[lkp] [hrtimer] 512d7dce5e: BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
3:02 a.m.
FYI, we noticed the below changes on
https://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms.git
hrtimer/monotonic-raw
commit 512d7dce5e97b2242cd50032ae7cf56c63342f2c ("hrtimer: Catch illegal
clockids")
+----------------+------------+------------+
| | f144b63298 | 512d7dce5e |
+----------------+------------+------------+
| boot_successes | 44 | 0 |
+----------------+------------+------------+
[ 1.171029] BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
[ 1.171035] IP: [<ffffffff8bafac73>] __hrtimer_get_next_event+0x33/0x70
[ 1.171037] PGD 0
[ 1.171039] Oops: 0000 [#1] SMP
[ 1.171041] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.0-rc4-00002-g512d7dc #2
[ 1.171042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1
04/01/2014
[ 1.171044] task: ffff8800001a8000 ti: ffff88000017c000 task.ti: ffff88000017c000
[ 1.171046] RIP: 0010:[<ffffffff8bafac73>] [<ffffffff8bafac73>]
__hrtimer_get_next_event+0x33/0x70
[ 1.171047] RSP: 0000:ffff880013c03ee0 EFLAGS: 00010002
[ 1.171049] RAX: 7fffffffffffffff RBX: ffff880013dcd900 RCX: ffff880013dcdb00
[ 1.171050] RDX: 0000000000000001 RSI: 000001cd42e4dffb RDI: ffff880013dcd900
[ 1.171050] RBP: ffff880013c03ee0 R08: 0000000000000000 R09: 0000000000000000
[ 1.171051] R10: 0000000000006df8 R11: ffffffff8da362ed R12: ffff880013dcd900
[ 1.171052] R13: 0000000000000000 R14: ffffffff8da3dda8 R15: 0000000000000000
[ 1.171054] FS: 0000000000000000(0000) GS:ffff880013c00000(0000)
knlGS:0000000000000000
[ 1.171055] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 1.171056] CR2: 0000000000000018 CR3: 000000000ca09000 CR4: 00000000000006f0
[ 1.171060] Stack:
[ 1.171062] ffff880013c03ef8 ffffffff8bafb0c5 ffff880013dcd900 ffff880013c03f18
[ 1.171064] ffffffff8bafbb3e ffff8800001a8000 0000000000000000 ffff880013c03f38
[ 1.171066] ffffffff8bafab02 ffff880013c0c500 7fffffffffffffff ffff880013c03f50
[ 1.171067] Call Trace:
[ 1.171071] <IRQ>
[ 1.171071] [<ffffffff8bafb0c5>] retrigger_next_event+0x65/0x90
[ 1.171073] [<ffffffff8bafbb3e>] hrtimer_run_queues+0x6e/0xd0
[ 1.171075] [<ffffffff8bafab02>] update_process_times+0x22/0x60
[ 1.171078] [<ffffffff8bb0764a>] tick_periodic+0x2a/0xb0
[ 1.171080] [<ffffffff8bb076f0>] ? tick_handle_periodic+0x20/0x70
[ 1.171082] [<ffffffff8bb076f0>] tick_handle_periodic+0x20/0x70
[ 1.171085] [<ffffffff8ba2d083>] smp_trace_apic_timer_interrupt+0x63/0x90
[ 1.171086] [<ffffffff8ba2d0b9>] smp_apic_timer_interrupt+0x9/0x10
[ 1.171090] [<ffffffff8c2f8c44>] apic_timer_interrupt+0x84/0x90
[ 1.171094] <EOI>
[ 1.171094] [<ffffffff8bd94945>] ? serial8250_console_write+0xe5/0x220
[ 1.171098] [<ffffffff8bae8f50>] ? console_unlock+0x2f0/0x530
[ 1.171101] [<ffffffff8bae948f>] vprintk_emit+0x2ff/0x560
[ 1.171102] [<ffffffff8bae980a>] vprintk_default+0x1a/0x20
[ 1.171105] [<ffffffff8bb33316>] printk+0x43/0x4b
[ 1.171107] [<ffffffff8bb03d67>] __clocksource_select+0xd7/0x110
[ 1.171111] [<ffffffff8ce69c0e>] ? ntp_init+0xb/0xb
[ 1.171112] [<ffffffff8ce69c42>] clocksource_done_booting+0x34/0x44
[ 1.171115] [<ffffffff8ce51f5f>] do_one_initcall+0xe2/0x172
[ 1.171116] [<ffffffff8ce521a8>] kernel_init_freeable+0x1b9/0x23c
[ 1.171119] [<ffffffff8c2f0ff0>] ? rest_init+0xd0/0xd0
[ 1.171121] [<ffffffff8c2f0ff9>] kernel_init+0x9/0xe0
[ 1.171123] [<ffffffff8c2f829f>] ret_from_fork+0x3f/0x70
[ 1.171125] [<ffffffff8c2f0ff0>] ? rest_init+0xd0/0xd0
[ 1.171152] Code: c7 87 a0 00 00 00 00 00 00 00 48 89 e5 85 d2 74 47 48 8d 8f c0 00 00
00 48 b8 ff ff ff ff ff ff ff 7f f6 c2 01 74 1b 4c 8b 41 18 <49> 8b 70 18 48 2b 71
28 48 39 c6 7d 0a 4c 89 87 a0 00 00 00 48
[ 1.171155] RIP [<ffffffff8bafac73>] __hrtimer_get_next_event+0x33/0x70
[ 1.171155] RSP <ffff880013c03ee0>
[ 1.171156] CR2: 0000000000000018
[ 1.171162] ---[ end trace 164f7953b3ea131d ]---
[ 1.171163] Kernel panic - not syncing: Fatal exception in interrupt
Thanks,
Kernel Test Robot
12:55 p.m.
