Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <b8311fdc-2e71-f74f-159e-db7a86f27b9a@amd.com>
Date:   Wed, 7 Jun 2023 16:48:19 +0530
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Thunderbird/91.6.1
Content-Language: en-US
To:     Linux Next Mailing List <linux-next@vger.kernel.org>,
        sfr@canb.auug.org.au
Cc:     paulmck@kernel.org, rcu@vger.kernel.org,
        Wyes Karny <wyes.karny@amd.com>, linux-kernel@vger.kernel.org
From:   "Jain, Ayush" <ayush.jain3@amd.com>
Subject: Null pointer dereference during rcutorture test on linux-next from
 next-20230602
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?VXpMR2NpQVNISlNiY0oyMGlmd3BuZjVWb2ZCUXNUZEUzeERGNUREY2VOby8z?=
 =?utf-8?B?YzVLSW1WQjF4TDJOT2xVQk01b2YrMDNjeEN5NFVkcXVCUXU0Mm9qKzk4MEJS?=
 =?utf-8?B?Z2EyaG4rUTVHSk1RazU4VjdCOURTYmwzNFNUaStNSU1sWjJmRUJqOWxzTnNM?=
 =?utf-8?B?OHNZL1NuV0Q5NGNZR2JSLzhxTmNjWEY1VVkybEN1UnhWY1NaZC9VVkxHTzFB?=
 =?utf-8?B?N2srek1aM3dkRG13VUJRb2dBVzVOMEE3VWxZaXh4QXpUUUZRU1VUWWlJWWNq?=
 =?utf-8?B?YUdaVzNESHB2VWg5U0hVa0dvcHFBUkJ3RWhOai9ZSEVYT2N5Z2pZSDBFYWZ2?=
 =?utf-8?B?aDdnb2U1RDhMM0tHTVZwbm44c05oOEhoRHg2cG9CNEdWUnFUaWd5U3F4bHZH?=
 =?utf-8?B?UzVKbmhqR2xLaXYxQzhCT1cyMW1MM1FEalIvSkhmbEVZT2ppaTlGWmlrNmVp?=
 =?utf-8?B?T2NRWjRGcURrVHQ5Mmw2SkpXL3ozdHEzeFRQdHFucGw3Y2NyTGNEVnFMUFhi?=
 =?utf-8?B?dWZJTnlMSDIyV2wxWmxDOGkxQ2ZQL1cvcmZMMWhtQS96WDZ6N3h2a3JsTFZt?=
 =?utf-8?B?Zjc3V0xkN3BhNk1WYVpEUWlDRXNpc1hrZEtOYXpmVlFqbGJ4ZkFsQVRma1hx?=
 =?utf-8?B?V1dzbmx4Nk5uSEVEUldoSnB3djBoMjI3bWtvK1EvNDRQRXA3dGlxNEwweGk5?=
 =?utf-8?B?dDJJQXo4M1MwRTlCTi9tbFBiK1RzOGFlajhZcEN4RkVPOWVFRTJTaDlxb1Q0?=
 =?utf-8?B?ODVxbElEaHh6YTFpZjk4TjFxaGcvMVJWNytsNWlwNGluZDZVa29jNEIrZU81?=
 =?utf-8?B?cnJZQ2xsc2d2NTRNOXRScE8zQkw3Nmc5S3RpVnFYakhOc0hQNUNlcGhCamNp?=
 =?utf-8?B?REV0d3lueWNUVGVXN2dIbEdwWmNqQktEMDNhWEVCdFFPakJkaEpKYms4ZWth?=
 =?utf-8?B?V3JDaXJCdlhIRHRqelYrNldoUUZKbktMSjhGZmhOZGhNSkl0enlId3dMQmhp?=
 =?utf-8?B?aWFtYWJyU3c1WHFwOTN4RVdlVzdnUHN1VjlCQlkxS2pkOGtHUE1uRmUyck96?=
 =?utf-8?B?Mkd0QjNNbXo3QVJkZTlDLzIzN0xCVGtpdmxHV0ppMUxLT1JwdjNQdmd6Y2tt?=
