| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 10 Nov 2020 13:40:05 +0800
From: kernel test robot <oliver.sang@...el.com>
To: "Jason A. Donenfeld" <Jason@...c4.com>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>,
Chris Wilson <chris@...is-wilson.co.uk>,
Harald Arnesen <harald@...gtun.org>,
Jason Gunthorpe <jgg@...dia.com>, Peter Xu <peterx@...hat.com>,
LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
lkp@...el.com
Subject: [mm] [confidence: ] a4d63c3732: WARNING:suspicious_RCU_usage
Greeting,
FYI, we noticed the following commit (built with clang-12):
commit: a4d63c3732f1a0c91abcf5b7f32b4ef7dcd82025 ("mm: do not rely on mm == current->mm in __get_user_pages_locked")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: trinity
version: trinity-static-x86_64-x86_64-1c734c75-1_2020-01-06
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------------------------------------+----------+------------+
| | v5.9-rc7 | a4d63c3732 |
+-------------------------------------------------------------------------------+----------+------------+
| WARNING:suspicious_RCU_usage | 0 | 6 |
| drivers/char/ipmi/ipmi_msghandler.c:#RCU-list_traversed_in_non-reader_section | 0 | 6 |
+-------------------------------------------------------------------------------+----------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 9.323489] WARNING: suspicious RCU usage
[ 9.323820] 5.9.0-rc7-00001-ga4d63c3732f1a0 #1 Not tainted
[ 9.324262] -----------------------------
[ 9.324622] drivers/char/ipmi/ipmi_msghandler.c:747 RCU-list traversed in non-reader section!!
[ 9.325366]
[ 9.325366] other info that might help us debug this:
[ 9.325366]
[ 9.326005]
[ 9.326005] rcu_scheduler_active = 2, debug_locks = 1
[ 9.326571] 2 locks held by swapper/0/1:
[ 9.326897] #0: ffffffff8328d5b8 (smi_watchers_mutex){+.+.}-{3:3}, at: ipmi_smi_watcher_register+0x2b/0x160
[ 9.327731] #1: ffffffff8464d6c0 (&ipmi_interfaces_srcu){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20
[ 9.328503]
[ 9.328503] stack backtrace:
[ 9.328864] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.9.0-rc7-00001-ga4d63c3732f1a0 #1
[ 9.329474] Call Trace:
[ 9.329474] ? dump_stack+0x86/0xe0
[ 9.329474] ? lockdep_rcu_suspicious+0xd3/0xe0
[ 9.329474] ? ipmi_smi_watcher_register+0xb3/0x160
[ 9.329474] ? ipmi_hardcode_init_one+0x120/0x120
[ 9.329474] ? ipmi_wdog_init+0xc2/0x120
[ 9.329474] ? do_one_initcall+0x298/0x620
[ 9.329474] ? irqentry_exit+0x8c/0xc0
[ 9.329474] ? ipmi_hardcode_init_one+0x120/0x120
[ 9.329474] ? rcu_read_lock_sched_held+0x35/0x80
[ 9.329474] ? do_initcall_level+0x96/0xc0
[ 9.329474] ? do_initcalls+0x49/0x80
[ 9.329474] ? kernel_init+0xa/0x100
[ 9.329474] ? kernel_init_freeable+0x16a/0x1c0
[ 9.329474] ? rest_init+0x1e0/0x1e0
[ 9.329474] ? kernel_init+0xa/0x100
[ 9.329474] ? ret_from_fork+0x1f/0x30
[ 9.341379] IPMI Watchdog: driver initialized
[ 9.341744] IPMI poweroff: Copyright (C) 2004 MontaVista Software - IPMI Powerdown via sys_reboot
[ 9.343243] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
[ 9.344014] ACPI: Power Button [PWRF]
[ 9.449784] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[ 9.454740] serial 00:05: GPIO lookup for consumer rs485-term
[ 9.455421] serial 00:05: using ACPI for GPIO lookup
[ 9.455831] acpi PNP0501:00: GPIO: looking up rs485-term-gpios
[ 9.456372] acpi PNP0501:00: GPIO: looking up rs485-term-gpio
[ 9.456834] serial 00:05: using lookup tables for GPIO lookup
[ 9.457540] serial 00:05: No GPIO consumer rs485-term found
[ 9.458776] 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
[ 9.460792] serial 00:06: GPIO lookup for consumer rs485-term
[ 9.461262] serial 00:06: using ACPI for GPIO lookup
[ 9.461688] acpi PNP0501:01: GPIO: looking up rs485-term-gpios
[ 9.462158] acpi PNP0501:01: GPIO: looking up rs485-term-gpio
[ 9.462828] serial 00:06: using lookup tables for GPIO lookup
[ 9.463331] serial 00:06: No GPIO consumer rs485-term found
[ 9.463864] 00:06: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
[ 9.466811] MOXA Intellio family driver version 6.0k
[ 9.467554] RocketPort device driver module, version 2.09, 12-June-2003
[ 9.468167] No rocketport ports found; unloading driver
[ 9.468927] Non-volatile memory driver v1.3
[ 9.469856] telclk_interrupt = 0xf non-mcpbl0010 hw.