New subject: [hrtimer] BUG: KASAN: null-ptr-deref on address 0000000000000018 NULL pointer dereference at 0000000000000018
Hi Marc,
FYI, here is another bisect result.
https://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms.git
hrtimer/monotonic-raw
commit 512d7dce5e97b2242cd50032ae7cf56c63342f2c
Author: Marc Zyngier <marc.zyngier(a)arm.com>
AuthorDate: Sun Dec 13 14:56:24 2015 +0000
Commit: Marc Zyngier <marc.zyngier(a)arm.com>
CommitDate: Sun Dec 13 15:04:35 2015 +0000
hrtimer: Catch illegal clockids
It is way too easy to take any random clockid and feed it to
the hrtimer subsystem. At best, it gets mapped to a monotonic
base, but it would be better to just catch illegal values as
early as possible.
This patch does exactly that, by reserving base index 0 and
making it an illegal value. When converting the clockid to
a base index, we BUG if that clockid maps to base 0.
We loose one bit in the active_bases bitmap, but that
shouldn't be a big deal.
Signed-off-by: Marc Zyngier <marc.zyngier(a)arm.com>
+-------------------------------------------------------+------------+------------+------------+
| | f144b63298 | 512d7dce5e |
3bdce8d421 |
+-------------------------------------------------------+------------+------------+------------+
| boot_successes | 0 | 0 | 0
|
| boot_failures | 92 | 28 | 13
|
| BUG:kernel_boot_oversize | 92 | |
|
| BUG:KASAN:null-ptr-deref_on_address | 0 | 28 | 13
|
| BUG:unable_to_handle_kernel | 0 | 28 | 13
|
| Oops | 0 | 28 | 13
|
| RIP:__hrtimer_get_next_event | 0 | 28 | 13
|
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 28 | 13
|
| backtrace:proc_create_data | 0 | 1 | 1
|
| backtrace:proc_stat_init | 0 | 1 |
|
| backtrace:kernel_init_freeable | 0 | 28 | 13
|
| backtrace:acpi_get_devices | 0 | 23 | 4
|
| backtrace:pnpacpi_init | 0 | 24 | 5
|
| backtrace:kern_mount_data | 0 | 1 | 3
|
| backtrace:init_pipe_fs | 0 | 1 | 2
|
| backtrace:printk | 0 | 1 | 1
|
| backtrace:clocksource_done_booting | 0 | 2 | 3
|
| backtrace:anon_inode_init | 0 | 0 | 1
|
| backtrace:kfree | 0 | 0 | 1
|
| backtrace:proc_consoles_init | 0 | 0 | 1
|
| backtrace:__alloc_percpu | 0 | 0 | 1
|
| backtrace:__percpu_init_rwsem | 0 | 0 | 1
|
+-------------------------------------------------------+------------+------------+------------+
[ 1.495695] pnp: PnP ACPI init
[ 1.497439] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active)
[ 1.498896] ==================================================================
[ 1.499703] BUG: KASAN: null-ptr-deref on address 0000000000000018
[ 1.500390] Read of size 8 by task swapper/1
[ 1.500865] CPU: 0 PID: 1 Comm: swapper Not tainted 4.4.0-rc4-00002-g512d7dc #1
[ 1.501670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1
04/01/2014
[ 1.502640] 0000000000000000 ffffffff81c3be38 ffffffff813bb8da ffffffff81c3bea8
[ 1.503513] ffffffff8116ca60 ffffffff810dde76 0000000000000046 ffffffff81c3bea0
[ 1.504386] ffffffff810e559c 000000015511f9df 0000000154c202c3 ffffffff81e679a8
[ 1.505250] Call Trace:
[ 1.505531] <IRQ> [<ffffffff813bb8da>] dump_stack+0x19/0x1b
[ 1.506184] [<ffffffff8116ca60>] kasan_report+0x115/0x44e
[ 1.506799] [<ffffffff810dde76>] ? __hrtimer_get_next_event+0x6c/0xb7
[ 1.507523] [<ffffffff810e559c>] ? timekeeping_get_ns+0x10e/0x126
[ 1.508205] [<ffffffff8116c033>] __asan_load8+0x23/0x65
[ 1.508798] [<ffffffff810dde76>] __hrtimer_get_next_event+0x6c/0xb7
[ 1.509497] [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.510103] [<ffffffff810deab3>] retrigger_next_event+0x33/0x5e
[ 1.510769] [<ffffffff810ded1f>] hrtimer_run_queues+0x5d/0x86
