| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20210731173954.Horde.fV2Xkw7-sxjG0DUcZ_JO_g3@messagerie.c-s.fr>
Date: Sat, 31 Jul 2021 17:39:54 +0200
From: Christophe Leroy <christophe.leroy@...roup.eu>
To: Finn Thain <fthain@...ux-m68k.org>
Cc: linuxppc-dev@...ts.ozlabs.org, linux-kernel@...r.kernel.org,
Nick Piggin <npiggin@...il.com>,
Michael Ellerman <mpe@...erman.id.au>,
Paul Mackerras <paulus@...ba.org>,
Benjamin Herrenschmidt <benh@...nel.crashing.org>,
Stan Johnson <userm57@...oo.com>
Subject: Re: [PATCH v3 31/41] powerpc/32: Dismantle
EXC_XFER_STD/LITE/TEMPLATE
Finn Thain <fthain@...ux-m68k.org> a écrit :
> Hi Christophe,
>
> On Fri, 12 Mar 2021, Christophe Leroy wrote:
>
>> In order to get more control in exception prolog, dismantle all non
>> standard exception macros, finishing with EXC_XFER_STD and EXC_XFER_LITE
>> and EXC_XFER_TEMPLATE.
>>
>> Also remove transfer_to_handler_full and ret_from_except and
>> ret_from_except_full as they are not used anymore.
>>
>> Last parameter of EXCEPTION() is now ignored, will be removed in a later
>> patch to avoid too much churn.
>>
>> Signed-off-by: Christophe Leroy <christophe.leroy@...roup.eu>
>> ---
>> arch/powerpc/kernel/entry_32.S | 42 +-----------------------
>> arch/powerpc/kernel/head_32.h | 21 ++++--------
>> arch/powerpc/kernel/head_40x.S | 33 ++++++++++++-------
>> arch/powerpc/kernel/head_8xx.S | 12 +++++--
>> arch/powerpc/kernel/head_book3s_32.S | 27 ++++++++++-----
>> arch/powerpc/kernel/head_booke.h | 49 +++++++++++++++-------------
>> arch/powerpc/kernel/head_fsl_booke.S | 14 +++++---
>> 7 files changed, 92 insertions(+), 106 deletions(-)
>>
>
> Stan Johnson contacted me about a regression in mainline that he observed
> on his G3 Powerbooks. Using 'git bisect' we determined that this patch was
> the cause of the regression, i.e. commit 4c0104a83fc3 ("powerpc/32:
> Dismantle EXC_XFER_STD/LITE/TEMPLATE").
>
> When testing 4c0104a83fc and all subsequent builds, various user processes
> were liable to segfault. Here is the console log that Stan provided:
Hi, i will be able to look at that more in details next week, however
I have a few preliminary qurstions.
Can you reliabily reproduce the problem with the said commit, and can
you reliabily run without problem with the parent commit ? I'm asking
because at first look that commit doesn't bring any functionnal change.
Coukd you provide your .config ?
Could you try without CONFIG_VMAP_STACK
Thanks
Christophe
>
> [ 0.000000] printk: debug: ignoring loglevel setting.
> [ 0.000000] Total memory = 512MB; using 1024kB for hash table
> [ 0.000000] Activating Kernel Userspace Execution Prevention
> [ 0.000000] Activating Kernel Userspace Access Protection
> [ 0.000000] Linux version 5.12.0-rc3-pmac-00067-g4c0104a83fc
> (johnson@...nkPad) (powerpc-linux-gnu-gcc (Debian 8.3.0-2) 8.3.0,
> GNU ld (GNU Binutils for Debian) 2.31.1) #22 SMP Fri Jul 30 12:15:00
> MDT 2021
> [ 0.000000] ioremap() called early from
> probe_one_macio+0x130/0x268. Use early_ioremap() instead
> [ 0.000000] Found a Gatwick mac-io controller, rev: 0, mapped at
> 0x(ptrval)
> [ 0.000000] ioremap() called early from
> probe_one_macio+0x130/0x268. Use early_ioremap() instead
> [ 0.000000] Found a Heathrow mac-io controller, rev: 0, mapped at
> 0x(ptrval)
> [ 0.000000] PowerMac motherboard: PowerBook Wallstreet
> [ 0.000000] ioremap() called early from find_via_pmu+0x244/0x56c.
