| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Mon, 26 Nov 2018 08:28:05 +0800
From: kernel test robot <rong.a.chen@...el.com>
To: Takashi Iwai <tiwai@...e.de>
Cc: Takashi Sakamoto <o-takashi@...amocchi.jp>,
LKML <linux-kernel@...r.kernel.org>,
Takashi Iwai <tiwai@...e.de>, Takashi Iwai <tiwai@...e.com>,
alsa-devel@...a-project.org, lkp@...org
Subject: [LKP] [ALSA] 3a6d1980fe: kernel_BUG_at_mm/page_alloc.c
FYI, we noticed the following commit (built with gcc-7):
commit: 3a6d1980fe96dbbfe3ae58db0048867f5319cdbf ("ALSA: Replace snd_malloc_pages() and snd_free_pages() with standard helpers")
https://git.kernel.org/cgit/linux/kernel/git/tiwai/sound.git for-next
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 768M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------+------------+------------+
| | 3103c08f96 | 3a6d1980fe |
+------------------------------------------+------------+------------+
| boot_successes | 4 | 0 |
| boot_failures | 0 | 8 |
| kernel_BUG_at_mm/page_alloc.c | 0 | 8 |
| invalid_opcode:#[##] | 0 | 8 |
| RIP:split_page | 0 | 8 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 8 |
+------------------------------------------+------------+------------+
[ 174.830284] kernel BUG at mm/page_alloc.c:2850!
[ 174.907025] invalid opcode: 0000 [#1] PREEMPT SMP
[ 174.915963] CPU: 0 PID: 263 Comm: udevd Not tainted 4.20.0-rc1-00027-g3a6d198 #1
[ 174.929127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 174.944353] RIP: 0010:split_page+0x57/0x18b
[ 174.952000] Code: 83 e4 01 31 c9 31 d2 44 89 e6 48 c7 c7 28 b8 7d 82 e8 39 58 fb ff 45 85 e4 74 11 48 c7 c6 43 ef 3f 82 48 89 df e8 40 99 03 00 <0f> 0b 4c 8b 63 08 31 c9 31 d2 48 c7 c7 b8 ca 7d 82 4d 89 e6 41 83
[ 174.985253] RSP: 0018:ffff88002f2c3900 EFLAGS: 00010293
[ 174.994749] RAX: ffffffff823fef43 RBX: ffff880029ef0800 RCX: ffff88002f2be680
[ 175.007746] RDX: 0000000000000000 RSI: ffffffff811f9b57 RDI: ffffffff827e3508
[ 175.020574] RBP: ffff88002f2c3930 R08: ffff88002f2bedc8 R09: 0000000066963706
[ 175.033637] R10: ffffffff82782de8 R11: ffffffff82782de8 R12: 0000000000000001
[ 175.046565] R13: ffff88002e920000 R14: 0000000000000005 R15: 0000000000000000
[ 175.059653] FS: 00007fd7d5b20780(0000) GS:ffff880029800000(0000) knlGS:0000000000000000
[ 175.074301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 175.084409] CR2: 00007ffde3b44fb8 CR3: 000000002f2b2000 CR4: 00000000000006b0
[ 175.096626] Call Trace:
[ 175.101392] make_alloc_exact+0x8e/0xb2
[ 175.108457] alloc_pages_exact+0x3d/0x44
[ 175.115778] snd_dma_alloc_pages+0xfc/0x2d4 [snd_pcm]
[ 175.124958] snd_pcm_lib_preallocate_pages1+0x7f/0x1f2 [snd_pcm]
[ 175.136068] snd_pcm_lib_preallocate_pages_for_all+0x64/0xa5 [snd_pcm]
[ 175.147988] snd_pcsp_new_pcm+0x93/0xa4 [snd_pcsp]
[ 175.157007] pcsp_probe+0x209/0x2ad [snd_pcsp]
[ 175.165239] ? pcsp_remove+0x2f/0x2f [snd_pcsp]
[ 175.173530] platform_drv_probe+0x4e/0xa7
[ 175.180818] ? platform_drv_remove+0x58/0x58
[ 175.188822] really_probe+0x202/0x3ba
[ 175.197734] driver_probe_device+0x10a/0x157
[ 175.205613] __driver_attach+0xcb/0x116
[ 175.212806] ? driver_probe_device+0x157/0x157
[ 175.220999] bus_for_each_dev+0x9d/0xc5
[ 175.228133] driver_attach+0x27/0x2a
[ 175.234801] bus_add_driver+0x11a/0x241
[ 175.241909] driver_register+0xe9/0x136
[ 175.248997] __platform_driver_register+0x44/0x49
[ 175.257747] ? 0xffffffffa00c7000
[ 175.263944] pcsp_init+0x60/0x1000 [snd_pcsp]
[ 175.272036] do_one_initcall+0x173/0x3a0
[ 175.279269] ? kmem_cache_alloc_trace+0x2a5/0x2c0
[ 175.287789] ? do_init_module+0x27/0x1ff
[ 175.295143] do_init_module+0x5f/0x1ff
[ 175.302240] load_module+0x1dad/0x23e9
[ 175.309116] ? kernel_read_file+0x260/0x272
[ 175.317219] __se_sys_finit_module+0x97/0xa7
[ 175.325160] ? __se_sys_finit_module+0x97/0xa7
[ 175.333382] __x64_sys_finit_module+0x1b/0x1e
[ 175.341454] do_syscall_64+0x39c/0x4df
[ 175.348394] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 175.357783] RIP: 0033:0x7fd7d51f54a9
[ 175.364266] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d bf 79 2b 00 f7 d8 64 89 01 48
[ 175.398068] RSP: 002b:00007ffde3b4d318 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 175.411608] RAX: ffffffffffffffda RBX: 0000000000a91190 RCX: 00007fd7d51f54a9
[ 175.424442] RDX: 0000000000000000 RSI: 00007fd7d54c10aa RDI: 000000000000000d
[ 175.437048] RBP: 00007fd7d54c10aa R08: 0000000000000000 R09: 0000000000a91190
[ 175.449913] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000
[ 175.462625] R13: 0000000000020000 R14: 0000000000000000 R15: 0000000000a91190
[ 175.475555] Modules linked in: drm_panel_orientation_quirks snd_pcsp(+) snd_pcm agpgart cfbfillrect snd_timer cfbimgblt cfbcopyarea snd fb_sys_fops syscopyarea sysfillrect soundcore sysimgblt serio_raw fb fbdev i2c_piix4 evbug
[ 175.573671] ---[ end trace 3dad41c41965c82c ]---
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
View attachment "config-4.20.0-rc1-00027-g3a6d198" of type "text/plain" (139701 bytes)
View attachment "job-script" of type "text/plain" (4138 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (15700 bytes)
Powered by blists - more mailing lists