lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Thu, 14 Oct 2021 16:54:50 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     Vlastimil Babka <vbabka@...e.cz>
Cc:     0day robot <lkp@...el.com>, Dmitry Vyukov <dvyukov@...gle.com>,
        Marco Elver <elver@...gle.com>,
        Vijayanand Jitta <vjitta@...eaurora.org>,
        Maarten Lankhorst <maarten.lankhorst@...ux.intel.com>,
        Maxime Ripard <mripard@...nel.org>,
        Thomas Zimmermann <tzimmermann@...e.de>,
        David Airlie <airlied@...ux.ie>,
        Daniel Vetter <daniel@...ll.ch>,
        Andrey Ryabinin <ryabinin.a.a@...il.com>,
        Alexander Potapenko <glider@...gle.com>,
        Andrey Konovalov <andreyknvl@...il.com>,
        Geert Uytterhoeven <geert@...ux-m68k.org>,
        Oliver Glitta <glittao@...il.com>,
        Imran Khan <imran.f.khan@...cle.com>,
        LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
        Andrew Morton <akpm@...ux-foundation.org>, linux-mm@...ck.org,
        dri-devel@...ts.freedesktop.org, intel-gfx@...ts.freedesktop.org,
        kasan-dev@...glegroups.com, Vlastimil Babka <vbabka@...e.cz>
Subject: [lib/stackdepot]  1cd8ce52c5:
 BUG:unable_to_handle_page_fault_for_address



Greeting,

FYI, we noticed the following commit (built with gcc-9):

commit: 1cd8ce52c520c26c513899fb5aee42b8e5f60d0d ("[PATCH v2] lib/stackdepot: allow optional init and stack_table allocation by kvmalloc()")
url: https://github.com/0day-ci/linux/commits/Vlastimil-Babka/lib-stackdepot-allow-optional-init-and-stack_table-allocation-by-kvmalloc/20211012-170816
base: git://anongit.freedesktop.org/drm-intel for-linux-next

in testcase: rcutorture
version: 
with following parameters:

	runtime: 300s
	test: cpuhotplug
	torture_type: srcud

test-description: rcutorture is rcutorture kernel module load/unload test.
test-url: https://www.kernel.org/doc/Documentation/RCU/torture.txt


on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+---------------------------------------------+------------+------------+
|                                             | a94a6d76c9 | 1cd8ce52c5 |
+---------------------------------------------+------------+------------+
| boot_successes                              | 30         | 0          |
| boot_failures                               | 0          | 7          |
| BUG:kernel_NULL_pointer_dereference,address | 0          | 2          |
| Oops:#[##]                                  | 0          | 7          |
| EIP:stack_depot_save                        | 0          | 7          |
| Kernel_panic-not_syncing:Fatal_exception    | 0          | 7          |
| BUG:unable_to_handle_page_fault_for_address | 0          | 5          |
+---------------------------------------------+------------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>