[ 1.511415] [<ffffffff810ddd4e>] run_local_timers+0x9/0x15
[ 1.512029] [<ffffffff810ddd7b>] update_process_times+0x21/0x4d
[ 1.512699] [<ffffffff810ecaad>] tick_periodic+0xc4/0xca
[ 1.513420] [<ffffffff810ecacf>] tick_handle_periodic+0x1c/0x69
[ 1.514082] [<ffffffff81038835>] smp_trace_apic_timer_interrupt+0x5b/0x6a
[ 1.514838] [<ffffffff8103884d>] smp_apic_timer_interrupt+0x9/0xb
[ 1.515522] [<ffffffff816ed38a>] apic_timer_interrupt+0x8a/0x90
[ 1.516179] <EOI> [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.516882] [<ffffffff81166d83>] ? arch_local_irq_restore+0x6/0xd
[ 1.517562] [<ffffffff81169a2a>] __slab_alloc+0x64/0x70
[ 1.518264] [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.518873] [<ffffffff81169b96>] kmem_cache_alloc+0x48/0xc4
[ 1.519501] [<ffffffff813bcc17>] ida_pre_get+0x3e/0x121
[ 1.520082] [<ffffffff813bdd3b>] ida_simple_get+0xa4/0x144
[ 1.520697] [<ffffffff813bdc97>] ? ida_simple_remove+0x45/0x45
[ 1.521346] [<ffffffff8116c721>] ? kasan_slab_alloc+0xd/0xf
[ 1.521964] [<ffffffff81167dea>] ? slab_post_alloc_hook+0x2a/0x35
[ 1.522724] [<ffffffff811fdecb>] ? __kernfs_new_node+0x4e/0x121
[ 1.523386] [<ffffffff81169c04>] ? kmem_cache_alloc+0xb6/0xc4
[ 1.524021] [<ffffffff811fdeec>] __kernfs_new_node+0x6f/0x121
[ 1.524669] [<ffffffff811ff620>] kernfs_new_node+0x2e/0x55
[ 1.525282] [<ffffffff81201a9f>] kernfs_create_link+0x1e/0x98
[ 1.525928] [<ffffffff81202cca>] sysfs_do_create_link_sd+0x6e/0xa8
[ 1.526684] [<ffffffff81202d59>] sysfs_create_link+0x55/0x5c
[ 1.527321] [<ffffffff81457bb8>] acpi_bind_one+0x33d/0x412
[ 1.527934] [<ffffffff8145787b>] ? acpi_platform_notify_remove+0x92/0x92
[ 1.528684] [<ffffffff810bfda2>] ? up_read+0x1a/0x2f
[ 1.529240] [<ffffffff81457cad>] acpi_platform_notify+0x20/0xd1
[ 1.529902] [<ffffffff814f2633>] device_add+0x1f1/0x803
[ 1.530493] [<ffffffff814f2442>] ? device_private_init+0x9d/0x9d
[ 1.531155] [<ffffffff810bec8c>] ? __init_waitqueue_head+0x4f/0x5a
[ 1.531849] [<ffffffff81503390>] ? pm_runtime_init+0x1e5/0x1ea
[ 1.532503] [<ffffffff814f2c5a>] device_register+0x15/0x18
[ 1.533113] [<ffffffff814a44b3>] __pnp_add_device+0x10d/0x15e
[ 1.533756] [<ffffffff814a4589>] pnp_add_device+0x85/0x189
[ 1.534373] [<ffffffff81490394>] ? acpi_walk_resources+0xf7/0x123
[ 1.535050] [<ffffffff814a4504>] ? __pnp_add_device+0x15e/0x15e
[ 1.535715] [<ffffffff81490394>] ? acpi_walk_resources+0xf7/0x123
[ 1.536401] [<ffffffff814ab178>] ? pnpacpi_count_resources+0x40/0x40
[ 1.537102] [<ffffffff8149029d>] ? acpi_rs_match_vendor_resource+0x101/0x101
[ 1.537887] [<ffffffff81451d96>] ? acpi_has_method+0x53/0x6d
[ 1.538521] [<ffffffff814a41ad>] ? pnp_free_resources+0x2a/0x52
[ 1.539183] [<ffffffff813c6677>] ? strcmp+0x27/0x4a
[ 1.539738] [<ffffffff8206efb1>] pnpacpi_add_device_handler+0x382/0x3c8
[ 1.540476] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.541072] [<ffffffff816ebe73>] ? _raw_spin_unlock_irqrestore+0x48/0x53
[ 1.541818] [<ffffffff810bfb3c>] ? up+0x47/0x4e
[ 1.542333] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.542928] [<ffffffff81488e28>] acpi_ns_get_device_callback+0x252/0x285
[ 1.543675] [<ffffffff810402b1>] ? kvm_clock_read+0x16/0x1e
[ 1.544297] [<ffffffff81488bd6>] ? acpi_walk_namespace+0xcb/0xcb
[ 1.544967] [<ffffffff810c6717>] ? lock_release+0x193/0x45a
[ 1.545590] [<ffffffff810c4638>] ? mark_held_locks+0x2d/0x90
[ 1.546216] [<ffffffff816ebe6b>] ? _raw_spin_unlock_irqrestore+0x40/0x53
[ 1.546961] [<ffffffff810c48a0>] ? trace_hardirqs_on_caller+0x205/0x24c
[ 1.547697] [<ffffffff816ebe73>] ? _raw_spin_unlock_irqrestore+0x48/0x53
[ 1.548447] [<ffffffff810bfb3c>] ? up+0x47/0x4e
