lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20210118153141.GB13235@xsang-OptiPlex-9020>
Date:   Mon, 18 Jan 2021 23:31:41 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     Thomas Zimmermann <tzimmermann@...e.de>
Cc:     Daniel Vetter <daniel.vetter@...ll.ch>,
        Christian König <christian.koenig@....com>,
        Sam Ravnborg <sam@...nborg.org>,
        LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
        lkp@...el.com
Subject: [drm/vram]  1086db71a1:
 WARNING:at_kernel/rcu/rcutorture.c:#rcutorture_oom_notify[rcutorture]


Greeting,

FYI, we noticed the following commit (built with gcc-9):

commit: 1086db71a1dbbfb32ffb42cf0d540b69956f951e ("drm/vram-helper: Remove invariant parameters from internal kmap function")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master


in testcase: rcutorture
version: 
with following parameters:

	runtime: 300s
	test: cpuhotplug
	torture_type: rcu

test-description: rcutorture is rcutorture kernel module load/unload test.
test-url: https://www.kernel.org/doc/Documentation/RCU/torture.txt


on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-------------------------------------------------------------------------------+------------+------------+
|                                                                               | 3fb91f56ae | 1086db71a1 |
+-------------------------------------------------------------------------------+------------+------------+
| boot_successes                                                                | 4          | 1          |
| boot_failures                                                                 | 4          | 7          |
| WARNING:at_kernel/rcu/rcutorture.c:#rcutorture_oom_notify[rcutorture]         | 0          | 5          |
| RIP:rcutorture_oom_notify[rcutorture]                                         | 0          | 5          |
| page_allocation_failure:order:#,mode:#(GFP_NOWAIT),nodemask=(null)            | 0          | 3          |
| RIP:lock_is_held_type                                                         | 0          | 1          |
| Mem-Info                                                                      | 0          | 5          |
| RIP:lock_acquire                                                              | 0          | 1          |
| page_allocation_failure:order:#,mode:#(GFP_KERNEL|__GFP_COMP),nodemask=(null) | 0          | 4          |
| BUG:kernel_hang_in_boot_stage                                                 | 0          | 1          |
| calltrace:asm_call_irq_on_stack                                               | 0          | 1          |
| RIP:__rb_reserve_next                                                         | 0          | 1          |
| RIP:rcu_read_delay[rcutorture]                                                | 0          | 1          |
| RIP:check_memory_region                                                       | 0          | 1          |
| RIP:shrink_lruvec                                                             | 0          | 1          |
+-------------------------------------------------------------------------------+------------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>


