Message-ID: <29a5c3e3-a590-01dd-1a2b-8415cae4a292@leemhuis.info>
Date:   Sun, 28 Aug 2022 13:44:18 +0200
From:   Thorsten Leemhuis <regressions@...mhuis.info>
To:     Russell King <linux@...linux.org.uk>,
        Ulf Hansson <ulf.hansson@...aro.org>
Cc:     linux-mmc@...r.kernel.org, LKML <linux-kernel@...r.kernel.org>,
        "regressions@...ts.linux.dev" <regressions@...ts.linux.dev>
Subject: [Regression] Bug 216420 - Unable to handle kernel NULL pointer
 dereference at virtual address 00000008

Hi, this is your Linux kernel regression tracker speaking.

I noticed a regression report in bugzilla.kernel.org. As many (most?)
kernel developer don't keep an eye on it, I decided to forward it (I
hope I picked the right recipients for this mail):

>  frc.gabriel@...il.com 2022-08-27 09:36:06 UTC
> 
> Created attachment 301682 [details]
> full dmesg output
> 
> Hi, good morning!
> 
> my device is currently crashing during boot with kernel 6.0.0-rc2. I also tried next-20220826 and the outcome is the same.
> 
> The full dmesg log can be found attached on crash-boot.txt file. 
> 
> Thank you and have a good day,
> Gabriel Francisco

>From that dmesg:

> [    2.279556] 8<--- cut here ---
> [    2.279734] s4: Bringing 0uV into 815000-815000uV
> [    2.284139] Unable to handle kernel NULL pointer dereference at virtual address 00000008
> [    2.288082] s1: Bringing 0uV into 1300000-1300000uV
> [    2.292017] [00000008] *pgd=00000000
> [    2.300784] s2: Bringing 0uV into 2150000-2150000uV
> [    2.304801] Internal error: Oops: 5 [#1] SMP ARM
> [    2.309033] s3: Bringing 0uV into 1800000-1800000uV
> [    2.313196] Modules linked in:
> [    2.313208] CPU: 2 PID: 7 Comm: kworker/u8:0 Not tainted 6.0.0-rc2 #325
> [    2.313221] Hardware name: Generic DT based system
> [    2.318516] l1: Bringing 0uV into 1225000-1225000uV
> [    2.322655] Workqueue: events_unbound deferred_probe_work_func
> [    2.326162] l2: Bringing 0uV into 1200000-1200000uV
> [    2.332290] PC is at mmci_probe+0x10/0x9b0
> [    2.332308] LR is at amba_probe+0xf0/0x174
> [    2.337399] l3: Bringing 0uV into 1225000-1225000uV
> [    2.341927] pc : [<c0b14e10>]    lr : [<c089036c>]    psr: 80000013
> [    2.348097] l4: Bringing 0uV into 1225000-1225000uV
> [    2.352601] sp : f0839dd0  ip : fffffff8  fp : c1903248
> [    2.352609] r10: c1448b9c  r9 : fffffdfb  r8 : 00000000
> [    2.352616] r7 : c1903000  r6 : eefe45bc  r5 : 00000000  r4 : c1903100
> [    2.357020] l5: Bringing 0uV into 1800000-1800000uV
> [    2.360849] r3 : c0b14e00  r2 : 00000000  r1 : 00000000  r0 : c1903000
> [    2.365896] l6: Bringing 0uV into 1800000-1800000uV
> [    2.371873] Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
> [    2.377217] l7: Bringing 0uV into 1800000-1800000uV
> [    2.381944] Control: 10c5787d  Table: 0020406a  DAC: 00000051
> [    2.387543] l8: Bringing 0uV into 1800000-1800000uV
> [    2.393749] Register r0 information: slab kmalloc-1k start c1903000 pointer offset 0 size 1024
> [    2.398766] l9: Bringing 0uV into 1800000-1800000uV
> [    2.405119] 
> [    2.405124] Register r1 information: NULL pointer
> [    2.405137] Register r2 information:
> [    2.410141] l10: Bringing 0uV into 1800000-1800000uV
> [    2.417186]  NULL pointer
> [    2.417193] Register r3 information: non-slab/vmalloc memory
> [    2.417205] Register r4 information:
> [    2.422124] l11: Bringing 0uV into 1300000-1300000uV
> [    2.427776]  slab kmalloc-1k start c1903000 pointer offset 256 size 1024
> [    2.432756] l12: Bringing 0uV into 1800000-1800000uV
> [    2.441145] 
> [    2.446335] l13: Bringing 0uV into 1800000-1800000uV
> [    2.447655] Register r5 information:
> [    2.452735] l14: Bringing 0uV into 1800000-1800000uV
> [    2.455902]  NULL pointer
> [    2.461123] l15: Bringing 0uV into 2050000-2050000uV
> [    2.463368] Register r6 information: non-slab/vmalloc memory
> [    2.463380] Register r7 information: slab kmalloc-1k start c1903000
> [    2.469373] l16: Bringing 0uV into 2700000-2700000uV
> [    2.472656]  pointer offset 0 size 1024
> [    2.472671] Register r8 information:
> [    2.477868] l17: Bringing 0uV into 2850000-2850000uV
> [    2.484288]  NULL pointer
> [    2.484294] Register r9 information: non-paged memory
> [    2.484305] Register r10 information:
> [    2.489490] l18: Bringing 0uV into 2850000-2850000uV
> [    2.490712]  non-slab/vmalloc memory
> [    2.495937] l19: Bringing 0uV into 3000000-3000000uV
> [    2.499217] Register r11 information:
> [    2.504461] l20: Bringing 0uV into 2950000-2950000uV
> [    2.506683]  slab kmalloc-1k
> [    2.512149] l21: Bringing 0uV into 2950000-2950000uV
> [    2.517361]  start c1903000 pointer offset 584 size 1024
> [    2.517382] Register r12 information:
> [    2.523805] l22: Bringing 0uV into 3000000-3000000uV
> [    2.528556]  non-paged memory
> [    2.532414] l23: Bringing 0uV into 3000000-3000000uV
> [    2.535937] Process kworker/u8:0 (pid: 7, stack limit = 0x(ptrval))
> [    2.541160] l24: Bringing 0uV into 3075000-3075000uV
> [    2.543402] Stack: (0xf0839dd0 to 0xf083a000)
> [    2.543413] 9dc0:                                     c1903000 c1903000 00000000 7ff15a00
> [    2.543425] 9de0: 60172703 00000000 c1903000 c1903000 20000013 c1903084 c1903000 c1903100
> [    2.627929] 9e00: 00000000 eefe45bc c1903000 00000000 fffffdfb c1448b9c c1903248 c089036c
> [    2.635613] 9e20: c089027c 00000000 c1903000 c1448b9c c147a260 00000000 c14672a0 c180f00d
> [    2.643773] 9e40: c18db480 c0940584 c1903000 00000000 c1903000 c147a260 c1448b9c 0000000d
> [    2.651933] 9e60: 00000000 c0940950 c29b4380 c33d7380 c14c1fe4 c1448b9c c1903000 00000000
> [    2.660092] 9e80: c14672a0 c180f00d c18db480 c0940ae4 fffffdfb c1448b9c f0839ee4 c1903000
> [    2.668252] 9ea0: 00000000 c0941190 00000000 f0839ee4 c09410ec c147a260 00000000 c093e658
> [    2.676412] 9ec0: c14672a0 c19dab6c c1b44fb8 cb719486 c1903000 c1903044 00000001 c0940d9c
> [    2.684572] 9ee0: c147a260 c1903000 00000001 cb719486 c1903000 c1903000 c13f37dc c093f7a0
> [    2.692731] 9f00: c1903000 c142aeec c142af00 c093fc94 c142af1c c1803780 c1806800 c180f000
> [    2.700890] 9f20: 00000000 c033dc60 c1803780 c18db480 c1806800 c1806800 c180681c c1803780
> [    2.709050] 9f40: c1806800 c1803798 c180681c c1303d40 c18db480 00000088 c1806800 c033e148
> [    2.717211] 9f60: c1803780 c1303d40 f0821ea0 c18b7040 c18db480 c033df2c c1803780 c18b7400
> [    2.725369] 9f80: f0821ea0 00000000 00000000 c03458ac c18b7040 c03457dc 00000000 00000000
> [    2.733529] 9fa0: 00000000 00000000 00000000 c0300148 00000000 00000000 00000000 00000000
> [    2.741688] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
> [    2.749850] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
> [    2.758012]  mmci_probe from amba_probe+0xf0/0x174
> [    2.766161]  amba_probe from really_probe+0xe0/0x40c
> [    2.770847]  really_probe from __driver_probe_device+0xa0/0x204
> [    2.775971]  __driver_probe_device from driver_probe_device+0x30/0xc0
> [    2.781612]  driver_probe_device from __device_attach_driver+0xa4/0x11c
> [    2.788209]  __device_attach_driver from bus_for_each_drv+0x80/0xcc
> [    2.794633]  bus_for_each_drv from __device_attach+0xa8/0x1f0
> [    2.800881]  __device_attach from bus_probe_device+0x84/0x8c
> [    2.806784]  bus_probe_device from deferred_probe_work_func+0x8c/0xd4
> [    2.812515]  deferred_probe_work_func from process_one_work+0x1fc/0x4c8
> [    2.818854]  process_one_work from worker_thread+0x21c/0x540
> [    2.825275]  worker_thread from kthread+0xd0/0xec
> [    2.831177]  kthread from ret_from_fork+0x14/0x2c
> [    2.835775] Exception stack(0xf0839fb0 to 0xf0839ff8)
> [    2.840465] 9fa0:                                     00000000 00000000 00000000 00000000
> [    2.845509] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
> [    2.853668] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000
> [    2.861826] Code: e92d4ff0 e590803c e24dd02c e59061a0 (e5917008) 
> [    2.868280] ---[ end trace 0000000000000000 ]---

See the ticket for more details.

I'd also like to add the report to the list of tracked regressions to
ensure it's doesn't fall through the cracks in the end:

#regzbot introduced: v5.19..v6.0-rc2
https://bugzilla.kernel.org/show_bug.cgi?id=216420
#regzbot ignore-activity

Ciao, Thorsten (wearing his 'the Linux kernel's regression tracker' hat)

P.S.: As the Linux kernel's regression tracker I deal with a lot of
reports and sometimes miss something important when writing mails like
this. If that's the case here, don't hesitate to tell me in a public
reply, it's in everyone's interest to set the public record straight.

Powered by blists - more mailing lists