| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20200901075321.GL4299@shao2-debian>
Date: Tue, 1 Sep 2020 15:53:22 +0800
From: kernel test robot <rong.a.chen@...el.com>
To: Roman Gushchin <guro@...com>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>,
Johannes Weiner <hannes@...xchg.org>,
Andrew Morton <akpm@...ux-foundation.org>,
Vlastimil Babka <vbabka@...e.cz>,
Shakeel Butt <shakeelb@...gle.com>,
Christoph Lameter <cl@...ux.com>,
Michal Hocko <mhocko@...nel.org>, Tejun Heo <tj@...nel.org>,
Naresh Kamboju <naresh.kamboju@...aro.org>,
LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
lkp@...el.com
Subject: [mm] 10befea91b: kernel_BUG_at_mm/slab.c
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 10befea91b61c4e2c2d1df06a2e978d182fcf792 ("mm: memcg/slab: use a single set of kmem_caches for all allocations")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+----------------------------------------------------------------------------+------------+------------+
| | 15999eef7f | 10befea91b |
+----------------------------------------------------------------------------+------------+------------+
| boot_successes | 52 | 30 |
| boot_failures | 2 | 22 |
| Kernel_panic-not_syncing:VFS:Unable_to_mount_root_fs_on_unknown-block(#,#) | 2 | 2 |
| kernel_BUG_at_mm/slab.c | 0 | 15 |
| invalid_opcode:#[##] | 0 | 15 |
| RIP:free_block.cold | 0 | 15 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 8 |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 12 |
| WARNING:at_lib/list_debug.c:#__list_del_entry_valid | 0 | 5 |
| RIP:__list_del_entry_valid | 0 | 5 |
| BUG:unable_to_handle_page_fault_for_address | 0 | 5 |
| Oops:#[##] | 0 | 5 |
| RIP:free_block | 0 | 5 |
| RIP:_raw_spin_unlock_irqrestore | 0 | 1 |
| RIP:uncharge_batch | 0 | 1 |
+----------------------------------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <rong.a.chen@...el.com>
[ 217.754094] kernel BUG at mm/slab.c:2535!
[ 217.754763] invalid opcode: 0000 [#1] SMP
[ 217.755488] CPU: 1 PID: 15 Comm: ksoftirqd/1 Not tainted 5.8.0-09691-g10befea91b61c4 #1
[ 217.756780] RIP: 0010:free_block.cold+0x14/0x16
[ 217.757518] Code: e4 79 ab 49 63 c4 eb be 48 c7 c0 f2 ff ff ff eb b5 e8 90 c5 45 01 48 8b 73 58 4c 89 e2 48 c7 c7 e0 82 41 83 e8 76 24 ee ff 90 <0f> 0b 55 48 89 e5 41 57 45 31 ff 41 56 49 89 fe 48 c7 c7 20 82 41
[ 217.760607] RSP: 0018:ffff888236daf9e8 EFLAGS: 00010046
[ 217.761540] RAX: 0000000000000048 RBX: ffff888236c00900 RCX: 0000000000000000
[ 217.762876] RDX: 0000000000000000 RSI: ffff888237d175c0 RDI: ffff888237d175c0
[ 217.764186] RBP: ffff888236dafa38 R08: ffff888237d175c0 R09: 0000000000000000
[ 217.765439] R10: 0000000000080000 R11: 0000000000000002 R12: ffff8881fd33a480
[ 217.766770] R13: ffffea0007f4ce88 R14: ffffea0007f4ce80 R15: ffff888236c01c00
[ 217.768059] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[ 217.769515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 217.770599] CR2: 000055bb8283a00c CR3: 00000001e7c34000 CR4: 00000000000406a0
[ 217.771917] DR0: 00007fe679603000 DR1: 00007fe679a52000 DR2: 0000000000000000
[ 217.773249] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 217.774506] Call Trace:
[ 217.774911] ? ___cache_free+0x41f/0x850
[ 217.775563] ___cache_free+0x461/0x850
[ 217.776212] kfree+0xa2/0xf0
[ 217.776686] kmem_freepages+0xe7/0x100
[ 217.777306] slab_destroy+0xbc/0x120
[ 217.777905] slabs_destroy+0x71/0x90
[ 217.778580] ___cache_free+0x540/0x850
[ 217.779213] kfree+0xa2/0xf0
[ 217.779724] kmem_freepages+0xe7/0x100
[ 217.780319] slab_destroy+0xbc/0x120
[ 217.780886] slabs_destroy+0x71/0x90
[ 217.781486] ___cache_free+0x540/0x850
[ 217.782171] kmem_cache_free+0x3a/0x60
[ 217.782850] ? rcu_do_batch+0x131/0x300
[ 217.783495] radix_tree_node_rcu_free+0x6c/0x70
[ 217.784226] rcu_do_batch+0x184/0x300
[ 217.784812] ? rcu_do_batch+0x131/0x300
[ 217.785459] rcu_core+0xe1/0x1d0
[ 217.786083] rcu_core_si+0x9/0x10
[ 217.786639] __do_softirq+0xd4/0x224
[ 217.787286] ? smpboot_thread_fn+0x26/0x1f0
[ 217.787995] run_ksoftirqd+0x19/0x40
[ 217.788628] smpboot_thread_fn+0x104/0x1f0
[ 217.789267] kthread+0x145/0x160
[ 217.789787] ? smpboot_register_percpu_thread+0xe0/0xe0
[ 217.794795] ? kthread_create_worker_on_cpu+0x60/0x60
[ 217.795652] ret_from_fork+0x1f/0x30
[ 217.796273] Modules linked in:
[ 217.796794] ---[ end trace aef8ba098d3dc60f ]---
To reproduce:
# build kernel
cd linux
cp config-5.8.0-09691-g10befea91b61c4 .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
Rong Chen
View attachment "config-5.8.0-09691-g10befea91b61c4" of type "text/plain" (143547 bytes)
View attachment "job-script" of type "text/plain" (4586 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (52720 bytes)
Powered by blists - more mailing lists