> Use early_ioremap() instead
> [ 0.000000] PMU driver v2 initialized for PowerBook G3 Series,
> firmware: 0a
> [ 0.000000] Using PowerMac machine description
> [ 0.000000] printk: bootconsole [udbg0] enabled
> [ 0.000000] CPU maps initialized for 1 thread per core
> [ 0.000000] (thread shift is 0)
> [ 0.000000] -----------------------------------------------------
> [ 0.000000] phys_mem_size = 0x20000000
> [ 0.000000] dcache_bsize = 0x20
> [ 0.000000] icache_bsize = 0x20
> [ 0.000000] cpu_features = 0x000000000501a008
> [ 0.000000] possible = 0x00000000277de14a
> [ 0.000000] always = 0x0000000001000000
> [ 0.000000] cpu_user_features = 0x8c000001 0x00000000
> [ 0.000000] mmu_features = 0x00000001
> [ 0.000000] Hash_size = 0x100000
> [ 0.000000] Hash_mask = 0x3fff
> [ 0.000000] -----------------------------------------------------
> [ 0.000000] ioremap() called early from
> pmac_setup_arch+0x10c/0x294. Use early_ioremap() instead
> [ 0.000000] nvram: OF partition at 0x1800
> [ 0.000000] nvram: XP partition at 0x1300
> [ 0.000000] nvram: NR partition at 0x1400
> [ 0.000000] Top of RAM: 0x20000000, Total RAM: 0x20000000
> [ 0.000000] Memory hole size: 0MB
> [ 0.000000] Zone ranges:
> [ 0.000000] DMA [mem 0x0000000000000000-0x000000001fffffff]
> [ 0.000000] Normal empty
> [ 0.000000] HighMem empty
> [ 0.000000] Movable zone start for each node
> [ 0.000000] Early memory node ranges
> [ 0.000000] node 0: [mem 0x0000000000000000-0x000000001fffffff]
> [ 0.000000] Initmem setup node 0 [mem
> 0x0000000000000000-0x000000001fffffff]
> [ 0.000000] On node 0 totalpages: 131072
> [ 0.000000] DMA zone: 1024 pages used for memmap
> [ 0.000000] DMA zone: 0 pages reserved
> [ 0.000000] DMA zone: 131072 pages, LIFO batch:31
> [ 0.000000] percpu: Embedded 13 pages/cpu s21644 r8192 d23412 u53248
> [ 0.000000] pcpu-alloc: s21644 r8192 d23412 u53248 alloc=13*4096
> [ 0.000000] pcpu-alloc: [0] 0 [0] 1
> [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 130048
> [ 0.000000] Kernel command line: root=/dev/sda12 console=ttyS0
> console=tty printk.time earlyprintk ignore_loglevel video=ofonly
> [ 0.000000] Dentry cache hash table entries: 65536 (order: 6,
> 262144 bytes, linear)
> [ 0.000000] Inode-cache hash table entries: 32768 (order: 5,
> 131072 bytes, linear)
> [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
> [ 0.000000] Memory: 498908K/524288K available (6756K kernel code,
> 352K rwdata, 1276K rodata, 1232K init, 176K bss, 25380K reserved, 0K
> cma-reserved, 0K highmem)
> [ 0.000000] Kernel virtual memory layout:
> [ 0.000000] * 0xffbbf000..0xfffff000 : fixmap
> [ 0.000000] * 0xff400000..0xff800000 : highmem PTEs
> [ 0.000000] * 0xff2fd000..0xff400000 : early ioremap
> [ 0.000000] * 0xe1000000..0xff2fd000 : vmalloc & ioremap
> [ 0.000000] rcu: Hierarchical RCU implementation.
> [ 0.000000] rcu: RCU calculated value of scheduler-enlistment
> delay is 10 jiffies.
> [ 0.000000] NR_IRQS: 512, nr_irqs: 512, preallocated irqs: 16
> [ 0.000000] irq: Found primary Apple PIC /pci/mac-io for 64 irqs
> [ 0.000000] irq: Found slave Apple PIC /pci/mac-io for 64 irqs cascade: 27
> [ 0.000000] irq: System has 128 possible interrupts
> [ 0.000000] GMT Delta read from XPRAM: -360 minutes, DST: on
> [ 0.000000] random: get_random_u32 called from
> start_kernel+0x36c/0x4d8 with crng_init=0
> [ 0.000000] time_init: decrementer frequency = 16.671650 MHz
> [ 0.000000] time_init: processor frequency = 264.000000 MHz
> [ 0.000038] clocksource: timebase: mask: 0xffffffffffffffff
> max_cycles: 0x3d85178a6, max_idle_ns: 440795202430 ns
> [ 0.000097] clocksource: timebase mult[3bfb68a3] shift[24] registered
> [ 0.000201] clockevent: decrementer mult[44497e0] shift[32] cpu[0]
> [ 0.001368] Console: colour dummy device 80x25
> [ 0.001436] printk: console [tty0] enabled
> [ 0.001487] printk: bootconsole [udbg0] disabled
> [ 0.001882] pmac_zilog: serial modem detected
> [ 1.345729] printk: console [ttyS0] enabled
> [ 1.358329] pid_max: default: 32768 minimum: 301
> [ 1.372599] Mount-cache hash table entries: 1024 (order: 0, 4096
> bytes, linear)
> [ 1.394156] Mountpoint-cache hash table entries: 1024 (order: 0,
> 4096 bytes, linear)
> [ 1.422118] rcu: Hierarchical SRCU implementation.
> [ 1.437119] smp: Bringing up secondary CPUs ...