[ 1.548958] [<ffffffff81488410>] acpi_ns_walk_namespace+0x10a/0x1e0
[ 1.549663] [<ffffffff81488bd6>] ? acpi_walk_namespace+0xcb/0xcb
[ 1.550336] [<ffffffff81488ad6>] acpi_get_devices+0x9e/0xd3
[ 1.550960] [<ffffffff81488a38>] ? acpi_evaluate_object_typed+0x139/0x139
[ 1.551718] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.552314] [<ffffffff814a40ea>] ? pnp_register_protocol+0x118/0x134
[ 1.553024] [<ffffffff8206eff7>] ? pnpacpi_add_device_handler+0x3c8/0x3c8
[ 1.553781] [<ffffffff8206eff7>] ? pnpacpi_add_device_handler+0x3c8/0x3c8
[ 1.554540] [<ffffffff8206f051>] pnpacpi_init+0x5a/0x86
[ 1.555121] [<ffffffff8100046a>] do_one_initcall+0x157/0x206
[ 1.555760] [<ffffffff81000313>] ? try_to_run_init_process+0x31/0x31
[ 1.556476] [<ffffffff810afb72>] ? parse_args+0x4c/0x3a3
[ 1.557069] [<ffffffff8203e1fd>] kernel_init_freeable+0x17f/0x213
[ 1.557751] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.558353] [<ffffffff816de8e2>] kernel_init+0xc/0xe4
[ 1.558917] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.559522] [<ffffffff816ecaef>] ret_from_fork+0x3f/0x70
[ 1.560114] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.560709] ==================================================================
[ 1.561500] Disabling lock debugging due to kernel taint
[ 1.562083] BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
[ 1.562969] IP: [<ffffffff810dde76>] __hrtimer_get_next_event+0x6c/0xb7
[ 1.563712] PGD 0
[ 1.563974] Oops: 0000 [#1] KASAN
[ 1.564376] Modules linked in:
[ 1.564735] CPU: 0 PID: 1 Comm: swapper Tainted: G B
4.4.0-rc4-00002-g512d7dc #1
[ 1.565675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1
04/01/2014
[ 1.566640] task: ffff88000dcd8000 ti: ffff88000dce0000 task.ti: ffff88000dce0000
[ 1.567465] RIP: 0010:[<ffffffff810dde76>] [<ffffffff810dde76>]
__hrtimer_get_next_event+0x6c/0xb7
[ 1.568469] RSP: 0000:ffffffff81c3bec8 EFLAGS: 00010056
[ 1.569049] RAX: ffff88000dcd8000 RBX: 7fffffffffffffff RCX: dffffc0000000004
[ 1.569834] RDX: fffffbfff03e32ec RSI: 0000000000000003 RDI: ffffffff81f19760
[ 1.570616] RBP: ffffffff81c3bef8 R08: 0000000000000001 R09: 0000000000000000
[ 1.571394] R10: ffff88000dcd8000 R11: 206f742065756420 R12: ffffffff81e67998
[ 1.572163] R13: ffffffff81e67800 R14: 0000000000000001 R15: 0000000000000000
[ 1.572946] FS: 0000000000000000(0000) GS:ffffffff81c34000(0000)
knlGS:0000000000000000
[ 1.573832] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 1.574465] CR2: 0000000000000018 CR3: 0000000001c18000 CR4: 00000000000006f0
[ 1.575234] Stack:
[ 1.575472] 0000000031302c1c ffff88000dcd8000 0000000000000000 00000000025080c0
[ 1.576335] ffffffff813bcc17 ffff88000dce76f8 ffffffff81c3bf08 ffffffff810deab3
[ 1.577189] ffffffff81c3bf18 ffffffff810ded1f ffffffff81c3bf28 ffffffff810ddd4e
[ 1.578051] Call Trace:
[ 1.578332] <IRQ>
[ 1.578556] [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.579188] [<ffffffff810deab3>] retrigger_next_event+0x33/0x5e
[ 1.579852] [<ffffffff810ded1f>] hrtimer_run_queues+0x5d/0x86
[ 1.580495] [<ffffffff810ddd4e>] run_local_timers+0x9/0x15
[ 1.581108] [<ffffffff810ddd7b>] update_process_times+0x21/0x4d
[ 1.581777] [<ffffffff810ecaad>] tick_periodic+0xc4/0xca
[ 1.582495] [<ffffffff810ecacf>] tick_handle_periodic+0x1c/0x69
[ 1.583152] [<ffffffff81038835>] smp_trace_apic_timer_interrupt+0x5b/0x6a
[ 1.583904] [<ffffffff8103884d>] smp_apic_timer_interrupt+0x9/0xb
[ 1.584587] [<ffffffff816ed38a>] apic_timer_interrupt+0x8a/0x90
[ 1.585241] <EOI>
[ 1.585469] [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.586103] [<ffffffff81166d83>] ? arch_local_irq_restore+0x6/0xd
