lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Fri, 9 Mar 2018 14:41:09 +0800
From:   kernel test robot <shun.hao@...el.com>
To:     David Howells <dhowells@...hat.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        David Howells <dhowells@...hat.com>, lkp@...org
Subject: [lkp-robot] [hugetlbfs]  49977c3afc:
 BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown()

FYI, we noticed the following commit (built with gcc-6):

commit: 49977c3afcdd2d94237d4bf6866d3515c60762be ("hugetlbfs: Convert to fs_context")
https://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git mount-context

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -m 420M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------------------------------------------+------------+------------+
|                                                                                                             | 6393e11b84 | 49977c3afc |
+-------------------------------------------------------------------------------------------------------------+------------+------------+
| boot_successes                                                                                              | 20         | 0          |
| boot_failures                                                                                               | 0          | 23         |
| BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown() | 0          | 23         |
| INFO:Slab#objects=#used=#fp=#flags=                                                                         | 0          | 23         |
| INFO:Object#@...set=                                                                                        | 0          | 23         |
+-------------------------------------------------------------------------------------------------------------+------------+------------+



[    0.361013] PCI: pci_cache_line_size set to 64 bytes
[    0.362124] e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff]
[    0.363022] e820: reserve RAM buffer [mem 0x1a3e0000-0x1bffffff]
[    0.366370] clocksource: Switched to clocksource kvm-clock
[    0.368700] =============================================================================
[    0.369017] BUG hugetlbfs_inode_cache (Not tainted): Objects remaining in hugetlbfs_inode_cache on __kmem_cache_shutdown()
[    0.369017] -----------------------------------------------------------------------------
[    0.369017] 
[    0.369017] Disabling lock debugging due to kernel taint
[    0.369017] INFO: Slab 0x930ca6ea objects=15 used=1 fp=0xc0e31dfe flags=0x19008100
[    0.369017] CPU: 0 PID: 1 Comm: swapper Tainted: G    B            4.16.0-rc4-00171-g49977c3 #1
[    0.369017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    0.369017] Call Trace:
[    0.369017]  dump_stack+0x40/0x5e
[    0.369017]  slab_err+0x70/0x86
[    0.369017]  ? print_page_info+0x14/0x44
[    0.369017]  ? __kmalloc+0x156/0x1cf
[    0.369017]  ? kzalloc+0x19/0x29
[    0.369017]  __kmem_cache_shutdown+0x277/0x483
[    0.369017]  kmem_cache_destroy+0x72/0x250
[    0.369017]  init_hugetlbfs_fs+0xbf/0x26c
[    0.369017]  ? init_ramfs_fs+0x59/0x59
[    0.369017]  do_one_initcall+0x10c/0x25a
[    0.369017]  ? parse_args+0x1ab/0x56a
[    0.369017]  ? kernel_init_freeable+0x23b/0x3c8
[    0.369017]  kernel_init_freeable+0x26c/0x3c8
[    0.369017]  ? rest_init+0x186/0x186
[    0.369017]  kernel_init+0x16/0x248
[    0.369017]  ret_from_fork+0x19/0x24
[    0.369017] INFO: Object 0xf7f2f941 @offset=0
[    0.388495] kmem_cache_destroy hugetlbfs_inode_cache: Slab cache still has objects
[    0.389635] CPU: 0 PID: 1 Comm: swapper Tainted: G    B            4.16.0-rc4-00171-g49977c3 #1
[    0.390900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[    0.392163] Call Trace:
[    0.392627]  dump_stack+0x40/0x5e
[    0.393198]  kmem_cache_destroy+0x220/0x250
[    0.393862]  init_hugetlbfs_fs+0xbf/0x26c
[    0.394518]  ? init_ramfs_fs+0x59/0x59
[    0.395140]  do_one_initcall+0x10c/0x25a
[    0.395783]  ? parse_args+0x1ab/0x56a
[    0.396412]  ? kernel_init_freeable+0x23b/0x3c8
[    0.397108]  kernel_init_freeable+0x26c/0x3c8
[    0.397773]  ? rest_init+0x186/0x186
[    0.398372]  kernel_init+0x16/0x248
[    0.398959]  ret_from_fork+0x19/0x24
[    0.399643] pnp: PnP ACPI init
[    0.400351] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active)
[    0.401464] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active)
[    0.402540] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active)
[    0.403509] pnp 00:03: [dma 2]


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Shun

View attachment "config-4.16.0-rc4-00171-g49977c3" of type "text/plain" (99687 bytes)

View attachment "job-script" of type "text/plain" (3680 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (10008 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