lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Sat, 27 Jun 2015 05:47:13 +0800
From:	kernel test robot <fengguang.wu@...el.com>
To:	Geert Uytterhoeven <geert+renesas@...der.be>
Cc:	LKP <lkp@...org>, linux-kernel@...r.kernel.org,
	dmaengine@...r.kernel.org, Ulf Hansson <ulf.hansson@...aro.org>,
	Vinod Koul <vinod.koul@...el.com>, fengguang.wu@...el.com
Subject: [dmaengine: shdma]  RIP: 0010:[<ffffffff8124ad42>]
  [<ffffffff8124ad42>] __asan_load8

Greetings,

0day kernel testing robot got the below dmesg and the first bad commit is

git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

commit b6d1778bc5485c55c6f5194b8b2ea84c0ce5adad
Author:     Geert Uytterhoeven <geert+renesas@...der.be>
AuthorDate: Thu Feb 26 11:26:34 2015 +0100
Commit:     Vinod Koul <vinod.koul@...el.com>
CommitDate: Mon Mar 2 22:10:44 2015 +0530

    dmaengine: shdma: Move DMA stop to (runtime) suspend callbacks
    
    During system reboot, the sh-dma-engine device may be runtime-suspended,
    causing a crash:
    
        Unhandled fault: imprecise external abort (0x1406) at 0x0002c02c
        Internal error: : 1406 [#1] SMP ARM
        ...
        PC is at sh_dmae_ctl_stop+0x28/0x64
        LR is at sh_dmae_ctl_stop+0x24/0x64
    
    If the sh-dma-engine is runtime-suspended, its module clock is turned
    off, and its registers cannot be accessed.
    
    To fix this, move the call to sh_dmae_ctl_stop(), which touches the
    DMAOR register, to the sh_dmae_suspend() and sh_dmae_runtime_suspend()
    callbacks.  This makes PM operations more symmetric, as both
    sh_dmae_resume() and sh_dmae_runtime_resume() already call sh_dmae_rst()
    to re-initialize the DMAOR register.
    
    Remove sh_dmae_shutdown(), as it became empty.
    
    Signed-off-by: Geert Uytterhoeven <geert+renesas@...der.be>
    Reviewed-by: Ulf Hansson <ulf.hansson@...aro.org>
    Signed-off-by: Vinod Koul <vinod.koul@...el.com>

+------------------------------------------------+------------+------------+-------------+
|                                                | 3a314f143d | b6d1778bc5 | v4.1_062420 |
+------------------------------------------------+------------+------------+-------------+
| boot_successes                                 | 910        | 257        | 109         |
| boot_failures                                  | 0          | 53         | 14          |
| RIP:__asan_load4                               | 0          | 11         | 2           |
| Kernel_panic-not_syncing:softlockup:hung_tasks | 0          | 53         | 14          |
| backtrace:insert_augmented                     | 0          | 24         | 1           |
| backtrace:rbtree_test_init                     | 0          | 53         | 14          |
| backtrace:kernel_init_freeable                 | 0          | 53         | 14          |
| RIP:__asan_store4                              | 0          | 6          | 1           |
| RIP:__asan_store8                              | 0          | 7          | 1           |
| RIP:__asan_load8                               | 0          | 20         | 7           |
| backtrace:rb_erase                             | 0          | 2          | 1           |
| backtrace:insert                               | 0          | 4          | 5           |
| backtrace:erase_augmented                      | 0          | 13         | 3           |
| RIP:rb_erase                                   | 0          | 1          |             |
| backtrace:apic_timer_interrupt                 | 0          | 10         | 4           |
| RIP:insert_augmented                           | 0          | 2          | 1           |
| RIP:augment_callbacks_propagate                | 0          | 1          |             |
| RIP:__rb_insert_augmented                      | 0          | 2          |             |
| RIP:augment_callbacks_rotate                   | 0          | 2          |             |
| RIP:erase_augmented                            | 0          | 1          |             |
| RIP:insert                                     | 0          | 0          | 1           |
| RIP:rb_insert_color                            | 0          | 0          | 1           |
+------------------------------------------------+------------+------------+-------------+