> [ 1.450268] smp: Brought up 1 node, 1 CPU
> [ 1.463448] devtmpfs: initialized
> [ 1.473485] Duplicate name in PowerPC,750, renamed to "l2-cache#1"
> [ 1.494492] Duplicate name in pci, renamed to "mac-io#1"
> [ 1.511648] Duplicate name in pci, renamed to "pccard#1"
> [ 1.530211] Found Grackle (MPC106) PCI host bridge at
> 0x0000000080000000. Firmware bus number: 0->0
> [ 1.556990] PCI host bridge /pci (primary) ranges:
> [ 1.571383] IO 0x00000000fe000000..0x00000000fe7fffff ->
> 0x0000000000000000
> [ 1.593309] MEM 0x00000000fd000000..0x00000000fdffffff ->
> 0x0000000000000000
> [ 1.614579] MEM 0x0000000080000000..0x00000000fcffffff ->
> 0x0000000080000000
> [ 1.637120] clocksource: jiffies: mask: 0xffffffff max_cycles:
> 0xffffffff, max_idle_ns: 19112604462750000 ns
> [ 1.667441] futex hash table entries: 512 (order: 2, 16384 bytes, linear)
> [ 1.688431] NET: Registered protocol family 16
> [ 1.707910] PMU i2c /pci/mac-io/via-pmu
> [ 1.722983] channel 1 bus <multibus>
> [ 1.733605] channel 2 bus <multibus>
> [ 1.746841] PCI: Probing PCI hardware
> [ 1.761155] PCI host bridge to bus 0000:00
> [ 1.773432] pci_bus 0000:00: root bus resource [io 0x0000-0x7fffff]
> [ 1.792247] pci_bus 0000:00: root bus resource [mem
> 0xfd000000-0xfdffffff] (bus address [0x00000000-0x00ffffff])
> [ 1.822825] pci_bus 0000:00: root bus resource [mem 0x80000000-0xfcffffff]
> [ 1.843419] pci_bus 0000:00: root bus resource [bus 00-ff]
> [ 1.859881] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to ff
> [ 1.879871] pci 0000:00:00.0: [1057:0002] type 00 class 0x060000
> [ 1.899189] pci 0000:00:0d.0: [106b:0017] type 00 class 0xff0000
> [ 1.916838] pci 0000:00:0d.0: reg 0x10: [mem 0xf4000000-0xf407ffff]
> [ 1.936859] pci 0000:00:10.0: [106b:0017] type 00 class 0xff0000
> [ 1.954533] pci 0000:00:10.0: reg 0x10: [mem 0xf3000000-0xf307ffff]
> [ 1.974637] pci 0000:00:11.0: [1002:4c50] type 00 class 0x038000
> [ 1.992312] pci 0000:00:11.0: reg 0x10: [mem 0x82000000-0x82ffffff]
> [ 2.011110] pci 0000:00:11.0: reg 0x14: [io 0x0400-0x04ff]
> [ 2.027818] pci 0000:00:11.0: reg 0x18: [mem 0x82fff000-0x82ffffff]
> [ 2.046665] pci 0000:00:11.0: reg 0x30: [mem 0xfd000000-0xfd01ffff pref]
> [ 2.066830] pci 0000:00:11.0: supports D1 D2
> [ 2.080778] pci 0000:00:13.0: [104c:ac15] type 02 class 0x060700
> [ 2.098478] pci 0000:00:13.0: reg 0x10: [mem 0x81803000-0x81803fff]
> [ 2.118276] pci 0000:00:13.1: [104c:ac15] type 02 class 0x060700
> [ 2.135978] pci 0000:00:13.1: reg 0x10: [mem 0x81802000-0x81802fff]
> [ 2.156532] pci_bus 0000:01: extended config space not accessible
> [ 2.175227] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 04
> [ 2.195189] pci_bus 0000:05: extended config space not accessible
> [ 2.213538] pci_bus 0000:05: busn_res: [bus 05-ff] end is updated to 08
> [ 2.233067] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 08
> [ 2.253708] PCI: Cannot allocate resource region 2 of device
> 0000:00:11.0, will remap
> [ 2.277131] PCI 0000:00 Cannot reserve Legacy IO [io 0x0000-0x0fff]
> [ 2.296121] pci 0000:00:13.0: BAR 9: assigned [mem
> 0x84000000-0x87ffffff pref]
> [ 2.317651] pci 0000:00:13.0: BAR 10: assigned [mem 0x88000000-0x8bffffff]
