linux-kernel - [mtd] ad9b10d1ea: BUG:kernel_NULL_pointer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Sun, 3 Jul 2022 16:28:02 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     Christian Marangi <ansuelsmth@...il.com>
Cc:     Miquel Raynal <miquel.raynal@...tlin.com>,
        LKML <linux-kernel@...r.kernel.org>,
        Linux Memory Management List <linux-mm@...ck.org>,
        linux-mtd@...ts.infradead.org, lkp@...ts.01.org, lkp@...el.com
Subject: [mtd]  ad9b10d1ea: BUG:kernel_NULL_pointer_dereference,address



Greeting,

FYI, we noticed the following commit (built with gcc-11):

commit: ad9b10d1eaada169bd764abcab58f08538877e26 ("mtd: core: introduce of support for dynamic partitions")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: boot

on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):



If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>


[    4.340248][    T1] BUG: kernel NULL pointer dereference, address: 00000324
[    4.342253][    T1] #PF: supervisor read access in kernel mode
[    4.342253][    T1] #PF: error_code(0x0000) - not-present page
[    4.342253][    T1] *pde = 00000000
[    4.342253][    T1] Oops: 0000 [#1]
[    4.342253][    T1] CPU: 0 PID: 1 Comm: swapper Not tainted 5.19.0-rc1-00030-gad9b10d1eaad #1 f61d2ae141b008b3f6be2235daf88ecfc89594ec
[    4.342253][    T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-4 04/01/2014
[    4.342253][    T1] EIP: mtd_check_of_node+0x55/0x150
[    4.342253][    T1] Code: 1c 8b 45 f0 2b 05 50 96 64 c2 0f 85 0d 01 00 00 83 c4 14 5b 5e 5f 5d c3 8d 74 26 00 90 8b 86 94 03 00 00 3d 08 ff ff ff 74
d7 <8b> 80 24 03 00 00 85 c0 74 cd ba e4 54 55 c2 e8 77 c3 17 00 89 c7
[    4.342253][    T1] EAX: 00000000 EBX: c4cf2000 ECX: 00000001 EDX: 00000000
[    4.342253][    T1] ESI: c4cf2000 EDI: c4cf20f8 EBP: c3547e38 ESP: c3547e18
[    4.342253][    T1] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010213
[    4.342253][    T1] CR0: 80050033 CR2: 00000324 CR3: 02c14000 CR4: 00040690
[    4.342253][    T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    4.342253][    T1] DR6: fffe0ff0 DR7: 00000400
[    4.342253][    T1] Call Trace:
[    4.342253][    T1]  ? kfree_const+0x14/0x20
[    4.342253][    T1]  ? kobject_set_name_vargs+0x61/0x90
[    4.342253][    T1]  add_mtd_device+0x287/0x5b0
[    4.342253][    T1]  ? parse_ofoldpart_partitions+0x70/0x70
[    4.342253][    T1]  ? mtd_part_of_parse+0x13f/0x220
[    4.342253][    T1]  ? parse_mtd_partitions+0xc1/0x190
[    4.342253][    T1]  mtd_device_parse_register+0x1a7/0x290
[    4.342253][    T1]  mtdram_init_device+0xbc/0x100
[    4.342253][    T1]  init_mtdram+0x6c/0xb4
[    4.342253][    T1]  ? init_pmc551+0x3bf/0x3bf
[    4.342253][    T1]  do_one_initcall+0x5d/0x240
[    4.342253][    T1]  ? rdinit_setup+0x3d/0x3d
[    4.342253][    T1]  do_initcalls+0xf8/0x117
[    4.342253][    T1]  kernel_init_freeable+0xb1/0xe0
[    4.342253][    T1]  ? rest_init+0xb0/0xb0
[    4.342253][    T1]  kernel_init+0x17/0x100
[    4.342253][    T1]  ret_from_fork+0x1c/0x30
[    4.342253][    T1] Modules linked in:
[    4.342253][    T1] CR2: 0000000000000324
[    4.342253][    T1] ---[ end trace 0000000000000000 ]---
[    4.342253][    T1] EIP: mtd_check_of_node+0x55/0x150
[    4.342253][    T1] Code: 1c 8b 45 f0 2b 05 50 96 64 c2 0f 85 0d 01 00 00 83 c4 14 5b 5e 5f 5d c3 8d 74 26 00 90 8b 86 94 03 00 00 3d 08 ff ff ff 74 d7 <8b> 80 24 03 00 00 85 c0 74 cd ba e4 54 55 c2 e8 77 c3 17 00 89 c7
[    4.342253][    T1] EAX: 00000000 EBX: c4cf2000 ECX: 00000001 EDX: 00000000
[    4.342253][    T1] ESI: c4cf2000 EDI: c4cf20f8 EBP: c3547e38 ESP: c3547e18
[    4.342253][    T1] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010213
[    4.342253][    T1] CR0: 80050033 CR2: 00000324 CR3: 02c14000 CR4: 00040690
[    4.342253][    T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    4.342253][    T1] DR6: fffe0ff0 DR7: 00000400
[    4.342253][    T1] Kernel panic - not syncing: Fatal exception
[    4.342253][    T1] Kernel Offset: disabled



To reproduce:

        # build kernel
	cd linux
	cp config-5.19.0-rc1-00030-gad9b10d1eaad .config
	make HOSTCC=gcc-11 CC=gcc-11 ARCH=i386 olddefconfig prepare modules_prepare bzImage modules
	make HOSTCC=gcc-11 CC=gcc-11 ARCH=i386 INSTALL_MOD_PATH=<mod-install-dir> modules_install
	cd <mod-install-dir>
	find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



-- 
0-DAY CI Kernel Test Service
https://01.org/lkp



View attachment "config-5.19.0-rc1-00030-gad9b10d1eaad" of type "text/plain" (156890 bytes)

View attachment "job-script" of type "text/plain" (4784 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (47680 bytes)