[   33.459464] rbtree testing
[   60.153413] NMI watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [swapper:1]
[   60.156705] CPU: 0 PID: 1 Comm: swapper Not tainted 4.0.0-rc1-00002-gb6d1778 #1
[   60.156705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.7.5-20140531_083030-gandalf 04/01/2014
[   60.156705] task: ffff880000050000 ti: ffff880000058000 task.ti: ffff880000058000
[   60.156705] RIP: 0010:[<ffffffff8124ad42>]  [<ffffffff8124ad42>] __asan_load8+0x22/0x140
[   60.156705] RSP: 0000:ffff88000005fd78  EFLAGS: 00000206
[   60.156705] RAX: ffff7fffffffffff RBX: dffffc0000000000 RCX: dffffc0000000000
[   60.156705] RDX: 000000003a16a0ad RSI: 0000000000000008 RDI: ffffffff835259f8
[   60.156705] RBP: ffff88000005fda8 R08: fffffbfff06a4ba4 R09: ffffffff83525d27
[   60.156705] R10: 0000000000786df2 R11: 0000000000786d49 R12: fffffbfff06a4a22
[   60.156705] R13: ffffffff83525117 R14: 0000000001e5366b R15: 0000000001e527ac
[   60.156705] FS:  0000000000000000(0000) GS:ffffffff8225b000(0000) knlGS:0000000000000000
[   60.156705] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[   60.156705] CR2: 0000000000000000 CR3: 0000000002237000 CR4: 00000000000006b0
[   60.156705] Stack:
[   60.156705]  ffff88000005fdd8 ffffffff813f34e3 ffffffff835259f8 ffffffff83525d18
[   60.156705]  ffffffff83525cc8 ffffffff83525d18 ffff88000005fe18 ffffffff813f4225
[   60.156705]  ffffffff83525e40 ffffffff83525ea0 ffffffff83525cc8 0000000000804f8b
[   60.156705] Call Trace:
[   60.156705]  [<ffffffff813f34e3>] ? rb_insert_color+0x53/0x600
[   60.156705]  [<ffffffff813f4225>] rb_erase+0x795/0xbe0
[   60.156705]  [<ffffffff8283f234>] ? err_inject_init+0x3f/0x3f
[   60.156705]  [<ffffffff8283f2f6>] rbtree_test_init+0xc2/0x32c
[   60.156705]  [<ffffffff828089ff>] do_one_initcall+0x19d/0x2a0
[   60.156705]  [<ffffffff82808eb6>] kernel_init_freeable+0x3b4/0x4bd
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705]  [<ffffffff81d1dbf6>] kernel_init+0x16/0x1b0
[   60.156705]  [<ffffffff8111b1ac>] ? schedule_tail+0x4c/0xc0
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705]  [<ffffffff81d3a63a>] ret_from_fork+0x7a/0xb0
