From: Christophe Leroy <christophe.leroy@csgroup.eu>
To: Finn Thain <fthain@linux-m68k.org>
Cc: linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org,
Nick Piggin <npiggin@gmail.com>,
Michael Ellerman <mpe@ellerman.id.au>,
Paul Mackerras <paulus@samba.org>,
Benjamin Herrenschmidt <benh@kernel.crashing.org>,
Stan Johnson <userm57@yahoo.com>
Subject: Re: [PATCH v3 31/41] powerpc/32: Dismantle EXC_XFER_STD/LITE/TEMPLATE
Date: Sat, 31 Jul 2021 18:40:59 +0200 [thread overview]
Message-ID: <20210731184059.Horde.Yln_bjDrKlAdWFSSbeXUSQ1@messagerie.c-s.fr> (raw)
In-Reply-To: <666e3ab4-372-27c2-4621-7cc3933756dd@linux-m68k.org>
Finn Thain <fthain@linux-m68k.org> a écrit :
> Hi Christophe,
> We found that reducing memory with the kernel parameter 'mem=464M' would
> prevent the crash.
>
> Below are Stan's notes from the 'git bisect' run. They include an
> additional failure mode that might be of interest. We've also observed
> "Kernel attempted to write user page (c6207c) - exploit attempt?" and
> "kernel BUG at arch/powerpc/kernel/interrupt.c:49!".
>
Interesting. Can you provide detailed log of thoose two BUGs ?
Thanks
Christophe
>
> On Thu, 29 Jul 2021, Stanley J. Johnson wrote:
>
>> Here are the git bisect results (I saved the kernels and dmesg outputs
>> in case they're needed later, though it's easy enough to re-create the
>> results).
>>
>> We'll have up to two boots (only one if the first boot fails) for each
>> kernel on WS-1 with the default memory setting of 512M.
>>
>> 1) 5.12.0-pmac-08447-g85f3f17b5db (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 2) 5.12.0-pmac-12750-g23243c1ace9 (bad)
>> (Crash and burn. I was tempted to mark this one "skip", since the errors
>> are different, though we've seen them in earlier tests. So there could
>> be multiple regressions. But let's keep chasing this one. I can re-run
>> the bisect later and skip some failures if necessary.)
>> -> fails: "Unable to contact settings server" after wdm login; dmesg errors:
>> ...
>> [ 127.169294] BUG: Unable to handle kernel instruction fetch (NULL
>> pointer?)
>> [ 127.169397] Faulting instruction address: 0x00000000
>> [ 127.169635] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 127.169661] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 127.169696] Modules linked in:
>> [ 127.169736] CPU: 0 PID: 1877 Comm: gdbus Tainted: G D
>> 5.12.0-pmac-12750-g23243c1ace9 #9
>> [ 127.169776] NIP: 00000000 LR: 00000000 CTR: 00000000
>> ...
>>
>> 3) 5.12.0-rc7-pmac-02335-gaeacb52a8de (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 4) 5.12.0-pmac-11585-g95275402f66 (bad)
>> -> fails: dmesg errs, wdm login fails with "Unable to contact settings
>> server..."
>> ...
>> [ 58.290883] BUG: Unable to handle kernel instruction fetch
>> [ 58.291009] Faulting instruction address: 0x7cc903a4
>> [ 58.291240] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 58.291268] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 58.291305] Modules linked in:
>> [ 58.291349] CPU: 0 PID: 1750 Comm: Xorg Not tainted
>> 5.12.0-pmac-11585-g95275402f66 #11
>> [ 58.291391] NIP: 7cc903a4 LR: 7cc903a6 CTR: c0127eb8
>> [ 58.291417] REGS: e2da1e70 TRAP: 0400 Not tainted
>> (5.12.0-pmac-11585-g95275402f66)
>> [ 58.291450] MSR: 40001030 <ME,IR,DR> CR: 28008228 XER: 20000000
>> ...
