| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CA+G9fYt5sknJ3jbebYZrqMRhbcLZKLCvTDHfg5feNnOpj-j9Wg@mail.gmail.com> Date: Tue, 19 Aug 2025 00:18:33 +0530 From: Naresh Kamboju <naresh.kamboju@...aro.org> To: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Cc: stable@...r.kernel.org, patches@...ts.linux.dev, linux-kernel@...r.kernel.org, torvalds@...ux-foundation.org, akpm@...ux-foundation.org, linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org, lkft-triage@...ts.linaro.org, pavel@...x.de, jonathanh@...dia.com, f.fainelli@...il.com, sudipm.mukherjee@...il.com, srw@...dewatkins.net, rwarsow@....de, conor@...nel.org, hargar@...rosoft.com, broonie@...nel.org, achill@...ill.org, Ben Copeland <benjamin.copeland@...aro.org>, Anders Roxell <anders.roxell@...aro.org>, Dan Carpenter <dan.carpenter@...aro.org>, Arnd Bergmann <arnd@...db.de>, Bjorn Andersson <andersson@...nel.org>, linux-arm-msm <linux-arm-msm@...r.kernel.org>, Linux ARM <linux-arm-kernel@...ts.infradead.org>, srinivas.kandagatla@....qualcomm.com, Bartosz Golaszewski <bartosz.golaszewski@...aro.org> Subject: Re: [PATCH 6.15 000/515] 6.15.11-rc1 review On Mon, 18 Aug 2025 at 18:45, Greg Kroah-Hartman <gregkh@...uxfoundation.org> wrote: > > This is the start of the stable review cycle for the 6.15.11 release. > There are 515 patches in this series, all will be posted as a response > to this one. If anyone has any issues with these being applied, please > let me know. > > Responses should be made by Wed, 20 Aug 2025 12:43:43 +0000. > Anything received after that time might be too late. > > The whole patch series can be found in one patch at: > https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.15.11-rc1.gz > or in the git tree and branch at: > git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.15.y > and the diffstat can be found below. > > thanks, > > greg k-h Boot regression occurs on the Qualcomm DragonBoard 410c (arm64) with stable-rc 6.15.11-rc1. The kernel crashes during early boot with a NULL pointer dereference in the Qualcomm SCM/TZMEM subsystem. The crash originates in qcom_scm_shm_bridge_enable() (drivers/firmware/qcom/qcom_scm.c:1618) and is invoked by qcom_tzmem_enable() (drivers/firmware/qcom/qcom_tzmem.c:97 and :474). This happens while probing SCM during platform initialization, preventing the board from reaching userspace due to kernel panic. Regression Analysis: - New regression? yes - Reproducibility? yes Boot regression: stable-rc 6.15.11-rc1 arm64 Qualcomm Dragonboard 410c Unable to handle kernel NULL pointer dereference qcom_scm_shm_bridge_enable Reported-by: Linux Kernel Functional Testing <lkft@...aro.org> ## Test log oom03 [ 1.191790] scmi_core: SCMI protocol bus registered [ 1.194074] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 1.198306] Mem abort info: [ 1.207295] ESR = 0x0000000096000004 [ 1.209796] EC = 0x25: DABT (current EL), IL = 32 bits [ 1.213635] SET = 0, FnV = 0 [ 1.219095] EA = 0, S1PTW = 0 [ 1.221945] FSC = 0x04: level 0 translation fault [ 1.225004] Data abort info: [ 1.229874] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 1.232977] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1.238286] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1.243409] [0000000000000000] user address but active_mm is swapper [ 1.248798] Internal error: Oops: 0000000096000004 [#1] SMP [ 1.255110] Modules linked in: [ 1.260744] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.15.11-rc1 #1 PREEMPT [ 1.263622] Hardware name: Qualcomm Technologies, Inc. APQ 8016 SBC (DT) [ 1.271517] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1.278199] pc : qcom_scm_shm_bridge_enable (drivers/firmware/qcom/qcom_scm.c:1618) [ 1.284878] lr : qcom_tzmem_enable (drivers/firmware/qcom/qcom_tzmem.c:97 