[ 9.470632] Hangcheck: starting hangcheck timer 0.9.1 (tick is 180 seconds, margin is 60 seconds).
[ 9.473521] dummy-irq: no IRQ given. Use irq=N
[ 9.476786] L440GX flash mapping: failed to find PIIX4 ISA bridge, cannot continue
[ 9.477562] platform physmap-flash.0: failed to claim resource 0: [mem 0x08000000-0x07ffffff]
[ 9.478409] SBC-GXx flash: IO:0x258-0x259 MEM:0xdc000-0xdffff
[ 9.534483] No valid DiskOnChip devices found
[ 9.535260] e1000: Intel(R) PRO/1000 Network Driver
[ 9.535695] e1000: Copyright (c) 1999-2006 Intel Corporation.
[ 10.350489] PCI Interrupt Link [LNKC] enabled at IRQ 11
[ 10.664201] e1000 0000:00:03.0 eth0: (PCI:33MHz:32-bit) 52:54:00:12:34:56
[ 10.666405] e1000 0000:00:03.0 eth0: Intel(R) PRO/1000 Network Connection
[ 10.667758] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
[ 10.670001] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 10.671673] serio: i8042 AUX port at 0x60,0x64 irq 12
[ 10.706685] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1
[ 10.711680] rtc-test rtc-test.0: registered as rtc0
[ 10.712041] rtc-test rtc-test.0: setting system clock to 2020-11-09T08:24:14 UTC (1604910254)
[ 10.722629] rtc rtc1: invalid alarm value: 18446744073703295022-02-23T05:52:09
[ 10.724139] rtc-test rtc-test.1: registered as rtc1
[ 10.732594] rtc rtc2: invalid alarm value: 18446744073703295022-02-23T05:52:09
[ 10.733197] rtc-test rtc-test.2: registered as rtc2
[ 10.739929] smssdio: Siano SMS1xxx SDIO driver
[ 10.740250] smssdio: Copyright Pierre Ossman
[ 10.746602] intel_pstate: CPU model not supported
[ 10.746996] wbsd: Winbond W83L51xD SD/MMC card interface driver
[ 10.747424] wbsd: Copyright(c) Pierre Ossman
[ 10.750363] ledtrig-cpu: registered to indicate activity on CPUs
[ 10.771271] NET: Registered protocol family 10
[ 10.772129] random: get_random_u32 called from neigh_hash_alloc+0x6d/0xa0 with crng_init=0
[ 10.775855] random: get_random_u32 called from bucket_table_alloc+0x91/0x160 with crng_init=0
[ 10.775978] Segment Routing with IPv6
[ 10.776954] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 10.779081] 9pnet: Installing 9P2000 support
[ 10.782714] IPI shorthand broadcast: enabled
[ 10.783043] ... APIC ID: 00000000 (0)
[ 10.783289] ... APIC VERSION: 00050014
[ 10.783289] 0000000000000000000000000000000000000000000000000000000000000000
[ 10.783289] 0000000000000000000000000000000000000000000000000000000000001000
[ 10.785878] number of MP IRQ sources: 15.
[ 10.786173] number of IO-APIC #0 registers: 24.
[ 10.786525] testing the IO APIC.......................
[ 10.786904] IO APIC #0......
[ 10.787120] .... register #00: 00000000
[ 10.787429] ....... : physical APIC id: 00
[ 10.787737] ....... : Delivery Type: 0
To reproduce:
# build kernel
cd linux
cp config-5.9.0-rc7-00001-ga4d63c3732f1a0 .config
make HOSTCC=clang-12 CC=clang-12 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
Oliver Sang
View attachment "config-5.9.0-rc7-00001-ga4d63c3732f1a0" of type "text/plain" (115630 bytes)
View attachment "job-script" of type "text/plain" (4346 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (13648 bytes)
Powered by blists - more mailing lists