0x0000) - not-present page
[    5.179215] *pde = 00000000 
[    5.179516] Oops: 0000 [#1]
[    5.179811] CPU: 0 PID: 1 Comm: swapper Not tainted 5.5.0-rc1-00001-gffbb97fa2351f #1
[    5.180598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    5.181457] EIP: __release_resource+0x1d/0x140
[    5.181927] Code: c4 20 5b 5e 5f 5d c3 8d b6 00 00 00 00 55 89 e5 57 56 53 83 ec 04 8b 78 14 83 05 e0 d5 ad 7a 01 83 15 e4 d5 ad 7a 00 89 55 f0 <8b> 77 1c 85 f6 75 14 8d 74 26 00 b8 ea ff ff ff e9 06 01 00 00 8d
[    5.183334] EAX: 7a8184c0 EBX: 7a8184c0 ECX: 00000000 EDX: 00000001
[    5.183334] ESI: 7a8182e0 EDI: ffffffff EBP: 7813bef0 ESP: 7813bee0
[    5.183334] DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068 EFLAGS: 00010246
[    5.183334] CR0: 80050033 CR2: 0000001b CR3: 02a8b000 CR4: 000406d0
[    5.183334] Call Trace:
[    5.183334]  ? release_resource+0x38/0x70
[    5.183334]  ? platform_device_add+0x2cb/0x310
[    5.183334]  ? init_ichxrom+0x869/0x869
[    5.183334]  ? platform_device_register+0xb5/0xd0
[    5.183334]  ? physmap_init+0x4a/0x89
[    5.183334]  ? do_one_initcall+0x148/0x3eb
[    5.183334]  ? parse_args+0x2f9/0x530
[    5.183334]  ? do_early_param+0x128/0x128
[    5.183334]  ? kernel_init_freeable+0x26d/0x3c9
[    5.183334]  ? rest_init+0x1e0/0x1e0
[    5.183334]  ? kernel_init+0x16/0x260
[    5.183334]  ? ret_from_fork+0x2e/0x38
[    5.183334] Modules linked in:
[    5.183334] CR2: 000000000000001b
[    5.183334] ---[ end trace a4579cc4ec58c147 ]---


To reproduce:

        # build kernel
	cd linux
	cp config-5.5.0-rc1-00001-gffbb97fa2351f .config
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=i386 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Rong Chen


View attachment "config-5.5.0-rc1-00001-gffbb97fa2351f" of type "text/plain" (116283 bytes)

View attachment "job-script" of type "text/plain" (4710 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (9936 bytes)