[  319.147926][  T259] BUG: unable to handle page fault for address: 0ec74110
[  319.149309][  T259] #PF: supervisor read access in kernel mode
[  319.150362][  T259] #PF: error_code(0x0000) - not-present page
[  319.151372][  T259] *pde = 00000000
[  319.151964][  T259] Oops: 0000 [#1] SMP
[  319.152617][  T259] CPU: 0 PID: 259 Comm: systemd-rc-loca Not tainted 5.15.0-rc1-00270-g1cd8ce52c520 #1
[  319.154514][  T259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  319.156200][  T259] EIP: stack_depot_save+0x12a/0x4d0
[  319.157287][  T259] Code: ff 0f 00 8d 04 90 89 45 dc 8b 18 85 db 0f 84 0d 01 00 00 8b 55 e8 eb 12 8d b4 26 00 00 00 00 90 8b 1b 85 db 0f 84 f6 00 00 00 <39> 73 04
75 f1 3b 53 08 75 ec 8b 4d e4 31 c0 8d b4 26 00 00 00 00
[  319.161025][  T259] EAX: f286870c EBX: 0ec7410c ECX: ae94980e EDX: 00000010
[  319.163557][  T259] ESI: ca0ea9c3 EDI: 6e32801a EBP: bec0bc90 ESP: bec0bc5c
[  319.164952][  T259] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010206
[  319.166533][  T259] CR0: 80050033 CR2: 0ec74110 CR3: 0373f000 CR4: 00000690
[  319.167965][  T259] Call Trace:
[  319.168625][  T259]  save_stack+0x66/0x90
[  319.169561][  T259]  ? free_pcp_prepare+0x192/0x340
[  319.170597][  T259]  ? free_unref_page+0x18/0x210
[  319.171478][  T259]  ? __free_pages+0xa7/0xd0
[  319.172294][  T259]  ? put_task_stack+0x9d/0x140
[  319.173115][  T259]  ? finish_task_switch+0x180/0x240
[  319.174197][  T259]  ? __schedule+0x39a/0xc00
[  319.175268][  T259]  ? preempt_schedule_common+0x1c/0x30
[  319.176344][  T259]  ? __cond_resched+0x25/0x30
[  319.177302][  T259]  ? unmap_page_range+0x366/0x7a0
[  319.178325][  T259]  ? unmap_single_vma+0x55/0xc0
[  319.179247][  T259]  ? unmap_vmas+0x35/0x50
[  319.180072][  T259]  ? exit_mmap+0x72/0x1c0
[  319.180894][  T259]  ? mmput+0x61/0x100
[  319.181663][  T259]  ? do_exit+0x296/0xa50
[  319.182511][  T259]  ? do_group_exit+0x31/0x90
[  319.183380][  T259]  ? __ia32_sys_exit_group+0x10/0x10
[  319.184357][  T259]  __reset_page_owner+0x36/0x90
[  319.185331][  T259]  free_pcp_prepare+0x192/0x340
[  319.186292][  T259]  free_unref_page+0x18/0x210
[  319.187183][  T259]  __free_pages+0xa7/0xd0
[  319.188035][  T259]  put_task_stack+0x9d/0x140
[  319.188928][  T259]  finish_task_switch+0x180/0x240
[  319.189949][  T259]  ? finish_task_switch+0x52/0x240
[  319.190896][  T259]  __schedule+0x39a/0xc00
[  319.191645][  T259]  ? find_held_lock+0x2a/0x90
[  319.192566][  T259]  preempt_schedule_common+0x1c/0x30
[  319.193495][  T259]  __cond_resched+0x25/0x30
[  319.194320][  T259]  unmap_page_range+0x366/0x7a0
[  319.195237][  T259]  unmap_single_vma+0x55/0xc0
[  319.196144][  T259]  unmap_vmas+0x35/0x50
[  319.196942][  T259]  exit_mmap+0x72/0x1c0
[  319.197742][  T259]  ? up_read+0x16/0x240
[  319.198527][  T259]  mmput+0x61/0x100
[  319.199208][  T259]  do_exit+0x296/0xa50
[  319.199930][  T259]  do_group_exit+0x31/0x90
[  319.200757][  T259]  ? __might_fault+0x79/0x80
[  319.201653][  T259]  __ia32_sys_exit_group+0x10/0x10
[  319.202662][  T259]  __do_fast_syscall_32+0x5b/0xd0
[  319.203658][  T259]  do_fast_syscall_32+0x32/0x70
[  319.204650][  T259]  do_SYSENTER_32+0x15/0x20
[  319.205571][  T259]  entry_SYSENTER_32+0x98/0xe7
[  319.206581][  T259] EIP: 0x37f47549
[  319.207276][  T259] Code: Unable to access opcode bytes at RIP 0x37f4751f.
[  319.208586][  T259] EAX: ffffffda EBX: 00000000 ECX: 37d181d8 EDX: 00000000
[  319.209955][  T259] ESI: 00000000 EDI: 37d152f0 EBP: 37d181e0 ESP: 3fc3cf2c
[  319.211250][  T259] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b EFLAGS: 00000216
[  319.212737][  T259] Modules linked in:
[  319.213484][  T259] CR2: 000000000ec74110
[  319.214357][  T259] ---[ end trace d840069cc585ecdc ]---
[  319.215361][  T259] EIP: stack_depot_save+0x12a/0x4d0
[  319.216296][  T259] Code: ff 0f 00 8d 04 90 89 45 dc 8b 18 85 db 0f 84 0d 01 00 00 8b 55 e8 eb 12 8d b4 26 00 00 00 00 90 8b 1b 85 db 0f 84 f6 00 00 00 <39> 73 04 75 f1 3b 53 08 75 ec 8b 4d e4 31 c0 8d b4 26 00 00 00 00
[  319.219967][  T259] EAX: f286870c EBX: 0ec7410c ECX: ae94980e EDX: 00000010
[  319.221339][  T259] ESI: ca0ea9c3 EDI: 6e32801a EBP: bec0bc90 ESP: bec0bc5c
[  319.222743][  T259] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010206
[  319.224002][  T259] CR0: 80050033 CR2: 0ec74110 CR3: 0373f000 CR4: 00000690
[  319.225147][  T259] Kernel panic - not syncing: Fatal exception
[  319.226616][  T259] Kernel Offset: disabled



To reproduce:

        # build kernel
	cd linux
	cp config-5.15.0-rc1-00270-g1cd8ce52c520 .config
	make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



---
0DAY/LKP+ Test Infrastructure                   Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org       Intel Corporation

Thanks,
Oliver Sang


View attachment "config-5.15.0-rc1-00270-g1cd8ce52c520" of type "text/plain" (127611 bytes)

View attachment "job-script" of type "text/plain" (4900 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (19700 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