> [ 2.338269] pci 0000:00:13.1: BAR 9: assigned [mem
> 0x8c000000-0x8fffffff pref]
> [ 2.359955] pci 0000:00:13.1: BAR 10: assigned [mem 0x90000000-0x93ffffff]
> [ 2.380606] pci 0000:00:11.0: BAR 6: assigned [mem
> 0xfd000000-0xfd01ffff pref]
> [ 2.402311] pci 0000:00:11.0: BAR 2: assigned [mem 0xfd020000-0xfd020fff]
> [ 2.422704] pci 0000:00:13.0: BAR 7: assigned [io 0x1000-0x10ff]
> [ 2.441000] pci 0000:00:13.0: BAR 8: assigned [io 0x1100-0x11ff]
> [ 2.459300] pci 0000:00:13.1: BAR 7: assigned [io 0x1200-0x12ff]
> [ 2.477600] pci 0000:00:13.1: BAR 8: assigned [io 0x1300-0x13ff]
> [ 2.495919] pci 0000:00:13.0: CardBus bridge to [bus 01-04]
> [ 2.512627] pci 0000:00:13.0: bridge window [io 0x1000-0x10ff]
> [ 2.530925] pci 0000:00:13.0: bridge window [io 0x1100-0x11ff]
> [ 2.549229] pci 0000:00:13.0: bridge window [mem
> 0x84000000-0x87ffffff pref]
> [ 2.570928] pci 0000:00:13.0: bridge window [mem 0x88000000-0x8bffffff]
> [ 2.591320] pci 0000:00:13.1: CardBus bridge to [bus 05-08]
> [ 2.608046] pci 0000:00:13.1: bridge window [io 0x1200-0x12ff]
> [ 2.626349] pci 0000:00:13.1: bridge window [io 0x1300-0x13ff]
> [ 2.644651] pci 0000:00:13.1: bridge window [mem
> 0x8c000000-0x8fffffff pref]
> [ 2.666350] pci 0000:00:13.1: bridge window [mem 0x90000000-0x93ffffff]
> [ 2.686748] pci_bus 0000:00: resource 4 [io 0x0000-0x7fffff]
> [ 2.703993] pci_bus 0000:00: resource 5 [mem 0xfd000000-0xfdffffff]
> [ 2.722816] pci_bus 0000:00: resource 6 [mem 0x80000000-0xfcffffff]
> [ 2.741641] pci_bus 0000:01: resource 0 [io 0x1000-0x10ff]
> [ 2.758373] pci_bus 0000:01: resource 1 [io 0x1100-0x11ff]
> [ 2.775105] pci_bus 0000:01: resource 2 [mem 0x84000000-0x87ffffff pref]
> [ 2.795235] pci_bus 0000:01: resource 3 [mem 0x88000000-0x8bffffff]
> [ 2.814059] pci_bus 0000:05: resource 0 [io 0x1200-0x12ff]
> [ 2.830791] pci_bus 0000:05: resource 1 [io 0x1300-0x13ff]
> [ 2.847523] pci_bus 0000:05: resource 2 [mem 0x8c000000-0x8fffffff pref]
> [ 2.867653] pci_bus 0000:05: resource 3 [mem 0x90000000-0x93ffffff]
> [ 3.004865] vgaarb: loaded
> [ 3.015684] SCSI subsystem initialized
> [ 3.028576] libata version 3.00 loaded.
> [ 3.041525] usbcore: registered new interface driver usbfs
> [ 3.058590] usbcore: registered new interface driver hub
> [ 3.074722] usbcore: registered new device driver usb
> [ 3.097574] clocksource: Switched to clocksource timebase
> [ 3.176945] NET: Registered protocol family 2
> [ 3.196269] tcp_listen_portaddr_hash hash table entries: 512
> (order: 0, 6144 bytes, linear)
> [ 3.221544] TCP established hash table entries: 4096 (order: 2,
> 16384 bytes, linear)
> [ 3.244755] TCP bind hash table entries: 4096 (order: 3, 32768
> bytes, linear)
> [ 3.266467] TCP: Hash tables configured (established 4096 bind 4096)
> [ 3.285534] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
> [ 3.305032] UDP-Lite hash table entries: 256 (order: 1, 8192
> bytes, linear)
> [ 3.326164] NET: Registered protocol family 1
> [ 3.339985] RPC: Registered named UNIX socket transport module.
> [ 3.357356] RPC: Registered udp transport module.
> [ 3.371459] RPC: Registered tcp transport module.
> [ 3.385564] RPC: Registered tcp NFSv4.1 backchannel transport module.