>>
>> 5) 5.12.0-pmac-11068-g9d31d233895 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 6) 5.12.0-rc3-pmac-00258-ga9d2f9bb225 (bad)
>> -> fails: wdm dies at login, screen hangs, dmesg errs that I haven't
>> seen before:
>> ...
>> [ 59.988732] InputThread[1751]: bad frame in sys_rt_sigreturn:
>> 51a79ab6 nip 001023c8 lr 001023c0
>> [ 62.079043] InputThread[1760]: bad frame in sys_rt_sigreturn:
>> a98be235 nip 001023c8 lr 001023c0
>> [ 64.348063] InputThread[1776]: bad frame in sys_rt_sigreturn:
>> a46b945e nip 001023c8 lr 001023c0
>> [ 66.413980] InputThread[1785]: bad frame in sys_rt_sigreturn:
>> a98be235 nip 001023c8 lr 001023c0
>> [ 68.486768] InputThread[1794]: bad frame in sys_rt_sigreturn:
>> 677e693b nip 001023c8 lr 001023c0
>>
>> 7) 5.12.0-rc3-pmac-00129-g036fc2cb1dc (bad)
>> -> fails: dmesg errs, wdm hangs (wdm did not crash, screen seems hung)
>> ...
>> [ 101.136941] BUG: Unable to handle kernel instruction fetch
>> [ 101.137059] Faulting instruction address: 0xfea31f74
>> [ 101.137296] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 101.137323] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 101.137358] Modules linked in:
>> [ 101.137401] CPU: 0 PID: 1882 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00129-g036fc2cb1dc #14
>> [ 101.137443] NIP: fea31f74 LR: fea31f74 CTR: c00cfef4
>> [ 101.137470] REGS: e2e21e70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00129-g036fc2cb1dc)
>> [ 101.137502] MSR: 40001030 <ME,IR,DR> CR: 220084e8 XER: 00000000
>> ...
>>
>> 8) 5.12.0-rc3-pmac-00064-g719e7e212c7 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 9) 5.12.0-rc3-pmac-00096-ga2308836880 (bad)
>> -> fails: dmesg errs, wdm hangs while validating login
>> ...
>> [ 104.559951] BUG: Unable to handle kernel instruction fetch
>> [ 104.560086] Faulting instruction address: 0xfe988ba4
>> [ 104.560307] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 104.560337] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 104.560371] Modules linked in:
>> [ 104.560415] CPU: 0 PID: 1834 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00096-ga2308836880 #16
>> [ 104.560457] NIP: fe988ba4 LR: fe988ba4 CTR: c00cfee8
>> [ 104.560484] REGS: e2d9de70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00096-ga2308836880)
>> [ 104.560517] MSR: 40001030 <ME,IR,DR> CR: 220484e8 XER: 00000000
>> ...
>> [ 114.371853] BUG: Unable to handle kernel instruction fetch
>> [ 114.371998] Faulting instruction address: 0x3e62a270
>> [ 114.372270] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 114.372298] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 114.372334] Modules linked in:
>> [ 114.372382] CPU: 0 PID: 1858 Comm: xfwm4 Tainted: G D
>> 5.12.0-rc3-pmac-00096-ga2308836880 #16
>> [ 114.372425] NIP: 3e62a270 LR: 3e62a271 CTR: c065eebc
>> [ 114.372452] REGS: e2dede70 TRAP: 0400 Tainted: G D
>> (5.12.0-rc3-pmac-00096-ga2308836880)
>> [ 114.372486] MSR: 40001030 <ME,IR,DR> CR: 22002284 XER: 00000000
>> ...
>>
>> 10) 5.12.0-rc3-pmac-00080-g7a7d744ffe8 (bad)
>> -> fails: dmesg errs, "Unable to contact settings server..."
>> ...