[ 1.586790] [<ffffffff81169a2a>] __slab_alloc+0x64/0x70
[ 1.587500] [<ffffffff813bcc17>] ? ida_pre_get+0x3e/0x121
[ 1.588099] [<ffffffff81169b96>] kmem_cache_alloc+0x48/0xc4
[ 1.588724] [<ffffffff813bcc17>] ida_pre_get+0x3e/0x121
[ 1.589312] [<ffffffff813bdd3b>] ida_simple_get+0xa4/0x144
[ 1.589926] [<ffffffff813bdc97>] ? ida_simple_remove+0x45/0x45
[ 1.590579] [<ffffffff8116c721>] ? kasan_slab_alloc+0xd/0xf
[ 1.591200] [<ffffffff81167dea>] ? slab_post_alloc_hook+0x2a/0x35
[ 1.591950] [<ffffffff811fdecb>] ? __kernfs_new_node+0x4e/0x121
[ 1.592613] [<ffffffff81169c04>] ? kmem_cache_alloc+0xb6/0xc4
[ 1.593250] [<ffffffff811fdeec>] __kernfs_new_node+0x6f/0x121
[ 1.593888] [<ffffffff811ff620>] kernfs_new_node+0x2e/0x55
[ 1.594505] [<ffffffff81201a9f>] kernfs_create_link+0x1e/0x98
[ 1.595142] [<ffffffff81202cca>] sysfs_do_create_link_sd+0x6e/0xa8
[ 1.595903] [<ffffffff81202d59>] sysfs_create_link+0x55/0x5c
[ 1.596543] [<ffffffff81457bb8>] acpi_bind_one+0x33d/0x412
[ 1.597150] [<ffffffff8145787b>] ? acpi_platform_notify_remove+0x92/0x92
[ 1.597901] [<ffffffff810bfda2>] ? up_read+0x1a/0x2f
[ 1.598480] [<ffffffff81457cad>] acpi_platform_notify+0x20/0xd1
[ 1.599144] [<ffffffff814f2633>] device_add+0x1f1/0x803
[ 1.599740] [<ffffffff814f2442>] ? device_private_init+0x9d/0x9d
[ 1.600413] [<ffffffff810bec8c>] ? __init_waitqueue_head+0x4f/0x5a
[ 1.601101] [<ffffffff81503390>] ? pm_runtime_init+0x1e5/0x1ea
[ 1.601753] [<ffffffff814f2c5a>] device_register+0x15/0x18
[ 1.602367] [<ffffffff814a44b3>] __pnp_add_device+0x10d/0x15e
[ 1.603002] [<ffffffff814a4589>] pnp_add_device+0x85/0x189
[ 1.603623] [<ffffffff81490394>] ? acpi_walk_resources+0xf7/0x123
[ 1.604298] [<ffffffff814a4504>] ? __pnp_add_device+0x15e/0x15e
[ 1.604956] [<ffffffff81490394>] ? acpi_walk_resources+0xf7/0x123
[ 1.605640] [<ffffffff814ab178>] ? pnpacpi_count_resources+0x40/0x40
[ 1.606348] [<ffffffff8149029d>] ? acpi_rs_match_vendor_resource+0x101/0x101
[ 1.607125] [<ffffffff81451d96>] ? acpi_has_method+0x53/0x6d
[ 1.607762] [<ffffffff814a41ad>] ? pnp_free_resources+0x2a/0x52
[ 1.608426] [<ffffffff813c6677>] ? strcmp+0x27/0x4a
[ 1.608975] [<ffffffff8206efb1>] pnpacpi_add_device_handler+0x382/0x3c8
[ 1.609715] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.610316] [<ffffffff816ebe73>] ? _raw_spin_unlock_irqrestore+0x48/0x53
[ 1.611056] [<ffffffff810bfb3c>] ? up+0x47/0x4e
[ 1.611573] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.612167] [<ffffffff81488e28>] acpi_ns_get_device_callback+0x252/0x285
[ 1.612916] [<ffffffff810402b1>] ? kvm_clock_read+0x16/0x1e
[ 1.613543] [<ffffffff81488bd6>] ? acpi_walk_namespace+0xcb/0xcb
[ 1.614209] [<ffffffff810c6717>] ? lock_release+0x193/0x45a
[ 1.614846] [<ffffffff810c4638>] ? mark_held_locks+0x2d/0x90
[ 1.615493] [<ffffffff816ebe6b>] ? _raw_spin_unlock_irqrestore+0x40/0x53
[ 1.616234] [<ffffffff810c48a0>] ? trace_hardirqs_on_caller+0x205/0x24c
[ 1.616974] [<ffffffff816ebe73>] ? _raw_spin_unlock_irqrestore+0x48/0x53
[ 1.617725] [<ffffffff810bfb3c>] ? up+0x47/0x4e
[ 1.618231] [<ffffffff81488410>] acpi_ns_walk_namespace+0x10a/0x1e0
[ 1.618933] [<ffffffff81488bd6>] ? acpi_walk_namespace+0xcb/0xcb
[ 1.619612] [<ffffffff81488ad6>] acpi_get_devices+0x9e/0xd3
[ 1.620250] [<ffffffff81488a38>] ? acpi_evaluate_object_typed+0x139/0x139
[ 1.621068] [<ffffffff8206ec2f>] ? ispnpidacpi+0xc8/0xc8
[ 1.621714] [<ffffffff814a40ea>] ? pnp_register_protocol+0x118/0x134
[ 1.622420] [<ffffffff8206eff7>] ? pnpacpi_add_device_handler+0x3c8/0x3c8
[ 1.623191] [<ffffffff8206eff7>] ? pnpacpi_add_device_handler+0x3c8/0x3c8
