ppc: linux-image-6.1.0-23-powerpc64le BUG: Kernel NULL pointer dereference on read at 0x00000000

Corentin Labbe <[email protected]>
Newsgroups gmane.linux.debian.ports.powerpc
Message-ID <Zpzy_ANEvNc5lX3Q@Red>
Hello

I have upgraded one of my bookworm PPC system from linux-image-6.1.0-21-powerpc64le to linux-image-6.1.0-23-powerpc64le
This is a 8335-GCA POWER8 machine.
With this new kernel I got the following crash:
    8.164930] Kernel attempted to read user page (0) - exploit attempt? (uid: 0)
[    8.165165] BUG: Kernel NULL pointer dereference on read at 0x00000000
[    8.165187] Faulting instruction address: 0xc0000000000c367c
[    8.165209] Oops: Kernel access of bad area, sig: 11 [#1]
[    8.165228] LE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA PowerNV
[    8.165252] Modules linked in: powernv_rng(+) syscopyarea sysfillrect sysimgblt ofpart usbhid fb_sys_fops uas powernv_flash i2c_algo_bit hid usb_storage xts mtd ecb sg ctr opal_prd at24(+) vmx_crypto ipmi_powernv gf128mul regmap_i2c ipmi_devintf ipmi_msghandler nvidia(PO) nfsd auth_rpcgss nfs_acl lockd grace sunrpc drm loop drm_panel_orientation_quirks fuse configfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic dm_mod sd_mod t10_pi xhci_pci crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_common xhci_hcd crc32c_vpmsum tg3 usbcore ahci libahci libphy usb_common
[    8.165586] CPU: 7 PID: 1396 Comm: (udev-worker) Tainted: P           O       6.1.0-23-powerpc64le #1  Debian 6.1.99-1
[    8.165618] Hardware name: 8335-GCA POWER8 (raw) 0x4d0200 opal:skiboot-5.4.8-5787ad3 PowerNV
[    8.165644] NIP:  c0000000000c367c LR: c00800000a860110 CTR: c0000000000c3650
[    8.165668] REGS: c0000000440272e0 TRAP: 0300   Tainted: P           O        (6.1.0-23-powerpc64le Debian 6.1.99-1)
[    8.165699] MSR:  900000000280b033 <SF,HV,VEC,VSX,EE,FP,ME,IR,DR,RI,LE>  CR: 44222882  XER: 00000000
[    8.165754] CFAR: c00800000a860244 DAR: 0000000000000000 DSISR: 40000000 IRQMASK: 0 
               GPR00: c00800000a860110 c000000044027580 c00000000113cd00 c000000014dece00 
               GPR04: c000000014dece00 0000000000000020 0000000000000000 c000000042e80000 
               GPR08: 0000000000000000 c000000002121ff8 0000000000000000 c00800000a860230 
               GPR12: c0000000000c3650 c000000fffffa200 0000000000000020 0000000022000000 
               GPR16: 0000000000000000 0000000000000000 0000000000000009 0000000137f4f618 
               GPR20: 0000000000000000 0000010022a52a00 0000000000000000 0000000000000005 
               GPR24: 0000010022afd250 0000010022a52a00 c00000000285e6fc c000000000f9e060 
               GPR28: 0000000000000003 0000000000000004 0000000000000003 c000000014dece08 
[    8.166142] NIP [c0000000000c367c] pnv_get_random_long+0x2c/0xd0
[    8.166173] LR [c00800000a860110] powernv_rng_read+0x78/0xc4 [powernv_rng]
[    8.166206] Call Trace:
[    8.166217] [c000000044027580] [c0000000440275c0] 0xc0000000440275c0 (unreliable)
[    8.166247] [c0000000440275c0] [c000000000919ad8] add_early_randomness+0x88/0x150
[    8.166420] [c000000044027600] [c00000000091a114] hwrng_register+0x344/0x420
[    8.166451] [c000000044027660] [c00000000091a258] devm_hwrng_register+0x68/0xf0
[    8.166484] [c0000000440276a0] [c00800000a86003c] powernv_rng_probe+0x34/0x90 [powernv_rng]
[    8.166519] [c000000044027710] [c000000000948078] platform_probe+0x78/0x110
[    8.166545] [c000000044027790] [c000000000943138] really_probe+0x108/0x590
[    8.166573] [c000000044027820] [c000000000943674] __driver_probe_device+0xb4/0x230
[    8.166602] [c0000000440278a0] [c000000000943844] driver_probe_device+0x54/0x130
[    8.166631] [c0000000440278e0] [c000000000944538] __driver_attach+0x158/0x2b0
[    8.168198] [c000000044027960] [c00000000093f5c4] bus_for_each_dev+0xb4/0x140
[    8.168216] [c0000000440279c0] [c000000000942594] driver_attach+0x34/0x50
[    8.168231] [c0000000440279e0] [c000000000941be8] bus_add_driver+0x218/0x300
[    8.168248] [c000000044027a70] [c0000000009459e4] driver_register+0xb4/0x1c0
[    8.168266] [c000000044027ae0] [c0000000009479f8] __platform_driver_register+0x38/0x50
[    8.168284] [c000000044027b00] [c00800000a86018c] powernv_rng_driver_init+0x30/0x4c [powernv_rng]
[    8.168303] [c000000044027b20] [c0000000000121b0] do_one_initcall+0x80/0x320
[    8.168321] [c000000044027c00] [c000000000218dac] do_init_module+0x6c/0x290
[    8.168336] [c000000044027c80] [c00000000021c608] __do_sys_finit_module+0xd8/0x190
[    8.168353] [c000000044027db0] [c00000000002b028] system_call_exception+0x138/0x260
[    8.168371] [c000000044027e10] [c00000000000c654] system_call_common+0xf4/0x258
[    8.168390] --- interrupt: c00 at 0x7fff9040a964
[    8.168401] NIP:  00007fff9040a964 LR: 00007fff90680500 CTR: 0000000000000000
[    8.168545] REGS: c000000044027e80 TRAP: 0c00   Tainted: P           O        (6.1.0-23-powerpc64le Debian 6.1.99-1)
[    8.168564] MSR:  900000000280f033 <SF,HV,VEC,VSX,EE,PR,FP,ME,IR,DR,RI,LE>  CR: 24222248  XER: 00000000
[    8.168591] IRQMASK: 0 
               GPR00: 0000000000000161 00007ffff966e760 00007fff90516f00 0000000000000006 
               GPR04: 00007fff9068be88 0000000000000000 0000000000000006 0000000000000000 
               GPR08: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 
               GPR12: 0000000000000000 00007fff9076e220 0000000000000020 0000000022000000 
               GPR16: 0000000000000000 0000000000000000 0000000000000009 0000000137f4f618 
               GPR20: 0000000000000000 0000010022a52a00 0000000000000000 0000000000000005 
               GPR24: 0000010022afd250 0000010022a52a00 0000000022000000 0000010022b14b20 
               GPR28: 00007fff9068be88 0000000000020000 0000000000000000 0000010022a52a00 
[    8.169729] NIP [00007fff9040a964] 0x7fff9040a964
[    8.169740] LR [00007fff90680500] 0x7fff90680500
[    8.169751] --- interrupt: c00
[    8.169760] Instruction dump:
[    8.169769] 60420000 3c4c0108 384296b0 7c0802a6 60000000 7d2000a6 71290010 41820078 
[    8.169791] e94d0030 3d2200fe 392952f8 7d4a482a <e92a0000> 7c0004ac e9090000 0c080000 
[    8.169813] ---[ end trace 0000000000000000 ]---

Regards
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.