> [ 3.405111] PCI: CLS 32 bytes, default 32
> [ 3.418590] Thermal assist unit using workqueue, shrink_timer: 2000 ms
> [ 3.444637] workingset: timestamp_bits=30 max_order=17 bucket_order=0
> [ 3.465435] squashfs: version 4.0 (2009/01/31) Phillip Lougher
> [ 3.484342] Block layer SCSI generic (bsg) driver version 0.4
> loaded (major 253)
> [ 3.506233] io scheduler mq-deadline registered
> [ 3.521141] pci 0000:00:11.0: enabling device (0086 -> 0087)
> [ 3.537885] Using unsupported 1024x768 (null) at 82801000,
> depth=32, pitch=4096
> [ 3.682913] Console: switching to colour frame buffer device 128x48
> [ 3.823127] fb0: Open Firmware frame buffer device on /pci/ATY,RageLTPro
> [ 3.845192] pmac_zilog: 0.6 (Benjamin Herrenschmidt
> <benh@...nel.crashing.org>)
> [ 3.869499] Non-volatile memory driver v1.3
> [ 3.893598] brd: module loaded
> [ 3.931206] loop: module loaded
> [ 3.942363] MacIO PCI driver attached to Gatwick chipset
> [ 3.959805] MacIO PCI driver attached to Heathrow chipset
> [ 3.986647] swim3 0.00015000:floppy: [fd0] SWIM3 floppy
> controller in media bay
> [ 4.015851] 0.00013020:ch-a: ttyS0 at MMIO 0xf3013020 (irq = 16,
> base_baud = 230400) is a Z85c30 ESCC - Serial port
> [ 4.052300] 0.00013000:ch-b: ttyS1 at MMIO 0xf3013000 (irq = 17,
> base_baud = 230400) is a Z85c30 ESCC - Infrared port
> [ 4.090256] macio: fixed media-bay irq on gatwick
> [ 4.107695] macio: fixed left floppy irqs
> [ 4.121515] swim3 1.00015000:floppy: [fd1] Couldn't request interrupt
> [ 4.142797] swim3: probe of 1.00015000:floppy failed with error -16
> [ 4.163133] macio: fixed left ide irqs
> [ 4.175485] macio: fixed SCC irqs on gatwick
> [ 4.189655] 1.00013020:ch-a: ttyS2 at MMIO 0xf4013020 (irq = 79,
> base_baud = 230400) is a Z85c30 ESCC - Internal modem
> [ 4.226442] mediabay0: Registered Heathrow media-bay
> [ 4.455126] mediabay1: Registered Heathrow media-bay
> [ 4.686271] PMU Backlight initialized (pmubl)
> [ 4.703522] mesh: configured for synchronous 5 MB/s
> [ 4.719262] mediabay1: Bay contains a floppy drive
> [ 4.954580] mesh: performing initial bus reset...
> [ 6.861383] random: fast init done
> [ 6.976730] adb device [2]: 2 0xC3
> [ 7.044008] adb device [3]: 3 0x1
> [ 7.107927] adb device [7]: 7 0x1F
> [ 7.181591] ADB keyboard at 2 has handler 0xC3
> [ 7.244084] Detected ADB keyboard, type ANSI.
> [ 7.306604] input: ADB keyboard as /devices/virtual/input/input0
> [ 7.374680] input: ADB Powerbook buttons as /devices/virtual/input/input1
> [ 7.509364] ADB mouse (trackpad) at 3 has handler 0x4
> [ 7.573745] input: ADB mouse as /devices/virtual/input/input2
> [ 9.034624] scsi host0: MESH
> [ 12.394536] pata-macio 0.00020000:ata0: Activating pata-macio
> chipset Heathrow ATA, Apple bus ID 0
> [ 12.477627] scsi host1: pata_macio
> [ 12.540331] ata1: PATA max MWDMA2 irq 30
> [ 12.795027] ata1.00: ATA-7: SAMSUNG HM100JC, YN100-08, max UDMA/100
> [ 12.865009] ata1.00: 195371568 sectors, multi 8: LBA48
> [ 12.935050] scsi 1:0:0:0: Direct-Access ATA SAMSUNG
> HM100JC 0-08 PQ: 0 ANSI: 5
> [ 13.013610] sd 1:0:0:0: [sda] 195371568 512-byte logical blocks:
> (100 GB/93.2 GiB)
> [ 13.088556] sd 1:0:0:0: Attached scsi generic sg0 type 0
> [ 13.158582] sd 1:0:0:0: [sda] Write Protect is off
> [ 13.223470] sd 1:0:0:0: [sda] Mode Sense: 00 3a 00 00
> [ 13.289075] sd 1:0:0:0: [sda] Write cache: disabled, read cache:
> enabled, doesn't support DPO or FUA
> [ 13.674503] pata-macio 0.00021000:ata1: Activating pata-macio
> chipset Heathrow ATA, Apple bus ID 1
> [ 13.757042] scsi host2: pata_macio
> [ 13.819249] ata2: PATA max MWDMA2 irq 36
> [ 13.904489] pata-macio 1.00021000:ata4: Activating pata-macio
> chipset Heathrow ATA, Apple bus ID 4
> [ 13.983164] genirq: Flags mismatch irq 36. 00000000
> (pata-macio[1.00021000:ata4]) vs. 00000000
> (pata-macio[0.00021000:ata1])
> [ 14.070207] pata-macio: probe of 1.00021000:ata4 failed with error -16
> [ 14.479032] eth0: BMAC at 00:05:02:07:5a:a6
> [ 14.479077]
> [ 14.615187] aoe: AoE v85 initialised.