drivers/firmware/qcom/qcom_tzmem.c:474) [ 1.290085] sp : ffff80008002b720 [ 1.294508] x29: ffff80008002b7b0 x28: 0000000000000000 x27: 0000000000000000 [ 1.297819] x26: 0000000000000000 x25: 0000000000000000 x24: ffff00003faf6128 [ 1.304937] x23: ffff00003fac6c68 x22: 0000000000000000 x21: ffff0000036ba410 [ 1.312055] x20: ffff0000036ba400 x19: ffff8000831a4000 x18: 0000000000000352 [ 1.319173] x17: 0000000000000000 x16: 0000000000000001 x15: 0000000000000002 [ 1.326292] x14: ffffffffffffffff x13: 0000000000000000 x12: 0000000000000002 [ 1.333410] x11: 0000000000000000 x10: 0000000000000019 x9 : ffff8000813e6d74 [ 1.340527] x8 : 0000000000000000 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff35302f37 [ 1.347645] x5 : 8080808000000000 x4 : 0000000000000020 x3 : 0000000000000010 [ 1.354763] x2 : 000000000000001c x1 : 000000000000000c x0 : 0000000000000000 [ 1.361882] Call trace: [ 1.368986] qcom_scm_shm_bridge_enable (drivers/firmware/qcom/qcom_scm.c:1618) (P) [ 1.371251] qcom_tzmem_enable (drivers/firmware/qcom/qcom_tzmem.c:97 drivers/firmware/qcom/qcom_tzmem.c:474) [ 1.376455] qcom_scm_probe (drivers/firmware/qcom/qcom_scm.c:2256) [ 1.380534] platform_probe (drivers/base/platform.c:1405) [ 1.384180] really_probe (drivers/base/dd.c:581) [ 1.387998] __driver_probe_device (drivers/base/dd.c:?) [ 1.391647] driver_probe_device (drivers/base/dd.c:829) [ 1.395987] __driver_attach (drivers/base/dd.c:1216) [ 1.399978] bus_for_each_dev (drivers/base/bus.c:369) [ 1.403798] driver_attach (drivers/base/dd.c:1233) [ 1.407965] bus_add_driver (drivers/base/bus.c:679) [ 1.411523] driver_register (drivers/base/driver.c:250) [ 1.415083] __platform_driver_register (drivers/base/platform.c:867) [ 1.418905] qcom_scm_init (drivers/firmware/qcom/qcom_scm.c:2362) [ 1.423763] do_one_initcall (init/main.c:1257) [ 1.427409] do_initcall_level (init/main.c:1318) [ 1.430969] do_initcalls (init/main.c:1332) [ 1.435134] do_basic_setup (init/main.c:1355) [ 1.438434] kernel_init_freeable (init/main.c:1571) [ 1.442254] kernel_init (init/main.c:1459) [ 1.446593] ret_from_fork (arch/arm64/kernel/entry.S:865) [ 1.449810] Code: a905ffff a904ffff a903ffff f9001bff (f9400100) All code ======== 0: a905ffff stp xzr, xzr, [sp, #88] 4: a904ffff stp xzr, xzr, [sp, #72] 8: a903ffff stp xzr, xzr, [sp, #56] c: f9001bff str xzr, [sp, #48] 10:* f9400100 ldr x0, [x8] <-- trapping instruction Code starting with the faulting instruction =========================================== 0: f9400100 ldr x0, [x8] [ 1.453637] ---[ end trace 0000000000000000 ]--- [ 1.459661] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b [ 1.464318] SMP: stopping secondary CPUs [ 1.471696] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b ]--- Please refer full test log information in the below links. ## Source * Kernel version: 6.15.11-rc1 * Git tree: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git * Git describe: v6.15.9-993-g1cf711608500 * Git commit: 1cf71160850064e9e506eda37e0386948bedd6b4 * Architectures: arm64 Dragonboard 410c * Toolchains: gcc-13, clang-20 * Kconfigs: defconfig+lkft ## Test * Boot log: https://qa-reports.linaro.org/api/testruns/29589408/log_file/ * Boot lava log: https://lkft.validation.linaro.org/scheduler/job/8407660#L2708 * Boot details: https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.15.y/v6.15.9-993-g1cf711608500/log-parser-boot/panic-multiline-kernel-panic-not-syncing-attempted-to-kill-init-exitcode/ * Boot plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/31SjnwYvj7Mmcay6Qa54CFbNfP9 * Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/31SjkxSlW3Ssjf1eGdFHJPPU4Yw/ * Kernel config: https://storage.tuxsuite.com/public/linaro/lkft/builds/31SjkxSlW3Ssjf1eGdFHJPPU4Yw/config -- Linaro LKFT https://lkft.linaro.org
Powered by blists - more mailing lists