[ 1.623997] [<ffffffff8206f051>] pnpacpi_init+0x5a/0x86
[ 1.624591] [<ffffffff8100046a>] do_one_initcall+0x157/0x206
[ 1.625221] [<ffffffff81000313>] ? try_to_run_init_process+0x31/0x31
[ 1.625949] [<ffffffff810afb72>] ? parse_args+0x4c/0x3a3
[ 1.626553] [<ffffffff8203e1fd>] kernel_init_freeable+0x17f/0x213
[ 1.627226] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.627841] [<ffffffff816de8e2>] kernel_init+0xc/0xe4
[ 1.628430] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.629030] [<ffffffff816ecaef>] ret_from_fork+0x3f/0x70
[ 1.629636] [<ffffffff816de8d6>] ? rest_init+0x13d/0x13d
[ 1.630226] Code: 49 c7 85 a0 00 00 00 00 00 00 00 45 85 f6 74 4e 41 f6 c6 01 74 3f 4c
89 e7 e8 a7 e1 08 00 4d 8b 3c 24 49 8d 7f 18 e8 9a e1 08 00 <49> 8b 47 18 49 8d 7c
24 10 48 89 45 d0 e8 88 e1 08 00 48 8b 45
git bisect start 3bdce8d421f1e75fceee21e122041d503ccdaa7d
527e9316f8ec44bd53d90fb9f611fa7ffff52bb9 --
git bisect bad a46f83b0e8cd7353785d6a6ea8bed16ee17b2551 # 00:29 0- 8 Merge
'linux-review/Zhi-Wang/mm-mempool-Factor-out-mempool_refill/20151213-114759' into
devel-spot-201512132354
git bisect bad 90021d834264d2fc7e45c57287e26ee86f620f33 # 00:33 0- 24 Merge
'drm-exynos/exynos-drm-next' into devel-spot-201512132354
git bisect bad 2fa67ac48f489cb8181e1349d746318a2c97424d # 00:43 0- 24 Merge
'linux-review/Yoshihiro-Kaneko/ravb-Remove-clear-unhandled-interrupt/20151213-232031'
into devel-spot-201512132354
git bisect bad 4c94edb8284d3ca59372493a85e3c09dc3d9ef39 # 00:48 0- 22 Merge
'arm-platforms/hrtimer/monotonic-raw' into devel-spot-201512132354
git bisect good dc769ab462559bb61eea5d1088c0572d7947e60a # 00:57 22+ 24 0day
base guard for 'devel-spot-201512132354'
git bisect good ad7fa1664b305cdfba1943ce2823981110d31096 # 01:06 22+ 22 Merge
'linux-review/Jarkko-Sakkinen/TPM-2-0-trusted-key-features-for-v4-5/20151213-234439'
into devel-spot-201512132354
git bisect bad 512d7dce5e97b2242cd50032ae7cf56c63342f2c # 01:11 0- 24 hrtimer:
Catch illegal clockids
git bisect good f144b6329838b2996b64a070cb1b99dcf6f0bb30 # 01:17 22+ 25 hrtimer:
Add support for CLOCK_MONOTONIC_RAW
# first bad commit: [512d7dce5e97b2242cd50032ae7cf56c63342f2c] hrtimer: Catch illegal
clockids
git bisect good f144b6329838b2996b64a070cb1b99dcf6f0bb30 # 01:21 66+ 92 hrtimer:
Add support for CLOCK_MONOTONIC_RAW
# extra tests with DEBUG_INFO
git bisect bad 512d7dce5e97b2242cd50032ae7cf56c63342f2c # 01:26 0- 50 hrtimer:
Catch illegal clockids
# extra tests on HEAD of linux-devel/devel-spot-201512132354
git bisect bad 3bdce8d421f1e75fceee21e122041d503ccdaa7d # 01:27 0- 13 0day
head guard for 'devel-spot-201512132354'
# extra tests on tree/branch arm-platforms/hrtimer/monotonic-raw
git bisect bad 770b0e16b97493b02d358e882630cda9fd2bb2ed # 01:48 0- 12 KVM:
arm/arm64: timer: Switch to CLOCK_MONOTONIC_RAW
# extra tests with first bad commit reverted
git bisect good d3fbaca849ba7169a3fa57bd3205aa135e44f611 # 01:57 65+ 67 Revert
"hrtimer: Catch illegal clockids"
# extra tests on tree/branch linus/master
git bisect good 097b285d32c7cb22dd4af2286ba61668a6c367ef # 02:14 65+ 65 Merge
tag 'fixes-for-linus' of
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
# extra tests on tree/branch linux-next/master
git bisect good 9379b045413ee30c88965e81d376af989ec32cf3 # 02:36 62+ 64 Add
linux-next specific files for 20151211
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu kvm64
-kernel $kernel
-m 300
-smp 2
-device e1000,netdev=net0
-netdev user,id=net0
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
systemd.log_level=err
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
1 p.m.
