linux-kernel - [lkp-robot] [hugetlbfs] e979e5a059: BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Tue, 10 Apr 2018 10:55:44 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     David Howells <dhowells@...hat.com>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        David Howells <dhowells@...hat.com>, lkp@...org
Subject: [lkp-robot] [hugetlbfs]  e979e5a059:
 BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown()


FYI, we noticed the following commit (built with gcc-7):

commit: e979e5a0591e70ad0b41cf876ee987de468a220e ("hugetlbfs: Convert to fs_context")
https://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git mount-context

in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -smp 2 -m 512M

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------------------------------------------+------------+------------+
|                                                                                                             | 838d9ecc64 | e979e5a059 |
+-------------------------------------------------------------------------------------------------------------+------------+------------+
| boot_successes                                                                                              | 0          | 0          |
| boot_failures                                                                                               | 54         | 17         |
| BUG:stack_guard_page_was_hit_at#(stack_is#..#)                                                              | 54         |            |
| RIP:legacy_parse_monolithic                                                                                 | 54         |            |
| Kernel_panic-not_syncing:Fatal_exception                                                                    | 54         |            |
| BUG_hugetlbfs_inode_cache(Not_tainted):Objects_remaining_in_hugetlbfs_inode_cache_on__kmem_cache_shutdown() | 0          | 17         |
| INFO:Slab#objects=#used=#fp=#flags=                                                                         | 0          | 17         |
| INFO:Object#@...set=                                                                                        | 0          | 17         |
+-------------------------------------------------------------------------------------------------------------+------------+------------+



[    0.160565] PCI: pci_cache_line_size set to 64 bytes
[    0.161260] e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff]
[    0.161969] e820: reserve RAM buffer [mem 0x1ffe0000-0x1fffffff]
[    0.163220] clocksource: Switched to clocksource kvm-clock
[    0.175560] =============================================================================
[    0.176568] BUG hugetlbfs_inode_cache (Not tainted): Objects remaining in hugetlbfs_inode_cache on __kmem_cache_shutdown()
[    0.176640] -----------------------------------------------------------------------------
[    0.176640] 
[    0.176640] Disabling lock debugging due to kernel taint
[    0.176640] INFO: Slab 0x000000006376557a objects=17 used=1 fp=0x00000000154e780a flags=0x4000000000008100
[    0.176640] CPU: 0 PID: 1 Comm: swapper Tainted: G    B            4.16.0-10623-ge979e5a #1
[    0.176640] Call Trace:
[    0.176640]  slab_err+0xad/0xcf
[    0.176640]  ? __kmem_cache_shutdown+0x93/0x301
[    0.176640]  ? __need_fs_reclaim+0x5/0x4e
[    0.176640]  ? prefetch_freepointer+0x5/0x14
[    0.176640]  ? __kmalloc+0x122/0x1c4
[    0.176640]  __kmem_cache_shutdown+0x163/0x301
[    0.176640]  shutdown_cache+0x14/0xf7
[    0.176640]  kmem_cache_destroy+0x15c/0x1a5
[    0.176640]  init_hugetlbfs_fs+0x85/0x15c
[    0.176640]  ? init_ramfs_fs+0x1f/0x1f
[    0.176640]  ? set_debug_rodata+0x11/0x11
[    0.176640]  do_one_initcall+0x9c/0x148
[    0.176640]  kernel_init_freeable+0x11b/0x1a8
[    0.176640]  ? rest_init+0x119/0x119
[    0.176640]  kernel_init+0xa/0xe1
[    0.176640]  ret_from_fork+0x3a/0x50
[    0.176640] INFO: Object 0x00000000e4f03853 @offset=12768
[    0.190206] kmem_cache_destroy hugetlbfs_inode_cache: Slab cache still has objects
[    0.191091] CPU: 0 PID: 1 Comm: swapper Tainted: G    B            4.16.0-10623-ge979e5a #1
[    0.192084] Call Trace:
[    0.192383]  kmem_cache_destroy+0x175/0x1a5
[    0.192889]  init_hugetlbfs_fs+0x85/0x15c
[    0.193362]  ? init_ramfs_fs+0x1f/0x1f
[    0.193809]  ? set_debug_rodata+0x11/0x11
[    0.194282]  do_one_initcall+0x9c/0x148
[    0.194738]  kernel_init_freeable+0x11b/0x1a8
[    0.195249]  ? rest_init+0x119/0x119
[    0.195673]  kernel_init+0xa/0xe1
[    0.196091]  ret_from_fork+0x3a/0x50
[    0.196575] pnp: PnP ACPI init
[    0.197162] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active)
[    0.198248] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active)
[    0.199306] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active)
[    0.200357] pnp 00:03: [dma 2]


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.16.0-10623-ge979e5a" of type "text/plain" (104302 bytes)

View attachment "job-script" of type "text/plain" (4047 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (12088 bytes)