linux-kernel - [mm] f859d2a494: kernel_BUG_at

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Tue, 19 Oct 2021 10:50:12 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     Faiyaz Mohammed <faiyazm@...eaurora.org>
Cc:     0day robot <lkp@...el.com>, LKML <linux-kernel@...r.kernel.org>,
        lkp@...ts.01.org, akpm@...ux-foundation.org, linux-mm@...ck.org,
        david@...hat.com, guptap@...eaurora.org,
        Faiyaz Mohammed <faiyazm@...eaurora.org>
Subject: [mm]  f859d2a494: kernel_BUG_at_arch/x86/mm/physaddr.c



Greeting,

FYI, we noticed the following commit (built with clang-14):

commit: f859d2a494648d9e9903bf46d4c27f88b2c53ab0 ("[PATCH v4] mm: page_alloc: Add debug log in free_reserved_area for static memory")
url: https://github.com/0day-ci/linux/commits/Faiyaz-Mohammed/mm-page_alloc-Add-debug-log-in-free_reserved_area-for-static-memory/20211018-145621


in testcase: trinity
version: 
with following parameters:

	number: 99999
	group: group-04

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+--------------------------------------------------------------------------+-----------+------------+
|                                                                          | v5.15-rc6 | f859d2a494 |
+--------------------------------------------------------------------------+-----------+------------+
| kernel_BUG_at_arch/x86/mm/physaddr.c                                     | 0         | 35         |
| invalid_opcode:#[##]                                                     | 0         | 35         |
| EIP:__phys_addr                                                          | 0         | 35         |
+--------------------------------------------------------------------------+-----------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>



[    3.615599][    T5] Unpacking initramfs...
[    4.464112][    T5] ------------[ cut here ]------------
[    4.465044][    T5] kernel BUG at arch/x86/mm/physaddr.c:81!
[    4.466084][    T5] invalid opcode: 0000 [#1]
[    4.466746][    T5] CPU: 0 PID: 5 Comm: kworker/u2:0 Not tainted 5.15.0-rc6-00001-gf859d2a49464 #5 21680ec59cac6f17b63f4ff3a76cd498fdf11f87
[    4.468387][    T5] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[    4.469812][    T5] Workqueue: events_unbound async_run_entry_fn
[    4.469995][    T5] EIP: __phys_addr+0x50/0x60
[    4.469995][    T5] Code: 90 cb 8f c3 85 c0 74 16 89 f1 c1 e9 0c 39 c1 77 17 89 f8 e8 72 20 00 00 31 f0 09 d0 75 0c 89 f0 5e 5f 5d c3 0f 0b 0f 0b 0f 0b <0f> 0b 90
90 90 90 90 90 90 90 90 90 90 90 90 90 55 89 e5 56 3d 00
[    4.469995][    T5] EAX: 36dfe000 EBX: f6175000 ECX: 00000000 EDX: 00000000
[    4.469995][    T5] ESI: 36dfe000 EDI: f6dfe000 EBP: c3cdfeac ESP: c3cdfea4
[    4.469995][    T5] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010206
[    4.469995][    T5] CR0: 80050033 CR2: 00000000 CR3: 031ce000 CR4: 000406f0
[    4.469995][    T5] Call Trace:
[    4.469995][    T5]  free_reserved_area+0x1c/0x1c0
[    4.469995][    T5]  ? set_memory_rw+0x1d/0x30
[    4.469995][    T5]  free_init_pages+0x55/0x70
[    4.469995][    T5]  free_initrd_mem+0x1e/0x21
[    4.469995][    T5]  do_populate_rootfs+0x92/0x9f
[    4.469995][    T5]  async_run_entry_fn+0x1c/0xa0
[    4.469995][    T5]  process_one_work+0x208/0x400
[    4.469995][    T5]  worker_thread+0x22a/0x400
[    4.469995][    T5]  kthread+0x133/0x150
[    4.469995][    T5]  ? pool_mayday_timeout+0x180/0x180
[    4.469995][    T5]  ? kthread_blkcg+0x30/0x30
[    4.469995][    T5]  ret_from_fork+0x19/0x24
[    4.469995][    T5] Modules linked in:
[    4.487712][    T5] ---[ end trace e05e1d4a3febc36d ]---
[    4.488527][    T5] EIP: __phys_addr+0x50/0x60
[    4.489244][    T5] Code: 90 cb 8f c3 85 c0 74 16 89 f1 c1 e9 0c 39 c1 77 17 89 f8 e8 72 20 00 00 31 f0 09 d0 75 0c 89 f0 5e 5f 5d c3 0f 0b 0f 0b 0f 0b <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 89 e5 56 3d 00
[    4.492036][    T5] EAX: 36dfe000 EBX: f6175000 ECX: 00000000 EDX: 00000000
[    4.493068][    T5] ESI: 36dfe000 EDI: f6dfe000 EBP: c3cdfeac ESP: c3cdfea4
[    4.494202][    T5] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010206
[    4.495349][    T5] CR0: 80050033 CR2: 00000000 CR3: 031ce000 CR4: 000406f0
[    4.496328][    T5] Kernel panic - not syncing: Fatal exception



To reproduce:

        # build kernel
	cd linux
	cp config-5.15.0-rc6-00001-gf859d2a49464 .config
	make HOSTCC=clang-14 CC=clang-14 ARCH=i386 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



---
0DAY/LKP+ Test Infrastructure                   Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org       Intel Corporation

Thanks,
Oliver Sang


View attachment "config-5.15.0-rc6-00001-gf859d2a49464" of type "text/plain" (146350 bytes)

View attachment "job-script" of type "text/plain" (4596 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (8128 bytes)