> [ 14.679798] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
> [ 14.753685] ehci-pci: EHCI PCI platform driver
> [ 14.820303] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
> [ 14.893038] ohci-pci: OHCI PCI platform driver
> [ 14.959871] usbcore: registered new interface driver uas
> [ 15.029671] usbcore: registered new interface driver usb-storage
> [ 15.104150] mousedev: PS/2 mouse device common for all mice
> [ 15.178852] rtc-generic rtc-generic: registered as rtc0
> [ 15.248707] i2c /dev entries driver
> [ 15.313358] PowerMac i2c bus pmu 2 registered
> [ 15.379651] PowerMac i2c bus pmu 1 registered
> [ 15.450539] usbcore: registered new interface driver usbhid
> [ 15.517786] usbhid: USB HID core driver
> [ 15.581161] sda: [mac] sda1 sda2 sda3 sda4 sda5 sda6 sda7 sda8
> sda9 sda10 sda11 sda12 sda13 sda14 sda15
> [ 15.682021] sd 1:0:0:0: [sda] Attached SCSI disk
> [ 15.748688] NET: Registered protocol family 17
> [ 15.815278] drmem: No dynamic reconfiguration memory found
> [ 15.905030] EXT4-fs (sda12): mounting ext3 file system using the
> ext4 subsystem
> [ 16.093352] EXT4-fs (sda12): mounted filesystem with ordered data
> mode. Opts: (null). Quota mode: disabled.
> [ 16.177770] VFS: Mounted root (ext3 filesystem) readonly on device 8:12.
> [ 16.267681] Freeing unused kernel memory: 1232K
> [ 16.337890] Kernel memory protection not selected by kernel config.
> [ 16.413504] Run /sbin/init as init process
> [ 16.481986] with arguments:
> [ 16.546360] /sbin/init
> [ 16.609020] earlyprintk
> [ 16.671224] with environment:
> [ 16.733922] HOME=/
> [ 16.792877] TERM=linux
> [ 17.149488] BUG: Unable to handle kernel data access on read at 0x5071b5f4
> [ 17.222336] Faulting instruction address: 0xc0004194
> [ 17.289513] Oops: Kernel access of bad area, sig: 11 [#1]
> [ 17.357646] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
> [ 17.426007] Modules linked in:
> [ 17.485807] CPU: 0 PID: 1 Comm: init Not tainted
> 5.12.0-rc3-pmac-00067-g4c0104a83fc #22
> [ 17.561902] NIP: c0004194 LR: c0004194 CTR: 00000000
> [ 17.629263] REGS: e1025e70 TRAP: 0300 Not tainted
> (5.12.0-rc3-pmac-00067-g4c0104a83fc)
> [ 17.707694] MSR: 00001032 <ME,IR,DR,RI> CR: 40025f30 XER: 00000000
> [ 17.780835] DAR: 5071b5f4 DSISR: 40000000
> [ 17.780835] GPR00: 00000000 e1025f30 c14432e0 e1025f40 00000000
> 00000000 00000000 00000000
> [ 17.780835] GPR08: 00000000 0000d032 00000300 5071b53c c0000000
> 00000000 00000000 00000000
> [ 17.780835] GPR16: 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000 00000000
> [ 17.780835] GPR24: 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000 00000000
> [ 18.155821] NIP [c0004194] DataAccess_virt+0x8c/0xac
> [ 18.218757] LR [c0004194] DataAccess_virt+0x8c/0xac
> [ 18.281072] Call Trace:
> [ 18.335751] [e1025f30] [c0004240]
> InstructionAccess_virt+0x8c/0x90 (unreliable)
> [ 18.407057] --- interrupt: 300 at 0xb780d500
> [ 18.468711] NIP: b780d500 LR: b7828554 CTR: 00000000
> [ 18.532657] REGS: e1025f40 TRAP: 0300 Not tainted
> (5.12.0-rc3-pmac-00067-g4c0104a83fc)
> [ 18.607221] MSR: 0000d032 <EE,PR,ME,IR,DR,RI> CR: 00000000
> XER: 00000000
> [ 18.678419] DAR: bfcbfd50 DSISR: 42000000
> [ 18.678419] GPR00: 00000000 bfcc0010 00000000 bfcc0020 00000000
> 00000000 00000000 00000000
> [ 18.678419] GPR08: 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000 00000000
> [ 18.678419] GPR16: 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000 00000000
> [ 18.678419] GPR24: 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000 00000000
> [ 19.044798] NIP [b780d500] 0xb780d500
> [ 19.104645] LR [b7828554] 0xb7828554
> [ 19.164652] --- interrupt: 300
> [ 19.222524] Instruction dump:
> [ 19.279658] 3d407265 394a6773 914b0008 39400300 914b00b0 906b001c
> 908b0020 90ab0024
> [ 19.352049] 90cb0028 90eb002c 910b0030 4800fe71 <80ab00b8>
> 74a00040 4082000c 48014f65
> [ 19.424682] ---[ end trace 88a2dc920b595dd1 ]---
> [ 19.487214]
> [ 20.499171] Kernel panic - not syncing: Attempted to kill init!
> exitcode=0x0000000b
> [ 20.571365] Rebooting in 180 seconds..