New subject: [hrtimer] BUG: unable to handle kernel NULL pointer dereference at 00000010
Hi Marc,
FYI, this bisect shows commit f144b632 also has the problem.
https://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms.git
hrtimer/monotonic-raw
commit f144b6329838b2996b64a070cb1b99dcf6f0bb30
Author: Marc Zyngier <marc.zyngier(a)arm.com>
AuthorDate: Sun Dec 13 14:42:14 2015 +0000
Commit: Marc Zyngier <marc.zyngier(a)arm.com>
CommitDate: Sun Dec 13 15:04:33 2015 +0000
hrtimer: Add support for CLOCK_MONOTONIC_RAW
The KVM/ARM timer implementation arms a hrtimer when a vcpu is
blocked (usually because it is waiting for an interrupt)
while its timer is going to kick in the future.
It is essential that this timer doesn't get adjusted, or the
guest will end up being woken-up at the wrong time (NTP seems
to confuse the hell of some guests when running on the host).
In order to allow this, let's add CLOCK_MONOTONIC_RAW support
to hrtimer (it is so far only supported for userspace). It also
has the (limited) benefit of fixing de0421d53bfb ("mac80211_hwsim:
shuffle code to prepare for dynamic radios"), which already uses
this functionnality without it being implemented (just being
lucky...).
Signed-off-by: Marc Zyngier <marc.zyngier(a)arm.com>
+------------------------------------------------+----------+------------+------------+
| | v4.4-rc4 | f144b63298 | abb6cc75ee |
+------------------------------------------------+----------+------------+------------+
| boot_successes | 644 | 152 | 0 |
| boot_failures | 16 | 2 | 17 |
| BUG:kernel_boot_hang | 6 | | |
| IP-Config:Auto-configuration_of_network_failed | 10 | | |
| BUG:unable_to_handle_kernel | 0 | 2 | 17 |
| Oops | 0 | 2 | 17 |
| EIP_is_at_hrtimer_get_next_event | 0 | 2 | 17 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 2 | 17 |
| backtrace:cpu_startup_entry | 0 | 2 | 17 |
+------------------------------------------------+----------+------------+------------+
[ 5.466489] init: Failed to create pty - disabling logging for job
[ 5.473086] init: Failed to create pty - disabling logging for job
Kernel tests: Boot OK!
[ 15.299670] BUG: unable to handle kernel NULL pointer dereference at 00000010
[ 15.301386] IP: [<c110e4c8>] hrtimer_get_next_event+0xd8/0x1f0
[ 15.302799] *pdpt = 0000000011cef001 *pde = 0000000000000000
[ 15.304228] Oops: 0000 [#1]
[ 15.305163] Modules linked in:
[ 15.306124] CPU: 0 PID: 0 Comm: swapper Not tainted 4.4.0-rc4-00001-gf144b63 #1
[ 15.308079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1
04/01/2014
[ 15.310269] task: c1c30140 ti: c1c28000 task.ti: c1c28000
[ 15.311556] EIP: 0060:[<c110e4c8>] EFLAGS: 00210002 CPU: 0
[ 15.312855] EIP is at hrtimer_get_next_event+0xd8/0x1f0
[ 15.314105] EAX: 00000001 EBX: 00000003 ECX: 00000000 EDX: c1c70980
[ 15.315570] ESI: 00000034 EDI: 00000000 EBP: c1c29e9c ESP: c1c29e70
[ 15.316991] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[ 15.318295] CR0: 8005003b CR2: 00000010 CR3: 123d06c0 CR4: 000006f0
[ 15.319748] Stack:
[ 15.320497] 00200046 00000031 00000000 851f015e 00000002 00000000 01010000 00000003
[ 15.323460] fffba63f 78d31000 00000003 c1c29f64 c110c153 00000004 00000000 00000004
[ 15.326289] 8e7f8ead 00000004 8d0d08ce 00000004 00000000 00000001 fffba63e c1c29ed8
[ 15.328927] Call Trace:
[ 15.329732] [<c110c153>] get_next_timer_interrupt+0x243/0x9d0
[ 15.331050] [<c10718c2>] ? pvclock_clocksource_read+0xe2/0x2c0
[ 15.333965] [<c112b405>] ? tick_program_event+0xd5/0x130
[ 15.335223] [<c106f910>] ? kvm_sched_clock_read+0x30/0x70
[ 15.336502] [<c10144d7>] ? sched_clock+0x17/0x30
[ 15.338044] [<c10da449>] ? sched_clock_cpu+0x49/0x240
[ 15.339727] [<c112c1ca>] __tick_nohz_idle_enter+0x70a/0x840
[ 15.341450] [<c112cc0e>] tick_nohz_idle_enter+0x12e/0x1c0