>> [ 170.622408] BUG: Unable to handle kernel instruction fetch
>> [ 170.622546] Faulting instruction address: 0xfe9255d4
>> [ 170.622777] Oops: Kernel access of bad area, sig: 11 [#1]
>> [ 170.622806] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 170.622841] Modules linked in:
>> [ 170.622885] CPU: 0 PID: 1863 Comm: xfce4-session Not tainted
>> 5.12.0-rc3-pmac-00080-g7a7d744ffe8 #17
>> [ 170.622927] NIP: fe9255d4 LR: fe9255d4 CTR: c00cfee8
>> [ 170.622954] REGS: e2da1e70 TRAP: 0400 Not tainted
>> (5.12.0-rc3-pmac-00080-g7a7d744ffe8)
>> [ 170.622987] MSR: 40001030 <ME,IR,DR> CR: 220484e8 XER: 00000000
>> ...
>> [ 172.611235] BUG: Unable to handle kernel instruction fetch (NULL
>> pointer?)
>> [ 172.611364] Faulting instruction address: 0x00000000
>> [ 172.611662] Oops: Kernel access of bad area, sig: 11 [#2]
>> [ 172.611690] BE PAGE_SIZE=4K MMU=Hash SMP NR_CPUS=2 PowerMac
>> [ 172.611725] Modules linked in:
>> [ 172.611773] CPU: 0 PID: 1871 Comm: gmain Tainted: G D
>> 5.12.0-rc3-pmac-00080-g7a7d744ffe8 #17
>> [ 172.611814] NIP: 00000000 LR: 00000000 CTR: 00000000
>> [ 172.611840] REGS: e2db9e70 TRAP: 0400 Tainted: G D
>> (5.12.0-rc3-pmac-00080-g7a7d744ffe8)
>> [ 172.611874] MSR: 40001030 <ME,IR,DR> CR: 28008468 XER: 00000000
>> ...
>>
>> 11) 5.12.0-rc3-pmac-00072-ga2b3e09ae41 (bad)
>> -> fails: kernel panic, I'd have to capture the output via a serial console
>>
>> 12) 5.12.0-rc3-pmac-00068-gacc142b6230 (bad)
>> -> fails: kernel panic
>>
>> 13) 5.12.0-rc3-pmac-00066-g8f6ff5bd9b7 (good)
>> -> works: no dmesg errs, X works
>> -> works: no dmesg errs, X works
>>
>> 14) 5.12.0-rc3-pmac-00067-g4c0104a83fc (bad)
>> -> fails: kernel panic
>>
>> The git bisect thinks this is the bad commit, but I'm not sure it means
>> anything at all:
>>
>> -----
>>
>> 4c0104a83fc3990a76a01a2f4e504251fa9814c4 is the first bad commit
next prev parent reply other threads:[~2021-07-31 16:35 UTC|newest]
Thread overview: 53+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-03-12 12:50 [PATCH v3 00/41] powerpc/32: Switch to interrupt entry/exit in C Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 01/41] powerpc/traps: Declare unrecoverable_exception() as __noreturn Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 02/41] powerpc/40x: Don't use SPRN_SPRG_SCRATCH0/1 in TLB miss handlers Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 03/41] powerpc/40x: Change CRITICAL_EXCEPTION_PROLOG macro to a gas macro Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 04/41] powerpc/40x: Save SRR0/SRR1 and r10/r11 earlier in critical exception Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 05/41] powerpc/40x: Reorder a few instructions in critical exception prolog Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 06/41] powerpc/40x: Prepare for enabling MMU " Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 07/41] powerpc/40x: Prepare normal exception handler for enabling MMU early Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 08/41] powerpc/32: Reconcile interrupts in C Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 09/41] powerpc/32: Entry cpu time accounting " Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 10/41] powerpc/32: Handle bookE debugging in C in exception entry Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 11/41] powerpc/32: Use fast instruction to set MSR RI in exception prolog on 8xx Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 12/41] powerpc/32: Remove ksp_limit Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 13/41] powerpc/32: Always enable data translation in exception prolog Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 14/41] powerpc/32: Tag DAR in EXCEPTION_PROLOG_2 for the 8xx Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 15/41] powerpc/32: Enable instruction translation at the same time as data translation Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 16/41] powerpc/32: Statically initialise first emergency context Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 