 =?utf-8?B?eVVNYS9EZzRSazIxNVVldXZ3dmJCUXp5RnFxZ1FFakN6MjlvZWdBdk5HL1hE?=
 =?utf-8?B?aFVveDJDYTRtSlArcmxJYk4rZkZzSFVObnlISFExdGlUQ04rYTUyeFp4amdI?=
 =?utf-8?B?ZS9qZDlEeDhiTjlSb2FFUGd2bi9sRGtGeDVyREQ4Qnp2VUl6U1lNY294dXJE?=
 =?utf-8?B?d3VkOVIvbWVVR0FSK2hRaVFRZXA1MTdpQzBmMWx1dnZ2WExkLzZZK3llTGwr?=
 =?utf-8?B?ZURMaTNSMmZpSzB6Z1BjcWVDQ1VrMVRjZ2hpbEhmQXlhc0ZJQ2lyZDVMbTFX?=
 =?utf-8?B?cnIyMmp1cHFaSXBNSWROZjhOUmtaR1hSVlRRYWJrNDFDS3VKK1VsUkRCWk5j?=
 =?utf-8?B?dFJTNVBJa251bWZFTFNBeEswaHl2OG1BL1F4MzZqTDJ3eCtId2JySXBaZmc3?=
 =?utf-8?B?VkJMT050NlFobW9Ydlo0NGlBY3dEY05qQ0l4eUpibHpaOHJvb252N2RKQUJx?=
 =?utf-8?B?eEJJK1RNUVlKNElnNlZrSEVUeU9oSFRZdktlaDJpd1JxbCtzZ3V2QzZ1ZkE4?=
 =?utf-8?B?c3FnSlBkQ2NDRUpMVmVERjczcW5IbWtxVGFJc2ovaUFPWmF6RUhXenJ1VjRW?=
 =?utf-8?B?VE5ONzl4TTlSRi9OdyszVCtkYTI1QXFFSTNBUnlQVDVLODk3U1BWS3ozMzc3?=
 =?utf-8?B?eWR0S3RQdHMxVGVaNDIyTE9hWnA4enI1N0ZYOXJUVlNQaXdYZHFLL0UveU5y?=
 =?utf-8?B?QWtMeDBGeGhnQXo2bGFScjZiRkVLMmxqL0VkK2o3MldUR1l6RkNwUWppQnAv?=
 =?utf-8?B?U2M4ZC9LM2xJbGo4NERLc3J1V2Z4eHlMSzZiSlZQb1UvQlJYQk9RWnBNSldp?=
 =?utf-8?B?SGpuQVBDbzFjZ3BjS0xCUFpuZGE1dm9zUVk0RU1aQjBpR28xTTFwWnFBTC9j?=
 =?utf-8?B?U2tHNk5XWXlJOFQyemVoNmxNL1Rsd1VlZ2VxM2xIRVNDczZ1UHdqMDlKNlg3?=
 =?utf-8?Q?NsB7jqAYgggjCIw0CgGnVZxjc?=
X-OriginatorOrg: amd.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 244babf8-d76b-4d33-5d36-08db6748ece4
X-MS-Exchange-CrossTenant-AuthSource: IA1PR12MB6137.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Jun 2023 11:18:31.3751
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: X/YNjHtzEGIIz5AIBHNDFQz/X/+rxYJH5m/LL0S3G+C2d+yGp2/NAs4waF8aNEPxT0ndDLBCAlz6F3Kbsa37Qw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR12MB7033
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FORGED_SPF_HELO,
        RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_NONE,
        T_SCC_BODY_TEXT_LINE,URIBL_BLOCKED autolearn=no autolearn_force=no
        version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Hello All,