>
>
> When testing a recent mainline build, 5.14.0-rc2-pmac-00323-gd8079fac1681,
> PID 1 did not crash. Other processes crash instead and the kernel produces
> messages like these:
>
> [ 91.150956] xfce4-session[1792]: segfault (11) at 404cd4fc nip
> a6aed794 lr a6aed930 code 1 in libc-2.31.so[a6aa9000+1ce000]
> [ 91.151194] xfce4-session[1792]: code: 2c170000 41820050 83f70004
> 3bb70008 57ff2036 3bfffff8 7ff7fa14 7c1df840
> [ 91.151233] xfce4-session[1792]: code: 41810028 60000000 60000000
> 41920150 <813f000c> 7c09d800 41820144 3bfffff0
> [ 115.700631] xfwm4[1978]: segfault (11) at 766d3243 nip a6c4af84
> lr a6e07724 code 1 in libc-2.31.so[a6c0b000+1ce000]
> [ 115.700948] xfwm4[1978]: code: 60420000 8121000c 5069063e
> 9121000c 60420000 c8010008 fdfe058e 38210010
> [ 115.700995] xfwm4[1978]: code: 4e800020 7c250b78 80c28ff4
> 7cc52a78 <90a30000> 7c0802a6 91c3000c d9c30058
>
>
> We found that reducing memory with the kernel parameter 'mem=464M' would
> prevent the crash.
>
> Below are Stan's notes from the 'git bisect' run. They include an
> additional failure mode that might be of interest. We've also observed
> "Kernel attempted to write user page (c6207c) - exploit attempt?" and
> "kernel BUG at arch/powerpc/kernel/interrupt.c:49!".
>
>
> On Thu, 29 Jul 2021, Stanley J. Johnson wrote:
>
>> Here are the git bisect results (I saved the kernels and dmesg outputs
>> in case they're needed later, though it's easy enough to re-create the
>> results).
>>
>> We'll have up to two boots (only one if the first boot fails) for each
>> kernel on WS-1 with the default memory setting of 512M.
>>
>> 1) 5.12.0-pmac-08447-g85f3f17b5db (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 2) 5.12.0-pmac-12750-g23243c1ace9 (bad)
>> (Crash and burn. I was tempted to mark this one "skip", since the errors
>> are different, though we've seen them in earlier tests. So there could
>> be multiple regressions. But let's keep chasing this one. I can re-run
>> the bisect later and skip some failures if necessary.)
>> -> fails: "Unable to contact settings server" after wdm login; dmesg errors:
>> ...
>> [ 127.169294] BUG: Unable to handle kernel instruction fetch (NULL
>> pointer?)
>> [ 127.169397] Faulting instruction address: 0x00000000
>> [ 127.169635] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 127.169661] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 127.169696] Modules linked in:
>> [ 127.169736] CPU: 0 PID: 1877 Comm: gdbus Tainted: G D
>> 5.12.0-pmac-12750-g23243c1ace9 #9
>> [ 127.169776] NIP: 00000000 LR: 00000000 CTR: 00000000
>> ...
>>
>> 3) 5.12.0-rc7-pmac-02335-gaeacb52a8de (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 4) 5.12.0-pmac-11585-g95275402f66 (bad)
>> -> fails: dmesg errs, wdm login fails with "Unable to contact settings
>> server..."
>> ...
>> [ 58.290883] BUG: Unable to handle kernel instruction fetch
>> [ 58.291009] Faulting instruction address: 0x7cc903a4
>> [ 58.291240] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 58.291268] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 58.291305] Modules linked in:
>> [ 58.291349] CPU: 0 PID: 1750 Comm: Xorg Not tainted
>> 5.12.0-pmac-11585-g95275402f66 #11
>> [ 58.291391] NIP: 7cc903a4 LR: 7cc903a6 CTR: c0127eb8
>> [ 58.291417] REGS: e2da1e70 TRAP: 0400 Not tainted
>> (5.12.0-pmac-11585-g95275402f66)
>> [ 58.291450] MSR: 40001030 <ME,IR,DR> CR: 28008228 XER: 20000000
>> ...
>>
>> 5) 5.12.0-pmac-11068-g9d31d233895 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 6) 5.12.0-rc3-pmac-00258-ga9d2f9bb225 (bad)
>> -> fails: wdm dies at login, screen hangs, dmesg errs that I haven't
>> seen before:
>> ...
>> [ 59.988732] InputThread[1751]: bad frame in sys_rt_sigreturn:
>> 51a79ab6 nip 001023c8 lr 001023c0
>> [ 62.079043] InputThread[1760]: bad frame in sys_rt_sigreturn:
>> a98be235 nip 001023c8 lr 001023c0
>> [ 64.348063] InputThread[1776]: bad frame in sys_rt_sigreturn:
>> a46b945e nip 001023c8 lr 001023c0
>> [ 66.413980] InputThread[1785]: bad frame in sys_rt_sigreturn:
>> a98be235 nip 001023c8 lr 001023c0
>> [ 68.486768] InputThread[1794]: bad frame in sys_rt_sigreturn:
>> 677e693b nip 001023c8 lr 001023c0
>>
>> 7) 5.12.0-rc3-pmac-00129-g036fc2cb1dc (bad)
>> -> fails: dmesg errs, wdm hangs (wdm did not crash, screen seems hung)
>> ...
