linux-kernel - Re: [PATCH 5.15 000/691] 5.15.168-rc1 review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <f46542ec-bb43-4a30-900b-d3c9d1763753@roeck-us.net>
Date: Sat, 19 Oct 2024 11:53:15 -0700
From: Guenter Roeck <linux@...ck-us.net>
To: Greg Kroah-Hartman <gregkh@...uxfoundation.org>, stable@...r.kernel.org
Cc: patches@...ts.linux.dev, linux-kernel@...r.kernel.org,
 torvalds@...ux-foundation.org, akpm@...ux-foundation.org, shuah@...nel.org,
 patches@...nelci.org, lkft-triage@...ts.linaro.org, pavel@...x.de,
 jonathanh@...dia.com, f.fainelli@...il.com, sudipm.mukherjee@...il.com,
 srw@...dewatkins.net, rwarsow@....de, conor@...nel.org,
 allen.lkml@...il.com, broonie@...nel.org,
 Christophe Leroy <christophe.leroy@...roup.eu>,
 Michael Ellerman <mpe@...erman.id.au>
Subject: Re: [PATCH 5.15 000/691] 5.15.168-rc1 review

Hi,

On 10/15/24 04:19, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.168 release.
> There are 691 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Thu, 17 Oct 2024 11:22:41 +0000.
> Anything received after that time might be too late.
> 
...
> Christophe Leroy <christophe.leroy@...roup.eu>
>      powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
> 

This patch triggers a crash when trying to boot various powerpc images.

------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:143!
Oops: Exception in kernel mode, sig: 5 [#1]
BE PAGE_SIZE=4K MMU=Hash PREEMPT SMP NR_CPUS=32 NUMA PowerMac
Modules linked in:
CPU: 0 PID: 25 Comm: cryptomgr_test Not tainted 5.15.167-00018-g00ef1de6d646 #1
NIP:  c00000000082c6c0 LR: c00000000082f460 CTR: 0000000000000000
REGS: c00000000962b540 TRAP: 0700   Not tainted  (5.15.167-00018-g00ef1de6d646)
MSR:  8000000000028032 <SF,EE,IR,DR,RI>  CR: 84000440  XER: 20000000
IRQMASK: 0
GPR00: c00000000082f44c c00000000962b7e0 c000000001ef6c00 c00000000962b9e8
GPR04: c0000000096e2000 0000000000000008 c00000000962ba48 0000000000000200
GPR08: 000000003e2a5000 c000000000000000 0000000000000000 0000000000000001
GPR12: 0000000024000440 c000000002b62000 c00000000011e6b0 c0000000096c8e40
GPR16: 0000000000000000 c00000000148c300 c00000000148c2f0 0000000000000008
GPR20: 0000000000000040 c00000000147ddf8 0000000000000040 c00000000956f4a8
GPR24: c000000002a23c98 c000000001417d18 c0000000096e2000 0000000000000001
GPR28: 0000000000000008 c00000000962b9e8 00000000000096e2 c0000000096e2000
NIP [c00000000082c6c0] .sg_set_buf+0x50/0x350
LR [c00000000082f460] .test_akcipher_one+0x280/0x860
Call Trace:
[c00000000962b7e0] [c00000000956f4f3] 0xc00000000956f4f3 (unreliable)
[c00000000962b890] [c00000000082f44c] .test_akcipher_one+0x26c/0x860
[c00000000962bad0] [c00000000082fb14] .alg_test_akcipher+0xd4/0x150
[c00000000962bb70] [c00000000082bcac] .alg_test+0x15c/0x640
[c00000000962bcd0] [c000000000829850] .cryptomgr_test+0x40/0x70
[c00000000962bd50] [c00000000011e880] .kthread+0x1d0/0x1e0
[c00000000962be10] [c00000000000cc60] .ret_from_kernel_thread+0x58/0x60
Instruction dump:
fbe1fff8 6129ffff fb61ffd8 7c244840 7c9f2378 91810008 7c7d1b78 f821ff51
7cbc2b78 789ea402 41810078 3b600001 <0b1b0000> 3d220007 7bde3664 39492f20
---[ end trace fdddc57d958f029f ]---

The problem affects v5.15.168 and v5.10.227. Reverting the offending patch
fixes the problem in both branches.

My test images do not have hugepages or CONFIG_DEBUG_VIRTUAL enabled.

Bisect log is attached. I copied the author and Michael for comments.

Guenter

---
# bad: [584a40a22cb9bf5a03135869f11c3106b6200453] Linux 5.15.168
# good: [3a5928702e7120f83f703fd566082bfb59f1a57e] Linux 5.15.167
git bisect start 'HEAD' 'v5.15.167'
# bad: [62356668d855deb075a93fdf9f26888c4f80b7d6] nfs: fix memory leak in error path of nfs4_do_reclaim
git bisect bad 62356668d855deb075a93fdf9f26888c4f80b7d6
# bad: [791b3d66d2ef3a64de517651d606afb9521b5d39] drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
git bisect bad 791b3d66d2ef3a64de517651d606afb9521b5d39
# bad: [4318608dc28ef184158b4045896740716bea23f0] inet: inet_defrag: prevent sk release while still in use
git bisect bad 4318608dc28ef184158b4045896740716bea23f0
# bad: [25cf67f8ff2ff04607b556fe4d8d4a402b133d29] ice: fix accounting for filters shared by multiple VSIs
git bisect bad 25cf67f8ff2ff04607b556fe4d8d4a402b133d29
# bad: [10c111760128351b2b5ce72bb5345b0e0c89dc36] Input: synaptics - enable SMBus for HP Elitebook 840 G2
git bisect bad 10c111760128351b2b5ce72bb5345b0e0c89dc36
# good: [020f5c53c17f66c0a8f2d37dad27ace301b8d8a1] ocfs2: reserve space for inline xattr before attaching reflink tree
git bisect good 020f5c53c17f66c0a8f2d37dad27ace301b8d8a1
# good: [d71c5e8cbcf9ced0765f99fd669da2610088e08e] usbnet: ipheth: fix carrier detection in modes 1 and 4
git bisect good d71c5e8cbcf9ced0765f99fd669da2610088e08e
# bad: [00ef1de6d64654e069849e79a9878318ad37a093] powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
git bisect bad 00ef1de6d64654e069849e79a9878318ad37a093
# good: [be4e5f5bdc19cbb6568509d1af1d94cc82537a95] net: phy: vitesse: repair vsc73xx autonegotiation
git bisect good be4e5f5bdc19cbb6568509d1af1d94cc82537a95
# first bad commit: [00ef1de6d64654e069849e79a9878318ad37a093] powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL