Greetings, 0day kernel testing robot got the below dmesg and the first bad commit is https://git.kernel.org/pub/scm/linux/kernel/git/luto/linux.git x86/uaccess commit 325bca518d477325102e898213c348ec620b0487 Author: Andy Lutomirski <luto(a)kernel.org&gt; AuthorDate: Sun May 29 15:54:05 2016 -0700 Commit: Andy Lutomirski <luto(a)kernel.org&gt; CommitDate: Fri Jun 10 15:11:15 2016 -0700 fs: Improve and simplify copy_mount_options copy_mount_options always tries to copy a full page even if the string is shorter than a page. If the string starts part-way into a page and ends on the same page it started on, this means that copy_mount_options can overrun the supplied buffer and read into the next page. If the buffer came from userspace (USER_DS), then this could be a performance issue (reading across the page boundary could block). If the buffer came from the kernel (KERNEL_DS), then this could read an unrelated page, and the kernel can have pages mapped in that have side-effects. I noticed this due to a new sanity-check I'm working on that tries to make sure that we don't try to access nonexistent pages under KERNEL_DS. This is the same issue that was fixed by commit eca6f534e619 ("fs: fix overflow in sys_mount() for in-kernel calls"), but for copy_mount_options instead of copy_mount_string. Signed-off-by: Andy Lutomirski <luto(a)kernel.org&gt; +-----------------------------------------------------------+------------+------------+------------+ | | luto/20160 | 325bca518d | ed65a9b989 | +-----------------------------------------------------------+------------+------------+------------+ | boot_successes | 10 | 0 | 0 | | boot_failures | 88 | 32 | 49 | | IP-Config:Auto-configuration_of_network_failed | 2 | | | | Kernel_panic-not_syncing:Attempted_to_kill_init!exitcode= | 86 | 14 | 12 | | BUG_kmalloc-#(Not_tainted):Redzone_overwritten | 0 | 32 | 49 | | INFO:#-#.First_byte#instead_of | 0 | 32 | 49 | | INFO:Allocated_in_copy_mount_options_age=#cpu=#pid= | 0 | 32 | 49 | | INFO:Freed_in__register_sysctl_paths_age=#cpu=#pid= | 0 | 32 | 49 | | INFO:Slab#objects=#used=#fp=#flags= | 0 | 32 | 49 | | INFO:Object#@offset=#fp= | 0 | 32 | 49 | | backtrace:kfree | 0 | 32 | 49 | | backtrace:SyS_mount | 0 | 32 | 49 | | backtrace:devtmpfsd | 0 | 32 | 49 | | BUG_kmalloc-#(Tainted:G_B):Redzone_overwritten | 0 | 23 | 33 | | INFO:Freed_in_kvfree_age=#cpu=#pid= | 0 | 23 | 33 | | backtrace:compat_SyS_mount | 0 | 4 | | | INFO:Allocated_in#age=#cpu=#pid= | 0 | 0 | 6 | | INFO:Object#@offset=#fp=0x(null) | 0 | 0 | 6 | | INFO:Allocated_in_do_select_age=#cpu=#pid= | 0 | 0 | 4 | | INFO:Freed_in_zs_cpu_notifier_age=#cpu=#pid= | 0 | 0 | 3 | | INFO:Slab#objects=#used=#fp=0x(null)flags= | 0 | 0 | 6 | | INFO:Freed_in_cryptomgr_probe_age=#cpu=#pid= | 0 | 0 | 2 | +-----------------------------------------------------------+------------+------------+------------+ [ 0.630144] x86: Booted up 1 node, 1 CPUs [ 0.631585] smpboot: Total of 1 processors activated (5852.65 BogoMIPS) [ 0.634530] ============================================================================= [ 0.637434] BUG kmalloc-4096 (Not tainted): Redzone overwritten [ 0.639287] ----------------------------------------------------------------------------- [ 0.639287] [ 0.643023] Disabling lock debugging due to kernel taint [ 0.644653] INFO: 0xffff88000ee5c3f8-0xffff88000ee5c3ff. First byte 0x0 instead of 0xcc [ 0.647383] INFO: Allocated in copy_mount_options+0x2e/0xa0 age=0 cpu=0 pid=11 [ 0.661654] INFO: Freed in __register_sysctl_paths+0x86/0x1b0 age=0 cpu=0 pid=1 [ 0.677123] INFO: Slab 0xffff88000f48c600 objects=7 used=5 fp=0xffff88000ee5c548 flags=0x280000004081 [ 0.680200] INFO: Object 0xffff88000ee5b3f8 @offset=13304 fp=0xffff88000ee5d600 [ 0.680200] [ 0.683759] Redzone ffff88000ee5b3f0: cc cc cc cc cc cc cc cc ........ [ 0.686558] Object ffff88000ee5b3f8: 6d 6f 64 65 00 30 37 35 35 00 00 00 00 00 00 00 mode.0755....... [ 0.689512] Object ffff88000ee5b408: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.692487] Object ffff88000ee5b418: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.695500] Object ffff88000ee5b428: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.698488] Object ffff88000ee5b438: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.701431] Object ffff88000ee5b448: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.704423] Object ffff88000ee5b458: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.707519] Object ffff88000ee5b468: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.710596] Object ffff88000ee5b478: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.713554] Object ffff88000ee5b488: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.716459] Object ffff88000ee5b498: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.719367] Object ffff88000ee5b4a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.722338] Object ffff88000ee5b4b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.725368] Object ffff88000ee5b4c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.728363] Object ffff88000ee5b4d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.731223] Object ffff88000ee5b4e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.734443] Object ffff88000ee5b4f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.737356] Object ffff88000ee5b508: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.740253] Object ffff88000ee5b518: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.743171] Object ffff88000ee5b528: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.746097] Object ffff88000ee5b538: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.749028] Object ffff88000ee5b548: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.751957] Object ffff88000ee5b558: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.754910] Object ffff88000ee5b568: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.757824] Object ffff88000ee5b578: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.760774] Object ffff88000ee5b588: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.763712] Object ffff88000ee5b598: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.766647] Object ffff88000ee5b5a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.769562] Object ffff88000ee5b5b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.772534] Object ffff88000ee5b5c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.775435] Object ffff88000ee5b5d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.778365] Object ffff88000ee5b5e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.781304] Object ffff88000ee5b5f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.784224] Object ffff88000ee5b608: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.787172] Object ffff88000ee5b618: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.790085] Object ffff88000ee5b628: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.793040] Object ffff88000ee5b638: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.812474] Object ffff88000ee5b648: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.815427] Object ffff88000ee5b658: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.818331] Object ffff88000ee5b668: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.821277] Object ffff88000ee5b678: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.824181] Object ffff88000ee5b688: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.827134] Object ffff88000ee5b698: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.830053] Object ffff88000ee5b6a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.833046] Object ffff88000ee5b6b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.835974] Object ffff88000ee5b6c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.838931] Object ffff88000ee5b6d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.841856] Object ffff88000ee5b6e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.844815] Object ffff88000ee5b6f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.847748] Object ffff88000ee5b708: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.850719] Object ffff88000ee5b718: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.853663] Object ffff88000ee5b728: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.856642] Object ffff88000ee5b738: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.859570] Object ffff88000ee5b748: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.862578] Object ffff88000ee5b758: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.865500] Object ffff88000ee5b768: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.868469] Object ffff88000ee5b778: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.871394] Object ffff88000ee5b788: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.874378] Object ffff88000ee5b798: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.877292] Object ffff88000ee5b7a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.880273] Object ffff88000ee5b7b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.883217] Object ffff88000ee5b7c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.886174] Object ffff88000ee5b7d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.889083] Object ffff88000ee5b7e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.892045] Object ffff88000ee5b7f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.894954] Object ffff88000ee5b808: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.897922] Object ffff88000ee5b818: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.900849] Object ffff88000ee5b828: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.903793] Object ffff88000ee5b838: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.906745] Object ffff88000ee5b848: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.909689] Object ffff88000ee5b858: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.912613] Object ffff88000ee5b868: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.915562] Object ffff88000ee5b878: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.918504] Object ffff88000ee5b888: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.921405] Object ffff88000ee5b898: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.924371] Object ffff88000ee5b8a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.927658] Object ffff88000ee5b8b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.930569] Object ffff88000ee5b8c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.933672] Object ffff88000ee5b8d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.936580] Object ffff88000ee5b8e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.939485] Object ffff88000ee5b8f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.942447] Object ffff88000ee5b908: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.945351] Object ffff88000ee5b918: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.948303] Object ffff88000ee5b928: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.951229] Object ffff88000ee5b938: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.964457] Object ffff88000ee5b948: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.967412] Object ffff88000ee5b958: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.970332] Object ffff88000ee5b968: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.975310] Object ffff88000ee5b978: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.978265] Object ffff88000ee5b988: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.984285] Object ffff88000ee5b998: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.987208] Object ffff88000ee5b9a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.990161] Object ffff88000ee5b9b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.993081] Object ffff88000ee5b9c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.996055] Object ffff88000ee5b9d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 0.998969] Object ffff88000ee5b9e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.001884] Object ffff88000ee5b9f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.004853] Object ffff88000ee5ba08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.012819] Object ffff88000ee5ba18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.015733] Object ffff88000ee5ba28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.018696] Object ffff88000ee5ba38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.021683] Object ffff88000ee5ba48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.024686] Object ffff88000ee5ba58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.027641] Object ffff88000ee5ba68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.030551] Object ffff88000ee5ba78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.033546] Object ffff88000ee5ba88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.036609] Object ffff88000ee5ba98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.039628] Object ffff88000ee5baa8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.042645] Object ffff88000ee5bab8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.045552] Object ffff88000ee5bac8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.048552] Object ffff88000ee5bad8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.051457] Object ffff88000ee5bae8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.054530] Object ffff88000ee5baf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.057517] Object ffff88000ee5bb08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.060483] Object ffff88000ee5bb18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.063399] Object ffff88000ee5bb28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.066360] Object ffff88000ee5bb38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.069276] Object ffff88000ee5bb48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.072252] Object ffff88000ee5bb58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.075177] Object ffff88000ee5bb68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.078092] Object ffff88000ee5bb78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.081047] Object ffff88000ee5bb88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.083998] Object ffff88000ee5bb98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.086942] Object ffff88000ee5bba8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.089880] Object ffff88000ee5bbb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.092818] Object ffff88000ee5bbc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.095761] Object ffff88000ee5bbd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.115502] Object ffff88000ee5bbe8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.118587] Object ffff88000ee5bbf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.121620] Object ffff88000ee5bc08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.124521] Object ffff88000ee5bc18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.127379] Object ffff88000ee5bc28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.130240] Object ffff88000ee5bc38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.133272] Object ffff88000ee5bc48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.136362] Object ffff88000ee5bc58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.139329] Object ffff88000ee5bc68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.142323] Object ffff88000ee5bc78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.145394] Object ffff88000ee5bc88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.148495] Object ffff88000ee5bc98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.151524] Object ffff88000ee5bca8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.154467] Object ffff88000ee5bcb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.157392] Object ffff88000ee5bcc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.160332] Object ffff88000ee5bcd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.163323] Object ffff88000ee5bce8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.166327] Object ffff88000ee5bcf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.169334] Object ffff88000ee5bd08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.177660] Object ffff88000ee5bd18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.180688] Object ffff88000ee5bd28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.183777] Object ffff88000ee5bd38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.186842] Object ffff88000ee5bd48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.189854] Object ffff88000ee5bd58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.192883] Object ffff88000ee5bd68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.195888] Object ffff88000ee5bd78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.198898] Object ffff88000ee5bd88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.201927] Object ffff88000ee5bd98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.204941] Object ffff88000ee5bda8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.207945] Object ffff88000ee5bdb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.210956] Object