[  536.837833] ------------[ cut here ]------------
[  536.845200] rcutorture_oom_notify invoked upon OOM during forward-progress testing.
[  536.853581] WARNING: CPU: 1 PID: 311 at kernel/rcu/rcutorture.c:2078 rcutorture_oom_notify+0x51/0x190 [rcutorture]
[  536.862202] Modules linked in: rcutorture torture
[  536.869620] CPU: 1 PID: 311 Comm: kworker/1:3 Not tainted 5.10.0-rc2-g1086db71a1db #1
[  536.877792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  536.885805] Workqueue: events drm_fb_helper_dirty_work
[  536.893342] RIP: 0010:rcutorture_oom_notify+0x51/0x190 [rcutorture]
[  536.901285] Code: c7 c7 80 b0 01 a0 e8 fe 1b 6e e6 b8 01 00 00 00 5b 5d 41 5c c3 90 48 c7 c6 00 65 01 a0 48 c7 c7 40 46 01 a0 e8 bf 09 32 e6 90 <0f> 0b 90 90 48 89 ef e8 03 c6 ff ff 48 c7 c0 40 fa 00 88 ba ff ff
[  536.918949] RSP: 0018:ffff88815a9373b0 EFLAGS: 00010286
[  536.927058] RAX: 0000000000000000 RBX: ffff88815a9374b8 RCX: 0000000000000000
[  536.935399] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffed102b526e6c
[  536.943974] RBP: ffff8881a5844000 R08: 0000000000000001 R09: ffffed103cf3ec55
[  536.952203] R10: ffff8881e79f62a7 R11: ffffed103cf3ec54 R12: 0000000000000000
[  536.960501] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffa001b040
[  536.968997] FS:  0000000000000000(0000) GS:ffff8881e7800000(0000) knlGS:0000000000000000
[  536.981672] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  536.990075] CR2: 00007f35df925000 CR3: 000000015a30f000 CR4: 00000000000406a0
[  536.998487] Call Trace:
[  537.006021]  notifier_call_chain+0x9e/0x180
[  537.014046]  blocking_notifier_call_chain+0x62/0x90
[  537.022100]  out_of_memory+0x810/0x12b0
[  537.029995]  ? get_page_from_freelist+0x143/0xd60
[  537.038323]  ? oom_killer_disable+0x1e0/0x1e0
[  537.046549]  __alloc_pages_slowpath+0x134b/0x20d0
[  537.054713]  ? warn_alloc+0x100/0x100
[  537.062516]  ? get_page_from_freelist+0x143/0xd60
[  537.070259]  __alloc_pages_nodemask+0x4d3/0x730
[  537.077952]  ? __alloc_pages_slowpath+0x20d0/0x20d0
[  537.086144]  ? alloc_pages_current+0x132/0x210
[  537.093491]  __get_free_pages+0x11/0xa0
[  537.100618]  kasan_populate_vmalloc_pte+0x21/0x110
[  537.108348]  apply_to_p4d_range+0x55b/0xe50
[  537.115882]  ? memset+0x40/0x40
[  537.123158]  ? memset+0x40/0x40
[  537.130496]  __apply_to_page_range+0x1e4/0x2b0
[  537.137620]  ? apply_to_p4d_range+0xe50/0xe50
[  537.144660]  alloc_vmap_area+0x78d/0x2250
[  537.151746]  ? rcu_read_lock_sched_held+0x81/0xb0
[  537.158683]  ? rcu_read_lock_bh_held+0xa0/0xa0
[  537.165480]  ? free_vmap_area+0x1a30/0x1a30
[  537.172424]  ? kasan_unpoison_shadow+0x33/0x40
[  537.179301]  ? __kasan_kmalloc+0xc2/0xd0
[  537.186045]  __get_vm_area_node+0xda/0x300
[  537.192567]  get_vm_area_caller+0x65/0xa0
[  537.199066]  ? ttm_bo_kmap+0x77b/0xa20
[  537.205533]  __ioremap_caller+0x1cb/0x4a0
[  537.212401]  ? ttm_bo_kmap+0x77b/0xa20
[  537.218796]  ? iounmap+0x1b0/0x1b0
[  537.227853]  ? drm_gem_vram_vmap+0x40/0x600
[  537.234135]  ? mutex_lock_interruptible_nested+0x20/0x20
[  537.240638]  ttm_bo_kmap+0x77b/0xa20
[  537.246662]  ? drm_gem_vram_pin_locked+0x349/0x720
[  537.252841]  ? ttm_transfered_destroy+0x50/0x50
[  537.259153]  drm_gem_vram_vmap+0x410/0x600
[  537.265280]  drm_gem_vram_object_vmap+0xa/0x20
[  537.271219]  drm_gem_vmap+0x62/0x90
[  537.276578]  drm_client_buffer_vmap+0x5d/0xb0
[  537.282134]  drm_fb_helper_dirty_work+0x1fa/0x7d0
[  537.287623]  ? rcu_read_unlock+0x40/0x40
[  537.292834]  ? drm_fb_helper_restore_work_fn+0x100/0x100
