lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20200415032909.GP8179@shao2-debian>
Date:   Wed, 15 Apr 2020 11:29:09 +0800
From:   kernel test robot <lkp@...el.com>
To:     Sultan Alsawaf <sultan@...neltoast.com>
Cc:     Sultan Alsawaf <sultan@...neltoast.com>, stable@...r.kernel.org,
        Jani Nikula <jani.nikula@...ux.intel.com>,
        Joonas Lahtinen <joonas.lahtinen@...ux.intel.com>,
        Rodrigo Vivi <rodrigo.vivi@...el.com>,
        David Airlie <airlied@...ux.ie>,
        Daniel Vetter <daniel@...ll.ch>,
        Matthew Auld <matthew.auld@...el.com>,
        Chris Wilson <chris@...is-wilson.co.uk>,
        intel-gfx@...ts.freedesktop.org, dri-devel@...ts.freedesktop.org,
        linux-kernel@...r.kernel.org, lkp@...ts.01.org, rui.zhang@...el.com
Subject: [drm/i915] 6dc0b234a6:
 BUG:sleeping_function_called_from_invalid_context_at_kernel/locking/mutex.c

Greeting,

FYI, we noticed the following commit (built with gcc-7):

commit: 6dc0b234a64d2fdea96623381b234ec328b5a0a2 ("[PATCH] drm/i915: Fix use-after-free due to intel_context_pin/unpin race")
url: https://github.com/0day-ci/linux/commits/Sultan-Alsawaf/drm-i915-Fix-use-after-free-due-to-intel_context_pin-unpin-race/20200404-054505
base: git://anongit.freedesktop.org/drm-intel for-linux-next

in testcase: suspend-stress
with following parameters:

