| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20180117124425.GA3474@yexl-desktop>
Date: Wed, 17 Jan 2018 20:44:25 +0800
From: kernel test robot <xiaolong.ye@...el.com>
To: David Howells <dhowells@...hat.com>
Cc: LKML <linux-kernel@...r.kernel.org>,
David Howells <dhowells@...hat.com>, lkp@...org
Subject: [lkp-robot] [hugetlbfs] c0033af7ee:
BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown()
FYI, we noticed the following commit (built with gcc-7):
commit: c0033af7eec3e728c6b70d75950e632ace4c8a55 ("hugetlbfs: Convert to fs_context")
https://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git mount-context
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -m 420M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------------------------------------------------------------------+------------+------------+
| | 5aad045543 | c0033af7ee |
+-------------------------------------------------------------------------------------------------------------+------------+------------+
| boot_successes | 0 | 1 |
| boot_failures | 51 | 29 |
| BUG:stack_guard_page_was_hit_at#(stack_is#..#) | 51 | |
| RIP:legacy_parse_monolithic | 51 | |
| Kernel_panic-not_syncing:Fatal_exception | 51 | |
| BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown() | 0 | 29 |
| INFO:Slab#objects=#used=#fp=#flags= | 0 | 29 |
| INFO:Object#@...set= | 0 | 29 |
+-------------------------------------------------------------------------------------------------------------+------------+------------+
[ 11.250915] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 11.253249] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 11.254354] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
[ 11.275114] clocksource: Switched to clocksource hpet
[ 11.334543] =============================================================================
[ 11.335993] BUG hugetlbfs_inode_cache (Not tainted): Objects remaining in hugetlbfs_inode_cache on __kmem_cache_shutdown()
[ 11.336717] -----------------------------------------------------------------------------
[ 11.336717]
[ 11.336717] Disabling lock debugging due to kernel taint
[ 11.336717] INFO: Slab 0xffff9aa5d95bcc00 objects=15 used=1 fp=0xffff9aa5d8533870 flags=0x600000008100
[ 11.336717] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G B 4.15.0-rc1-00106-gc0033af #98
[ 11.336717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 11.336717] Call Trace:
[ 11.336717] dump_stack+0x5d/0x79
[ 11.336717] slab_err+0x99/0xa7
[ 11.336717] ? balance_runtime+0x157/0x165
[ 11.336717] ? __kmem_cache_shutdown+0x7e/0x321
[ 11.336717] __kmem_cache_shutdown+0x18a/0x321
[ 11.336717] kmem_cache_destroy+0x31/0xcf
[ 11.336717] init_hugetlbfs_fs+0x7d/0x154
[ 11.336717] ? init_ramfs_fs+0x1a/0x1a
[ 11.336717] ? set_debug_rodata+0xc/0xc
[ 11.336717] do_one_initcall+0x83/0x118
[ 11.336717] ? proc_cpuinfo_init+0x1a/0x1a
[ 11.336717] ? start_kernel+0x4c4/0x4c4
[ 11.336717] ? set_debug_rodata+0xc/0xc
[ 11.336717] kernel_init_freeable+0x19a/0x218
[ 11.336717] ? rest_init+0x134/0x134
[ 11.336717] kernel_init+0x5/0xe1
[ 11.336717] ret_from_fork+0x1f/0x30
[ 11.336717] INFO: Object 0xffff9aa5d8530000 @offset=0
[ 11.371475] kmem_cache_destroy hugetlbfs_inode_cache: Slab cache still has objects
[ 11.385419] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G B 4.15.0-rc1-00106-gc0033af #98
[ 11.386577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 11.387608] Call Trace:
[ 11.388167] dump_stack+0x5d/0x79
[ 11.388739] kmem_cache_destroy+0x4a/0xcf
[ 11.388998] init_hugetlbfs_fs+0x7d/0x154
[ 11.388998] ? init_ramfs_fs+0x1a/0x1a
[ 11.388998] ? set_debug_rodata+0xc/0xc
[ 11.388998] do_one_initcall+0x83/0x118
[ 11.388998] ? proc_cpuinfo_init+0x1a/0x1a
[ 11.388998] ? start_kernel+0x4c4/0x4c4
[ 11.388998] ? set_debug_rodata+0xc/0xc
[ 11.388998] kernel_init_freeable+0x19a/0x218
[ 11.388998] ? rest_init+0x134/0x134
[ 11.388998] kernel_init+0x5/0xe1
[ 11.388998] ret_from_fork+0x1f/0x30
[ 11.414825] pnp: PnP ACPI init
[ 11.445651] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active)
[ 11.451170] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active)
[ 11.455131] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active)
[ 11.470049] pnp 00:03: [dma 2]
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
Xiaolong
View attachment "config-4.15.0-rc1-00106-gc0033af" of type "text/plain" (127050 bytes)
View attachment "job-script" of type "text/plain" (3587 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (7348 bytes)
Powered by blists - more mailing lists