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705] Code: 07 38 ca 7e c2 eb 98 66 90 55 48 b8 ff ff ff ff ff 7f ff ff 48 89 e5 48 83 ec 30 48 83 05 46 73 24 02 01 48 83 05 9e 6d 24 02 01 <48> 39 c7 76 49 48 8b 15 8a 6d 24 02 48 b9 00 00 00 00 00 fc ff 
[   60.156705] Kernel panic - not syncing: softlockup: hung tasks
[   60.156705] CPU: 0 PID: 1 Comm: swapper Tainted: G             L  4.0.0-rc1-00002-gb6d1778 #1
[   60.156705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.7.5-20140531_083030-gandalf 04/01/2014
[   60.156705]  00000000ee6b2800 ffffffff82262e28 ffffffff81d23f40 ffffffff82262ea8
[   60.156705]  ffffffff81d21bc4 0000000000000003 dffffc0000000008 ffffffff82262eb8
[   60.156705]  ffffffff82262e58 ffffffff82262ea8 0000000000000000 0000000000000000
[   60.156705] Call Trace:
[   60.156705]  <IRQ>  [<ffffffff81d23f40>] dump_stack+0x2e/0x3e
[   60.156705]  [<ffffffff81d21bc4>] panic+0x128/0x2db
[   60.156705]  [<ffffffff811a59d6>] watchdog_timer_fn+0x2a6/0x2b0
[   60.156705]  [<ffffffff811a5730>] ? watchdog+0x40/0x40
[   60.156705]  [<ffffffff8115b6b4>] __run_hrtimer+0x84/0x1a0
[   60.156705]  [<ffffffff8115c4b7>] hrtimer_interrupt+0x137/0x330
[   60.156705]  [<ffffffff81047c39>] local_apic_timer_interrupt+0x29/0x70
[   60.156705]  [<ffffffff81048290>] smp_apic_timer_interrupt+0x80/0xb0
[   60.156705]  [<ffffffff81d3b45b>] apic_timer_interrupt+0x6b/0x70
[   60.156705]  <EOI>  [<ffffffff8124ad42>] ? __asan_load8+0x22/0x140
[   60.156705]  [<ffffffff813f34e3>] ? rb_insert_color+0x53/0x600
[   60.156705]  [<ffffffff813f4225>] rb_erase+0x795/0xbe0
[   60.156705]  [<ffffffff8283f234>] ? err_inject_init+0x3f/0x3f
[   60.156705]  [<ffffffff8283f2f6>] rbtree_test_init+0xc2/0x32c
[   60.156705]  [<ffffffff828089ff>] do_one_initcall+0x19d/0x2a0
[   60.156705]  [<ffffffff82808eb6>] kernel_init_freeable+0x3b4/0x4bd
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705]  [<ffffffff81d1dbf6>] kernel_init+0x16/0x1b0
[   60.156705]  [<ffffffff8111b1ac>] ? schedule_tail+0x4c/0xc0
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705]  [<ffffffff81d3a63a>] ret_from_fork+0x7a/0xb0
[   60.156705]  [<ffffffff81d1dbe0>] ? rest_init+0x140/0x140
[   60.156705] Kernel Offset: disabled