[ 15.342718] [<c10e3759>] cpu_idle_loop+0xa9/0x780
[ 15.343920] [<c10e3e5e>] cpu_startup_entry+0x2e/0x30
[ 15.345122] [<c1a19c46>] rest_init+0xe6/0x100
[ 15.346500] [<c1df77fb>] start_kernel+0x9d8/0x9ed
[ 15.347661] [<c1df6344>] i386_start_kernel+0x10e/0x120
[ 15.348877] Code: 09 c7 c1 89 4d dc eb 16 8d 76 00 83 45 e4 01 c6 45 ef 01 83 55 e8 00
83 c2 20 d1 e8 74 3e 83 c6 01 83 d7 00 a8 01 74 e3 8b 4a 10 <8b> 59 10 8b 49 0c 2b
4a 18 1b 5a 1c 3b 5d f0 7f db 7c 05 3b 4d
[ 15.356618] EIP: [<c110e4c8>] hrtimer_get_next_event+0xd8/0x1f0 SS:ESP
0068:c1c29e70
[ 15.358711] CR2: 0000000000000010
[ 15.359634] ---[ end trace 06172c6b5101e6ea ]---
[ 15.360765] Kernel panic - not syncing: Fatal exception
git bisect start abb6cc75eeed7e929d106d3bb331fbea62b75421
527e9316f8ec44bd53d90fb9f611fa7ffff52bb9 --
git bisect bad 7704041cff9ed96df680e5c286c97d8b0b1ee164 # 01:38 0- 44 Merge
'linux-review/Paul-Gortmaker/drivers-pci-avoid-module_init-in-non-modular-host-pci/20151213-094811'
into devel-spot-201512132342
git bisect bad b8d3a14e5074c9c67216a0c892828927bc2fba73 # 01:38 0- 4 Merge
'drm-exynos/exynos-drm-next' into devel-spot-201512132342
git bisect bad d630073ad2301da0a11521746b5911ee0ecc3980 # 01:38 0- 3 Merge
'linux-review/Yoshihiro-Kaneko/ravb-Remove-clear-unhandled-interrupt/20151213-232031'
into devel-spot-201512132342
git bisect bad 12fdbff8a5fdecfd75c4d4974f5a0f9366fdc3cb # 01:46 0- 8 Merge
'arm-platforms/hrtimer/monotonic-raw' into devel-spot-201512132342
git bisect good 2346da3a815459d7f049802688b885a2bd4095e0 # 01:54 148+ 2 0day
base guard for 'devel-spot-201512132342'
git bisect good 01440bcdb89558614980818ca10c8562d4fa9d13 # 02:05 147+ 0 Merge
'linux-review/Wang-Zhi-A/mm-mempool-Factor-out-mempool_refill/20151213-233708'
into devel-spot-201512132342
git bisect bad 512d7dce5e97b2242cd50032ae7cf56c63342f2c # 02:16 0- 5 hrtimer:
Catch illegal clockids
git bisect bad f144b6329838b2996b64a070cb1b99dcf6f0bb30 # 02:31 4- 1 hrtimer:
Add support for CLOCK_MONOTONIC_RAW
# first bad commit: [f144b6329838b2996b64a070cb1b99dcf6f0bb30] hrtimer: Add support for
CLOCK_MONOTONIC_RAW
git bisect good 527e9316f8ec44bd53d90fb9f611fa7ffff52bb9 # 02:43 421+ 15 Linux
4.4-rc4
# extra tests with DEBUG_INFO
git bisect bad f144b6329838b2996b64a070cb1b99dcf6f0bb30 # 02:54 67- 1 hrtimer:
Add support for CLOCK_MONOTONIC_RAW
# extra tests on HEAD of linux-devel/devel-spot-201512132342
git bisect bad abb6cc75eeed7e929d106d3bb331fbea62b75421 # 02:54 0- 17 0day
head guard for 'devel-spot-201512132342'
# extra tests on tree/branch arm-platforms/hrtimer/monotonic-raw
git bisect bad 770b0e16b97493b02d358e882630cda9fd2bb2ed # 03:03 0- 19 KVM:
arm/arm64: timer: Switch to CLOCK_MONOTONIC_RAW
# extra tests with first bad commit reverted
git bisect bad 4d33ba53a9e70d2a5ea670c44b2e0cfe70993083 # 03:17 0- 58 Revert
"hrtimer: Add support for CLOCK_MONOTONIC_RAW"
# extra tests on tree/branch linus/master
git bisect good 097b285d32c7cb22dd4af2286ba61668a6c367ef # 03:28 427+ 2 Merge
tag 'fixes-for-linus' of
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
# extra tests on tree/branch linux-next/master
git bisect bad 9379b045413ee30c88965e81d376af989ec32cf3 # 03:30 0- 5 Add
linux-next specific files for 20151211
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
initrd=quantal-core-i386.cgz
wget --no-clobber
https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu kvm64
-kernel $kernel
-initrd $initrd
-m 300
-smp 2
-device e1000,netdev=net0
-netdev user,id=net0
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
systemd.log_level=err
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
2439
days inactive
2439
days old
2 comments
2 participants
participants (2)
-
Fengguang Wu -
kernel test robot