lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20170913072300.GA22742@yexl-desktop>
Date:   Wed, 13 Sep 2017 15:23:00 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     David Howells <dhowells@...hat.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        David Howells <dhowells@...hat.com>, lkp@...org
Subject: [lkp-robot] [hugetlbfs]  a2c595105f:
 BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown()


FYI, we noticed the following commit:

commit: a2c595105f94f0db0b19f5ce47de7afb1abecae6 ("hugetlbfs: Convert to fs_context")
https://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git mount-context

in testcase: trinity
with following parameters:

	runtime: 300s

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/


on test machine: qemu-system-x86_64 -enable-kvm -smp 2 -m 512M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------------------------------------------+------------+------------+
|                                                                                                             | 89e689f267 | a2c595105f |
+-------------------------------------------------------------------------------------------------------------+------------+------------+
| boot_successes                                                                                              | 0          | 0          |
| boot_failures                                                                                               | 23         | 14         |
| BUG:stack_guard_page_was_hit_at#(stack_is#..#)                                                              | 23         |            |
| Kernel_panic-not_syncing:Fatal_exception                                                                    | 23         |            |
| BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown() | 0          | 14         |
| INFO:Slab#objects=#used=#fp=#flags=                                                                         | 0          | 14         |
| INFO:Object#@...set=                                                                                        | 0          | 14         |
+-------------------------------------------------------------------------------------------------------------+------------+------------+



[    0.236004] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
[    0.241031] clocksource: Switched to clocksource kvm-clock
[    0.270032] VFS: Disk quotas dquot_6.6.0
[    0.271542] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    0.273625] =============================================================================
[    0.274561] BUG hugetlbfs_inode_cache (Not tainted): Objects remaining in hugetlbfs_inode_cache on __kmem_cache_shutdown()
[    0.274561] -----------------------------------------------------------------------------
[    0.274561] 
[    0.274561] Disabling lock debugging due to kernel taint
[    0.274561] INFO: Slab 0xffffea0000415480 objects=13 used=1 fp=0xffff880010553ce0 flags=0xfffffc0008100
[    0.274561] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G    B           4.13.0-rc1-00021-ga2c5951 #1
[    0.274561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[    0.274561] Call Trace:
[    0.274561]  dump_stack+0x63/0x86
[    0.274561]  slab_err+0x9e/0xb0
[    0.274561]  ? free_cpumask_var+0x9/0x10
[    0.274561]  ? on_each_cpu_cond+0xc4/0x170
[    0.274561]  ? __kmalloc+0x1cd/0x200
[    0.274561]  __kmem_cache_shutdown+0x1b7/0x3d0
[    0.274561]  shutdown_cache+0x20/0x1c0
[    0.274561]  kmem_cache_destroy+0x1ce/0x200
[    0.274561]  init_hugetlbfs_fs+0x92/0x163
[    0.274561]  ? init_ramfs_fs+0x25/0x25
[    0.274561]  ? set_debug_rodata+0x17/0x17
[    0.274561]  do_one_initcall+0x43/0x170
[    0.274561]  ? set_debug_rodata+0x17/0x17
[    0.274561]  kernel_init_freeable+0x198/0x220
[    0.274561]  ? rest_init+0xe0/0xe0
[    0.274561]  kernel_init+0xe/0x101
[    0.274561]  ret_from_fork+0x25/0x30
[    0.274561] INFO: Object 0xffff880010552000 @offset=0
[    0.320432] kmem_cache_destroy hugetlbfs_inode_cache: Slab cache still has objects
[    0.323278] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G    B           4.13.0-rc1-00021-ga2c5951 #1
[    0.324269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.9.3-20161025_171302-gandalf 04/01/2014
[    0.324269] Call Trace:
[    0.324269]  dump_stack+0x63/0x86
[    0.324269]  kmem_cache_destroy+0x1ec/0x200
[    0.324269]  init_hugetlbfs_fs+0x92/0x163
[    0.324269]  ? init_ramfs_fs+0x25/0x25
[    0.324269]  ? set_debug_rodata+0x17/0x17
[    0.324269]  do_one_initcall+0x43/0x170
[    0.324269]  ? set_debug_rodata+0x17/0x17
[    0.324269]  kernel_init_freeable+0x198/0x220
[    0.324269]  ? rest_init+0xe0/0xe0
[    0.324269]  kernel_init+0xe/0x101
[    0.324269]  ret_from_fork+0x25/0x30
[    0.346020] pnp: PnP ACPI init
[    0.347410] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active)
[    0.349348] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active)
[    0.351372] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active)
[    0.353293] pnp 00:03: [dma 2]


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.13.0-rc1-00021-ga2c5951" of type "text/plain" (160954 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (10928 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