Elapsed time: 80

git bisect start v4.0 v2.6.39 --
git bisect good 5abcd76f5d896de014bd8d1486107c483659d40d  # 22:45    310+    930  Merge branch 'x86-boot-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect good 6a4d07f85ba9da5b6eab6e60a493d459c4296176  # 22:50    309+    663  Merge branch 'for-3.14-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
git bisect good 9f47112975fdc32e545e079f42a17bbd0be236fc  # 22:50    310+      0  Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus
git bisect good d9b9692af590a4174b9d3cb4ab20e006cc471d31  # 23:50    310+      1  Merge tag 'spi-v3.18-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi
git bisect good 298e320431db1db52b9ddd6f242bb33a4ea2d094  # 00:13    305+      0  Merge branch 'fixes' of git://git.infradead.org/users/vkoul/slave-dma
git bisect good 3d883483dc0a7261d73d8b1857a7387a1dd99eee  # 00:22    310+      0  Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/evalenti/linux-soc-thermal
git bisect  bad 1ee89c519a0aca101d2e173c5544a52877d763ec  # 01:15      1-      2  Merge tag 'clk-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux
git bisect good 97754e3c5ae814a308c5ddfb08f8d2dc3dcb1b47  # 01:28    308+      0  Merge tag 'powerpc-4.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mpe/linux
git bisect  bad d08edd8f09a0bc7f28c9559d134ffc37ff264962  # 01:43      0-      1  Merge tag 'spi-v4.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi
git bisect good 9aae0df6a3cb6fbbfe30b1649644a862632fbfdd  # 02:50    303+      0  Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux
git bisect  bad 1163d504ae69b5e83ab16900f6a96e30bd78bda5  # 03:08     54-     24  Merge tag 'usb-4.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
git bisect  bad b0bc65729070b9cbdbb53ff042984a3c545a0e34  # 03:20      7-     10  Merge tag 'cc-4.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
git bisect  bad 374dab2366c64666612b8f6275f8c373a373b8d0  # 03:30      0-      2  Merge branch 'fixes' of git://git.infradead.org/users/vkoul/slave-dma
git bisect  bad 6eb9d3c1e9c5977f7fe6be125006443e7da2427c  # 03:37      0-      2  dmaengine: at_xdmac: fix for chan conf simplification
git bisect  bad b6d1778bc5485c55c6f5194b8b2ea84c0ce5adad  # 03:48      4-      7  dmaengine: shdma: Move DMA stop to (runtime) suspend callbacks
git bisect good 3a314f143d82603bd697d7eb6c76518afc3595bc  # 04:11    310+      0  dmaenegine: mmp-pdma: fix irq handler overwrite physical chan issue
# first bad commit: [b6d1778bc5485c55c6f5194b8b2ea84c0ce5adad] dmaengine: shdma: Move DMA stop to (runtime) suspend callbacks
git bisect good 3a314f143d82603bd697d7eb6c76518afc3595bc  # 04:22    910+      0  dmaenegine: mmp-pdma: fix irq handler overwrite physical chan issue
# extra tests with DEBUG_INFO
git bisect  bad b6d1778bc5485c55c6f5194b8b2ea84c0ce5adad  # 04:33     90-      1  dmaengine: shdma: Move DMA stop to (runtime) suspend callbacks
# extra tests on HEAD of linux-devel/devel-hourly-2015062420
git bisect  bad af42cc265718e8a1153b620d762f5d7484f70bcd  # 04:33      0-     14  0day head guard for 'devel-hourly-2015062420'
# extra tests on tree/branch linus/master
git bisect  bad 22165fa79814e71e7a5974b3c37a5028ed16c8f9  # 04:46     81-      7  Merge tag 'dm-4.2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm
# extra tests with first bad commit reverted
git bisect  bad 069de26028038928617476306457a2473b519ede  # 05:10    434-     10  Revert "dmaengine: shdma: Move DMA stop to (runtime) suspend callbacks"
# extra tests on tree/branch linus/master
git bisect  bad 099bfbfc7fbbe22356c02f0caf709ac32e1126ea  # 05:40    100-     13  Merge branch 'drm-next' of git://people.freedesktop.org/~airlied/linux
# extra tests on tree/branch next/master
git bisect  bad 043831b4a4e9a981c4ec6331b6d64b9f62285d5d  # 05:46      3-      4  Add linux-next specific files for 20150626


This script may reproduce the error.

----------------------------------------------------------------------------
#!/bin/bash

kernel=$1
initrd=quantal-core-x86_64.cgz

wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd

kvm=(
	qemu-system-x86_64
	-enable-kvm
	-cpu kvm64
	-kernel $kernel
	-initrd $initrd
	-m 300
	-smp 2
	-device e1000,netdev=net0
	-netdev user,id=net0
	-boot order=nc
	-no-reboot
	-watchdog i6300esb
	-rtc base=localtime
	-serial stdio
	-display none
	-monitor null 
)

append=(
	hung_task_panic=1
	earlyprintk=ttyS0,115200
	systemd.log_level=err
	debug
	apic=debug
	sysrq_always_enabled
	rcupdate.rcu_cpu_stall_timeout=100
	panic=-1
	softlockup_panic=1
	nmi_watchdog=panic
	oops=panic
	load_ramdisk=2
	prompt_ramdisk=0
	console=ttyS0,115200
	console=tty0
	vga=normal
	root=/dev/ram0
	rw
	drbd.minor_count=8
)

"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------

---
0-DAY kernel test infrastructure                Open Source Technology Center
https://lists.01.org/pipermail/lkp                          Intel Corporation

View attachment "dmesg-quantal-intel12-19:20150627035321:x86_64-randconfig-s0-06242345:4.0.0-rc1-00002-gb6d1778:1" of type "text/plain" (35247 bytes)

View attachment "config-4.0.0-rc1-00002-gb6d1778" of type "text/plain" (61446 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