linux-kernel - [lkp-robot] [EXP] dab0b22dfc: kernel_BUG_at

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Thu, 7 Dec 2017 09:33:02 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>, lkp@...org
Subject: [lkp-robot] [EXP]  dab0b22dfc: kernel_BUG_at_kernel/time/timer.c


FYI, we noticed the following commit (built with gcc-7):

commit: dab0b22dfc3bd3ed37876b2465dc622a39ae25e0 ("EXP: timer: Repeat timers_dead_cpu() in sched_cpu_deactivate()")
https://git.kernel.org/cgit/linux/kernel/git/paulmck/linux-rcu.git dev.2017.12.05a

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-i386 -enable-kvm -smp 2 -m 320M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------+------------+------------+
|                                                       | aa2b802cb4 | dab0b22dfc |
+-------------------------------------------------------+------------+------------+
| boot_successes                                        | 1          | 1          |
| boot_failures                                         | 15         | 22         |
| WARNING:possible_circular_locking_dependency_detected | 15         | 22         |
| calltrace:wait_for_completion                         | 15         | 22         |
| kernel_BUG_at_kernel/time/timer.c                     | 0          | 14         |
| invalid_opcode:#[##]                                  | 0          | 14         |
| EIP:timers_dead_cpu                                   | 0          | 14         |
| Kernel_panic-not_syncing:Fatal_exception              | 0          | 14         |
+-------------------------------------------------------+------------+------------+



[   34.225019] kernel BUG at kernel/time/timer.c:1908!
[   34.225711] invalid opcode: 0000 [#1] SMP
[   34.226160] CPU: 0 PID: 12 Comm: cpuhp/0 Not tainted 4.15.0-rc1-00090-gdab0b22 #142
[   34.226996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   34.227862] task: 7817e340 task.stack: 78180000
[   34.228347] EIP: timers_dead_cpu+0x17/0xd6
[   34.228776] EFLAGS: 00210213 CPU: 0
[   34.229157] EAX: 00000000 EBX: 00000000 ECX: 000000c1 EDX: 79e28390
[   34.229829] ESI: 79d10034 EDI: 8b6edcd8 EBP: 78181de0 ESP: 78181dc8
[   34.230504]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[   34.231090] CR0: 80050033 CR2: 00000000 CR3: 0206f000 CR4: 00000690
[   34.231763] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[   34.232589] DR6: fffe0ff0 DR7: 00000400
[   34.233030] Call Trace:
[   34.233320]  ? lock_acquire+0x15c/0x167
[   34.233725]  ? sched_cpu_deactivate+0x22/0x9b
[   34.234227]  ? lock_release+0x2ba/0x2c2
[   34.234631]  ? rcu_read_unlock+0x39/0x56
[   34.235092]  ? kvm_sched_clock_read+0x9/0x18
[   34.235602]  ? update_load_avg+0x251/0x4e6
[   34.236113]  ? lock_release+0x2ba/0x2c2
[   34.236395]  ? time_hardirqs_on+0xe/0x1e
[   34.236688]  ? trace_hardirqs_on_caller+0x11/0x16f
[   34.237034]  ? trace_cpuhp_enter+0xae/0xee
[   34.237324]  ? sched_cpu_activate+0x98/0x98
[   34.237610]  ? sched_cpu_activate+0x98/0x98
[   34.237896]  ? cpuhp_invoke_callback+0xad/0x211
[   34.238240]  ? sched_cpu_activate+0x98/0x98
[   34.238541]  ? cpuhp_thread_fun+0xee/0x12d
[   34.238822]  ? smpboot_thread_fn+0x173/0x187
[   34.239137]  ? kthread+0x10e/0x113
[   34.239373]  ? sort_range+0x1d/0x1d
[   34.239605]  ? queuing_blocked+0x39/0x39
[   34.239864]  ? ret_from_fork+0x19/0x24
[   34.240143] Code: 00 b8 60 ba d1 79 89 1d 4c a8 88 7a e8 b9 1e 73 00 5b 5d c3 3e 8d 74 26 00 55 89 e5 57 56 53 83 ec 0c 0f a3 05 98 83 e2 79 73 02 <0f> 0b be 80 02 06 7a 89 f3 64 ff 05 98 ba f1 79 03 1c 85 40 62
[   34.241453] EIP: timers_dead_cpu+0x17/0xd6 SS:ESP: 0068:78181dc8
[   34.241881] ---[ end trace d38d8e39783e4f7c ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.15.0-rc1-00090-gdab0b22" of type "text/plain" (115439 bytes)

View attachment "job-script" of type "text/plain" (3748 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (15472 bytes)