17/41] powerpc/32: Add vmap_stack_overflow label inside the macro Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 18/41] powerpc/32: Use START_EXCEPTION() as much as possible Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 19/41] powerpc/32: Move exception prolog code into .text once MMU is back on Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 20/41] powerpc/32: Provide a name to exception prolog continuation in virtual mode Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 21/41] powerpc/32: Refactor booke critical registers saving Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 22/41] powerpc/32: Perform normal function call in exception entry Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 23/41] powerpc/32: Always save non volatile registers on " Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 24/41] powerpc/32: Replace ASM exception exit by C exception exit from ppc64 Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 25/41] powerpc/32: Don't save thread.regs on interrupt entry Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 26/41] powerpc/32: Set regs parameter in r3 in transfer_to_handler Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 27/41] powerpc/32: Call bad_page_fault() from do_page_fault() Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 28/41] powerpc/32: Save trap number on stack in exception prolog Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 29/41] powerpc/32: Add a prepare_transfer_to_handler macro for exception prologs Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 30/41] powerpc/32: Only restore non volatile registers when required Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 31/41] powerpc/32: Dismantle EXC_XFER_STD/LITE/TEMPLATE Christophe Leroy
2021-07-31 10:12 ` Finn Thain
2021-07-31 15:39 ` Christophe Leroy
2021-08-01 1:21 ` Finn Thain
[not found] ` <34e52975-4ab9-4eb4-3501-02376e38a27c@yahoo.com>
2021-08-01 23:48 ` Finn Thain
2021-08-02 15:19 ` LEROY Christophe
2021-08-03 0:43 ` Finn Thain
[not found] ` <62d36dbb-4b39-f5bd-7962-4dcfbea729b3@linux-m68k.org>
[not found] ` <683c8156-97b0-5ba7-ce31-2e8613089836@yahoo.com>
2021-08-04 4:57 ` Finn Thain
2021-07-31 16:40 ` Christophe Leroy [this message]
2021-08-01 1:39 ` Finn Thain
2021-03-12 12:50 ` [PATCH v3 32/41] powerpc/32: Remove the xfer parameter in EXCEPTION() macro Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 33/41] powerpc/32: Refactor saving of volatile registers in exception prologs Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 34/41] powerpc/32: Save remaining registers in exception prolog Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 35/41] powerpc/32: Return directly from power_save_ppc32_restore() Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 36/41] powerpc/32: Only use prepare_transfer_to_handler function on book3s/32 and e500 Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 37/41] powerpc/32s: Move KUEP locking/unlocking in C Christophe Leroy
2021-03-27 17:24 ` Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 38/41] powerpc/64s: Make kuap_check_amr() and kuap_get_and_check_amr() generic Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 39/41] powerpc/32s: Create C version of kuap save/restore/check helpers Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 40/41] powerpc/8xx: " Christophe Leroy
2021-03-12 12:50 ` [PATCH v3 41/41] powerpc/32: Manage KUAP in C Christophe Leroy
2021-03-31 1:09 ` [PATCH v3 00/41] powerpc/32: Switch to interrupt entry/exit " Michael Ellerman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210731184059.Horde.Yln_bjDrKlAdWFSSbeXUSQ1@messagerie.c-s.fr \
--to=christophe.leroy@csgroup.eu \
--cc=benh@kernel.crashing.org \
--cc=fthain@linux-m68k.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linuxppc-dev@lists.ozlabs.org \
--cc=mpe@ellerman.id.au \
--cc=npiggin@gmail.com \
--cc=paulus@samba.org \
--cc=userm57@yahoo.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).