>> [ 101.136941] BUG: Unable to handle kernel instruction fetch
>> [ 101.137059] Faulting instruction address: 0xfea31f74
>> [ 101.137296] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 101.137323] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 101.137358] Modules linked in:
>> [ 101.137401] CPU: 0 PID: 1882 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00129-g036fc2cb1dc #14
>> [ 101.137443] NIP: fea31f74 LR: fea31f74 CTR: c00cfef4
>> [ 101.137470] REGS: e2e21e70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00129-g036fc2cb1dc)
>> [ 101.137502] MSR: 40001030 <ME,IR,DR> CR: 220084e8 XER: 00000000
>> ...
>>
>> 8) 5.12.0-rc3-pmac-00064-g719e7e212c7 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 9) 5.12.0-rc3-pmac-00096-ga2308836880 (bad)
>> -> fails: dmesg errs, wdm hangs while validating login
>> ...
>> [ 104.559951] BUG: Unable to handle kernel instruction fetch
>> [ 104.560086] Faulting instruction address: 0xfe988ba4
>> [ 104.560307] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 104.560337] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 104.560371] Modules linked in:
>> [ 104.560415] CPU: 0 PID: 1834 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00096-ga2308836880 #16
>> [ 104.560457] NIP: fe988ba4 LR: fe988ba4 CTR: c00cfee8
>> [ 104.560484] REGS: e2d9de70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00096-ga2308836880)
>> [ 104.560517] MSR: 40001030 <ME,IR,DR> CR: 220484e8 XER: 00000000
>> ...
>> [ 114.371853] BUG: Unable to handle kernel instruction fetch
>> [ 114.371998] Faulting instruction address: 0x3e62a270
>> [ 114.372270] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 114.372298] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 114.372334] Modules linked in:
>> [ 114.372382] CPU: 0 PID: 1858 Comm: xfwm4 Tainted: G D
>> 5.12.0-rc3-pmac-00096-ga2308836880 #16
>> [ 114.372425] NIP: 3e62a270 LR: 3e62a271 CTR: c065eebc
>> [ 114.372452] REGS: e2dede70 TRAP: 0400 Tainted: G D
>> (5.12.0-rc3-pmac-00096-ga2308836880)
>> [ 114.372486] MSR: 40001030 <ME,IR,DR> CR: 22002284 XER: 00000000
>> ...
>>
>> 10) 5.12.0-rc3-pmac-00080-g7a7d744ffe8 (bad)
>> -> fails: dmesg errs, "Unable to contact settings server..."
>> ...
>> [ 170.622408] BUG: Unable to handle kernel instruction fetch
>> [ 170.622546] Faulting instruction address: 0xfe9255d4
>> [ 170.622777] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 170.622806] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 170.622841] Modules linked in:
>> [ 170.622885] CPU: 0 PID: 1863 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00080-g7a7d744ffe8 #17
>> [ 170.622927] NIP: fe9255d4 LR: fe9255d4 CTR: c00cfee8
>> [ 170.622954] REGS: e2da1e70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00080-g7a7d744ffe8)
>> [ 170.622987] MSR: 40001030 <ME,IR,DR> CR: 220484e8 XER: 00000000
>> ...
>> [ 172.611235] BUG: Unable to handle kernel instruction fetch (NULL
>> pointer?)
>> [ 172.611364] Faulting instruction address: 0x00000000
>> [ 172.611662] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 172.611690] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 172.611725] Modules linked in:
>> [ 172.611773] CPU: 0 PID: 1871 Comm: gmain Tainted: G D
>> 5.12.0-rc3-pmac-00080-g7a7d744ffe8 #17
>> [ 172.611814] NIP: 00000000 LR: 00000000 CTR: 00000000
>> [ 172.611840] REGS: e2db9e70 TRAP: 0400 Tainted: G D
>> (5.12.0-rc3-pmac-00080-g7a7d744ffe8)
>> [ 172.611874] MSR: 40001030 <ME,IR,DR> CR: 28008468 XER: 00000000
>> ...
>>
>> 11) 5.12.0-rc3-pmac-00072-ga2b3e09ae41 (bad)
>> -> fails: kernel panic, I'd have to capture the output via a serial console
>>
>> 12) 5.12.0-rc3-pmac-00068-gacc142b6230 (bad)
>> -> fails: kernel panic
>>
>> 13) 5.12.0-rc3-pmac-00066-g8f6ff5bd9b7 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 14) 5.12.0-rc3-pmac-00067-g4c0104a83fc (bad)
>> -> fails: kernel panic
>>
>> The git bisect thinks this is the bad commit, but I'm not sure it means
>> anything at all:
>>
>> -----
>>
>> 4c0104a83fc3990a76a01a2f4e504251fa9814c4 is the first bad commit
Powered by blists - more mailing lists