ffff88000ee5bdc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.213980] Object ffff88000ee5bdd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.217058] Object ffff88000ee5bde8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.220089] Object ffff88000ee5bdf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.223118] Object ffff88000ee5be08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.226121] Object ffff88000ee5be18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.229136] Object ffff88000ee5be28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.232192] Object ffff88000ee5be38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.235210] Object ffff88000ee5be48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.238220] Object ffff88000ee5be58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.241243] Object ffff88000ee5be68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.244268] Object ffff88000ee5be78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.247288] Object ffff88000ee5be88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.250298] Object ffff88000ee5be98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.253315] Object ffff88000ee5bea8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.257725] Object ffff88000ee5beb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.260737] Object ffff88000ee5bec8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.263757] Object ffff88000ee5bed8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.266764] Object ffff88000ee5bee8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.269773] Object ffff88000ee5bef8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.272792] Object ffff88000ee5bf08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.275801] Object ffff88000ee5bf18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.278812] Object ffff88000ee5bf28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.281818] Object ffff88000ee5bf38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.284806] Object ffff88000ee5bf48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.287812] Object ffff88000ee5bf58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.290865] Object ffff88000ee5bf68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.293979] Object ffff88000ee5bf78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.297098] Object ffff88000ee5bf88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1.302031] Object ffff88000ee5bf98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ git bisect start ed65a9b989eebd576ad2bcfa7a46d9a502116449 af8c34ce6ae32addda3788d54a7e340cad22516b -- git bisect good b433186d4ebcbe9c85c595c56571a45a0e8b0a98 # 07:27 22+ 6 Merge 'linux-review/Benjamin-Coddington/pnfs-blocklayout-put-deviceid-node-after-releasing-bl_ext_lock/20160611-051226' into devel-catchup-201606110637 git bisect bad 74330a1d09ed3c8531cc7aef133de5c555867586 # 07:36 0- 20 Merge 'linux-review/Luis-R-Rodriguez/scripts-coccicheck-add-paramap-and-indexing-options/20160611-044623' into devel-catchup-201606110637 git bisect bad dc1500fc5d25e24bf0937627c7400f724a7ce7a5 # 07:41 0- 26 Merge 'luto/x86/uaccess' into devel-catchup-201606110637 git bisect good 6ca6e6e4f0bfd534e7586d953eebe77eae03b7de # 07:47 22+ 16 Merge 'linux-review/Heinrich-Schuchardt/selinuxfs-fix-type-mismatch/20160611-051623' into devel-catchup-201606110637 git bisect good 87b68ffea54a2ec788000bffd50a5624dee9c221 # 07:53 22+ 0 Merge 'linux-review/David-Howells/rxrpc-Limit-the-listening-backlog/20160611-053504' into devel-catchup-201606110637 git bisect bad 6a999f8f4d866c54982e5d8b0b8084f4ec8660fa # 07:58 0- 24 x86/uaccess: Give uaccess faults their own handler git bisect bad 325bca518d477325102e898213c348ec620b0487 # 08:05 0- 22 fs: Improve and simplify copy_mount_options git bisect good f89dec72e98b34b3be66bb1ef1be62974c0f8483 # 08:12 22+ 24 uvc_v4l2: Simplify compat ioctl implementation # first bad commit: [325bca518d477325102e898213c348ec620b0487] fs: Improve and simplify copy_mount_options git bisect good f89dec72e98b34b3be66bb1ef1be62974c0f8483 # 08:13 60+ 84 uvc_v4l2: Simplify compat ioctl implementation # extra tests with CONFIG_DEBUG_INFO_REDUCED git bisect bad 325bca518d477325102e898213c348ec620b0487 # 08:22 0- 4 fs: Improve and simplify copy_mount_options # extra tests on HEAD of linux-devel/devel-catchup-201606110637 git bisect bad ed65a9b989eebd576ad2bcfa7a46d9a502116449 # 08:23 0- 49 0day head guard for 'devel-catchup-201606110637' # extra tests on tree/branch luto/x86/uaccess git bisect bad 4805ee99b0ac1282d09545e294e218a575208b72 # 08:25 0- 8 [DEBUG] force CONFIG_DEBUG_UACCESS # extra tests on tree/branch linus/master git bisect good 3d0f0b6a5520878305589411b8d434fe088e4f21 # 08:36 63+ 39 Merge branch 'for-linus-4.7' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs # extra tests on tree/branch linux-next/master git bisect good 8f6027f7e808ed7c1fd8c8d37fc7a5076c683c4f # 08:39 66+ 45 Add linux-next specific files for 20160609 This script may reproduce the error. ---------------------------------------------------------------------------- #!/bin/bash kernel=$1 initrd=yocto-minimal-x86_64.cgz wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd kvm=( qemu-system-x86_64 -enable-kvm -cpu Haswell,+smep,+smap -kernel $kernel -initrd $initrd -m 256 -smp 1 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -serial stdio -display none -monitor null ) append=( hung_task_panic=1 earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal root=/dev/ram0 rw drbd.minor_count=8 ) "${kvm[@]}" --append "${append[*]}" ---------------------------------------------------------------------------- --- 0-DAY kernel test infrastructure Open Source Technology Center https://lists.01.org/pipermail/lkp Intel Corporation