Observed null pointer dereference during rcutorture test on linux-next tree
from next-20230602.

Commit ID: commit bc708bbd8260ee4eb3428b0109f5f3be661fae46 (HEAD, tag: next-20230602)

Here I am attaching log trace

[12133.344278] rcu-torture: rcu_torture_read_exit: Start of test
[12133.344282] rcu-torture: rcu_torture_read_exit: Start of episode
[12138.350637] rcu-torture: rcu_torture_read_exit: End of episode
[12143.419412] smpboot: CPU 1 is now offline
[12143.427996] BUG: kernel NULL pointer dereference, address: 0000000000000128
[12143.435777] #PF: supervisor read access in kernel mode
[12143.441517] #PF: error_code(0x0000) - not-present page
[12143.447256] PGD 0 P4D 0
[12143.450087] Oops: 0000 [#1] PREEMPT SMP NOPTI
[12143.454955] CPU: 68 PID: 978653 Comm: rcu_torture_rea Kdump: loaded Not tainted 6.4.0-rc5-next-20230606-1686061107994 #1
[12143.467095] Hardware name: AMD Corporation Speedway/Speedway, BIOS RSW1009C 07/27/2018
[12143.475934] RIP: 0010:__bitmap_and+0x18/0x70
[12143.480713] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 89 cb 49 89 f9 41 c1 eb 06 74 51 45 89 da 31 c0 45 31 c0 <48> 8b 3c c6 48 23 3c c2 49 89 3c c1 48 83 c0 01 49 09 f8 49 39 c2
[12143.501675] RSP: 0018:ffffa3a90db70d90 EFLAGS: 00010046
[12143.507510] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080
[12143.515468] RDX: ffff8a1ec17a1d68 RSI: 0000000000000128 RDI: ffff8a1e800429c0
[12143.523425] RBP: ffff8a1ec17a1980 R08: 0000000000000000 R09: ffff8a1e800429c0
[12143.531385] R10: 0000000000000002 R11: 0000000000000002 R12: ffff8a1e800429c0
[12143.539352] R13: 0000000000000000 R14: 0000000000032580 R15: 0000000000000000
[12143.547320] FS:  0000000000000000(0000) GS:ffff8a2dbf100000(0000) knlGS:0000000000000000
[12143.556354] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[12143.562770] CR2: 0000000000000128 CR3: 0000003089e50000 CR4: 00000000003506e0
[12143.570729] Call Trace:
[12143.573463]  <IRQ>
[12143.575714]  ? __die+0x24/0x70
[12143.579130]  ? page_fault_oops+0x82/0x150
[12143.583615]  ? exc_page_fault+0x69/0x150
[12143.588001]  ? asm_exc_page_fault+0x26/0x30
[12143.592678]  ? __bitmap_and+0x18/0x70
[12143.596768]  select_idle_cpu+0x84/0x3d0
[12143.601059]  select_idle_sibling+0x1b7/0x500
[12143.605831]  select_task_rq_fair+0x1b2/0x2e0
[12143.610603]  select_task_rq+0x7a/0xc0
[12143.614696]  try_to_wake_up+0xe8/0x550
[12143.618885]  ? update_process_times+0x83/0x90
[12143.623747]  ? __pfx_hrtimer_wakeup+0x10/0x10
[12143.628615]  hrtimer_wakeup+0x22/0x30
[12143.632706]  __hrtimer_run_queues+0x112/0x2b0
[12143.637574]  hrtimer_interrupt+0x100/0x240
[12143.642152]  __sysvec_apic_timer_interrupt+0x63/0x130
[12143.647796]  sysvec_apic_timer_interrupt+0x71/0x90
[12143.653149]  </IRQ>
[12143.655493]  <TASK>
[12143.657834]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[12143.663573] RIP: 0010:rcu_torture_read_lock+0x4/0x20 [rcutorture]
[12143.670389] Code: 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 e9 12 5a f6 d7 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <0f> 1f 44 00 00 e8 b2 12 f6 d7 31 c0 e9 7b 9c a0 d8 66 66 2e 0f 1f
[12143.691351] RSP: 0018:ffffa3a90e3ebc40 EFLAGS: 00000202
[12143.697187] RAX: ffffffffc1dff0b0 RBX: 00000000ffffffff RCX: 0000000000000008
[12143.705155] RDX: 0000000000000060 RSI: 0000000000000060 RDI: ffffa3a90e3ebccc
[12143.713124] RBP: 0000000000000060 R08: 0000000000000060 R09: 0000000000000000
[12143.721091] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000060
[12143.729057] R13: 0000000000000008 R14: 0000000000000000 R15: ffffa3a90e3ebe20
[12143.737027]  ? __pfx_rcu_torture_read_lock+0x10/0x10 [rcutorture]
[12143.743845]  rcutorture_one_extend+0xc2/0x3a0 [rcutorture]
[12143.749980]  rcu_torture_one_read+0x192/0x550 [rcutorture]
[12143.756115]  ? update_load_avg+0x7e/0x740
[12143.760593]  ? raw_spin_rq_lock_nested+0x15/0x30
[12143.765749]  ? newidle_balance+0x26e/0x400
[12143.770330]  ? __pfx_rcu_torture_reader+0x10/0x10 [rcutorture]
[12143.776854]  rcu_torture_reader+0xcd/0x280 [rcutorture]
[12143.782698]  ? __pfx_rcu_torture_timer+0x10/0x10 [rcutorture]
[12143.789124]  kthread+0xe6/0x120
[12143.792636]  ? __pfx_kthread+0x10/0x10
[12143.796823]  ret_from_fork+0x2c/0x50
[12143.800824]  </TASK>

Please let me know if any extra information is required.

Thanks & Regards
Ayush Jain