	mode: freeze
	iterations: 10



on test machine: 4 threads BroadWell with 8G memory

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp@...el.com>


kern  :err   : [  209.039440] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:281
kern  :err   : [  209.039594] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 34, name: kworker/3:1
kern  :warn  : [  209.039709] CPU: 3 PID: 34 Comm: kworker/3:1 Not tainted 5.6.0-rc5-01501-g6dc0b234a64d2f #1
kern  :warn  : [  209.039824] Hardware name:  /NUC5i3RYB, BIOS RYBDWi35.86A.0363.2017.0316.1028 03/16/2017
kern  :warn  : [  209.040023] Workqueue: events engine_retire [i915]
kern  :warn  : [  209.040093] Call Trace:
kern  :warn  : [  209.040140]  dump_stack+0x66/0x8b
kern  :warn  : [  209.040192]  ___might_sleep+0x102/0x120
kern  :warn  : [  209.040251]  mutex_lock+0x1c/0x40
kern  :warn  : [  209.040380]  __active_retire+0x7f/0x110 [i915]
kern  :warn  : [  209.040449]  dma_fence_signal_locked+0x7e/0x100
kern  :warn  : [  209.040595]  i915_request_retire+0x315/0x370 [i915]
kern  :warn  : [  209.040736]  retire_requests+0x4e/0x70 [i915]
kern  :warn  : [  209.040865]  engine_retire+0x61/0x90 [i915]
kern  :warn  : [  209.040930]  process_one_work+0x1b0/0x3e0
kern  :warn  : [  209.040990]  ? move_linked_works+0x6e/0xa0
kern  :warn  : [  209.041051]  worker_thread+0x1e5/0x3b0
kern  :warn  : [  209.041108]  ? process_one_work+0x3e0/0x3e0
kern  :warn  : [  209.041170]  kthread+0x11e/0x140
kern  :warn  : [  209.041220]  ? kthread_park+0x90/0x90
kern  :warn  : [  209.041277]  ret_from_fork+0x35/0x40
kern  :debug : [  209.045034] calling  coretemp_init+0x0/0x1000 [coretemp] @ 245
kern  :debug : [  209.045252] probe of coretemp.0 returned 1 after 44 usecs
kern  :debug : [  209.068661] initcall coretemp_init+0x0/0x1000 [coretemp] returned 0 after 22978 usecs
kern  :debug : [  209.071902] calling  powerclamp_init+0x0/0x1000 [intel_powerclamp] @ 240
kern  :debug : [  209.078262] initcall powerclamp_init+0x0/0x1000 [intel_powerclamp] returned 0 after 6104 usecs
kern  :info  : [  209.079857] [drm] Initialized i915 1.6.0 20200313 for 0000:00:02.0 on minor 0
kern  :debug : [  209.081471] calling  pkg_temp_thermal_init+0x0/0x1000 [x86_pkg_temp_thermal] @ 240
kern  :debug : [  209.081729] initcall pkg_temp_thermal_init+0x0/0x1000 [x86_pkg_temp_thermal] returned 0 after 138 usecs
kern  :info  : [  209.083553] ACPI: Video Device [GFX0] (multi-head: yes  rom: no  post: no)
kern  :info  : [  209.085400] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input9
kern  :debug : [  209.085534] calling  acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] @ 240
kern  :debug : [  209.085540] initcall acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] returned -17 after 0 usecs
kern  :debug : [  209.086704] probe of LNXVIDEO:00 returned 1 after 6197 usecs
kern  :info  : [  209.087484] snd_hda_intel 0000:00:03.0: bound 0000:00:02.0 (ops i915_audio_component_bind_ops [i915])
kern  :debug : [  209.087831] probe of 0000:00:02.0 returned 1 after 161586 usecs
kern  :debug : [  209.088502] initcall i915_init+0x0/0x6b [i915] returned 0 after 2820 usecs
kern  :debug : [  209.106252] calling  acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] @ 245
kern  :debug : [  209.106354] initcall acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] returned -17 after 0 usecs
kern  :debug : [  209.108121] calling  rapl_init+0x0/0x1000 [intel_rapl_common] @ 240
kern  :debug : [  209.108266] initcall rapl_init+0x0/0x1000 [intel_rapl_common] returned 0 after 47 usecs
kern  :debug : [  209.111832] calling  intel_rapl_msr_driver_init+0x0/0x1000 [intel_rapl_msr] @ 242
kern  :info  : [  209.112018] intel_rapl_common: Found RAPL domain package
kern  :info  : [  209.112097] intel_rapl_common: Found RAPL domain core
kern  :info  : [  209.112171] intel_rapl_common: Found RAPL domain uncore
kern  :info  : [  209.112246] intel_rapl_common: Found RAPL domain dram
kern  :debug : [  209.120124] probe of intel_rapl_msr.0 returned 1 after 8156 usecs
kern  :debug : [  209.120247] initcall intel_rapl_msr_driver_init+0x0/0x1000 [intel_rapl_msr] returned 0 after 8102 usecs
kern  :debug : [  209.127972] calling  hdmi_driver_init+0x0/0x1000 [snd_hda_codec_hdmi] @ 504
kern  :debug : [  209.128244] calling  acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] @ 266
kern  :debug : [  209.128343] initcall acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] returned -17 after 1 usecs
kern  :debug : [  209.130475] probe of hdaudioC0D0 returned 1 after 2387 usecs
kern  :debug : [  209.130596] initcall hdmi_driver_init+0x0/0x1000 [snd_hda_codec_hdmi] returned 0 after 2194 usecs
kern  :info  : [  209.131772] input: HDA Intel HDMI HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:03.0/sound/card0/input10
kern  :info  : [  209.131985] input: HDA Intel HDMI HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:03.0/sound/card0/input11
kern  :info  : [  209.132183] input: HDA Intel HDMI HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:03.0/sound/card0/input12
kern  :info  : [  209.132377] input: HDA Intel HDMI HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:03.0/sound/card0/input13
kern  :info  : [  209.132574] input: HDA Intel HDMI HDMI/DP,pcm=10 as /devices/pci0000:00/0000:00:03.0/sound/card0/input14
kern  :debug : [  209.147193] calling  acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] @ 247
kern  :debug : [  209.147298] initcall acpi_cpufreq_init+0x0/0x1000 [acpi_cpufreq] returned -17 after 0 usecs
kern  :info  : [  209.237164] fbcon: i915drmfb (fb0) is primary device
kern  :info  : [  209.277039] Console: switching to colour frame buffer device 240x67
kern  :info  : [  209.302577] i915 0000:00:02.0: fb0: i915drmfb frame buffer device
kern  :err   : [  215.244354] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2ee2000-0xa2ee2fff], got write-back
kern  :err   : [  215.244986] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.245244] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.245796] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.246027] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.246523] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.246768] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.247262] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.247490] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.247979] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.248210] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.248642] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2ee2000-0xa2ee2fff], got write-back
kern  :err   : [  215.249166] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.249398] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.249893] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.250123] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.250638] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.250883] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.251361] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.251589] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.252083] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.252312] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.252744] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2ee2000-0xa2ee2fff], got write-back
kern  :err   : [  215.253290] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.253521] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.254018] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.254251] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.254762] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.254988] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.255503] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.255748] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.256239] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
kern  :err   : [  215.256470] x86/PAT: bmc-watchdog:596 map pfn expected mapping type uncached-minus for [mem 0xa2352000-0xa2352fff], got write-back
user  :notice: [  215.849565] Kernel tests: Boot OK!

kern  :info  : [  217.609110] PM: suspend entry (s2idle)
kern  :info  : [  217.609211] Filesystems sync: 0.000 seconds
kern  :info  : [  217.631728] Freezing user space processes ... (elapsed 0.000 seconds) done.


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp install job.yaml  # job file is attached in this email
        bin/lkp run     job.yaml



Thanks,
lkp


View attachment "config-5.6.0-rc5-01501-g6dc0b234a64d2f" of type "text/plain" (204798 bytes)

View attachment "job-script" of type "text/plain" (4893 bytes)

Download attachment "kmsg.xz" of type "application/x-xz" (64960 bytes)

View attachment "suspend-stress" of type "text/plain" (3748 bytes)

View attachment "job.yaml" of type "text/plain" (4050 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