[  537.298178]  ? rcu_read_lock_bh_held+0xa0/0xa0
[  537.303341]  process_one_work+0x813/0x1440
[  537.308545]  ? pwq_dec_nr_in_flight+0x290/0x290
[  537.313590]  worker_thread+0x91/0xcb0
[  537.318349]  ? __kthread_parkme+0xcb/0x1b0
[  537.323356]  ? process_one_work+0x1440/0x1440
[  537.328590]  ? process_one_work+0x1440/0x1440
[  537.333449]  kthread+0x32a/0x430
[  537.337995]  ? _raw_spin_unlock_irq+0x24/0x30
[  537.342910]  ? kthread_bind+0x40/0x40
[  537.347515]  ret_from_fork+0x22/0x30
[  537.352326] CPU: 1 PID: 311 Comm: kworker/1:3 Not tainted 5.10.0-rc2-g1086db71a1db #1
[  537.357787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  537.363226] Workqueue: events drm_fb_helper_dirty_work
[  537.368318] Call Trace:
[  537.372805]  dump_stack+0x9a/0xcc
[  537.380306]  ? rcutorture_oom_notify+0x51/0x190 [rcutorture]
[  537.385404]  __warn.cold+0x29/0x51
[  537.390294]  ? rcutorture_oom_notify+0x51/0x190 [rcutorture]
[  537.395721]  report_bug+0x1e5/0x270
[  537.400673]  ? wake_up_klogd+0x40/0x50
[  537.405715]  handle_bug+0x42/0x80
[  537.410559]  exc_invalid_op+0x14/0x40
[  537.415289]  asm_exc_invalid_op+0x12/0x20
[  537.420325] RIP: 0010:rcutorture_oom_notify+0x51/0x190 [rcutorture]
[  537.425795] Code: c7 c7 80 b0 01 a0 e8 fe 1b 6e e6 b8 01 00 00 00 5b 5d 41 5c c3 90 48 c7 c6 00 65 01 a0 48 c7 c7 40 46 01 a0 e8 bf 09 32 e6 90 <0f> 0b 90 90 48 89 ef e8 03 c6 ff ff 48 c7 c0 40 fa 00 88 ba ff ff
[  537.440945] RSP: 0018:ffff88815a9373b0 EFLAGS: 00010286
[  537.446537] RAX: 0000000000000000 RBX: ffff88815a9374b8 RCX: 0000000000000000
[  537.452630] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffed102b526e6c
[  537.458738] RBP: ffff8881a5844000 R08: 0000000000000001 R09: ffffed103cf3ec55
[  537.464839] R10: ffff8881e79f62a7 R11: ffffed103cf3ec54 R12: 0000000000000000
[  537.471021] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffa001b040
[  537.477225]  notifier_call_chain+0x9e/0x180
[  537.482807]  blocking_notifier_call_chain+0x62/0x90
[  537.488665]  out_of_memory+0x810/0x12b0
[  537.494265]  ? get_page_from_freelist+0x143/0xd60
[  537.500060]  ? oom_killer_disable+0x1e0/0x1e0
[  537.505834]  __alloc_pages_slowpath+0x134b/0x20d0
[  537.512156]  ? warn_alloc+0x100/0x100
[  537.518004]  ? get_page_from_freelist+0x143/0xd60
[  537.524108]  __alloc_pages_nodemask+0x4d3/0x730
[  537.529933]  ? __alloc_pages_slowpath+0x20d0/0x20d0
[  537.536015]  ? alloc_pages_current+0x132/0x210
[  537.541870]  __get_free_pages+0x11/0xa0
[  537.547568]  kasan_populate_vmalloc_pte+0x21/0x110
[  537.553491]  apply_to_p4d_range+0x55b/0xe50
[  537.559538]  ? memset+0x40/0x40
[  537.565239]  ? memset+0x40/0x40
[  537.570726]  __apply_to_page_range+0x1e4/0x2b0
[  537.577014]  ? apply_to_p4d_range+0xe50/0xe50
[  537.582708]  alloc_vmap_area+0x78d/0x2250
[  537.588367]  ? rcu_read_lock_sched_held+0x81/0xb0
[  537.594138]  ? rcu_read_lock_bh_held+0xa0/0xa0
[  537.599995]  ? free_vmap_area+0x1a30/0x1a30
[  537.606006]  ? kasan_unpoison_shadow+0x33/0x40
[  537.612300]  ? __kasan_kmalloc+0xc2/0xd0
[  537.618154]  __get_vm_area_node+0xda/0x300
[  537.624740]  get_vm_area_caller+0x65/0xa0
[  537.630422]  ? ttm_bo_kmap+0x77b/0xa20
[  537.636083]  __ioremap_caller+0x1cb/0x4a0
[  537.641792]  ? ttm_bo_kmap+0x77b/0xa20
[  537.647227]  ? iounmap+0x1b0/0x1b0
[  537.655368]  ? drm_gem_vram_vmap+0x40/0x600
[  537.660929]  ? mutex_lock_interruptible_nested+0x20/0x20
[  537.666909]  ttm_bo_kmap+0x77b/0xa20
[  537.672514]  ? drm_gem_vram_pin_locked+0x349/0x720
[  537.678247]  ? ttm_transfered_destroy+0x50/0x50
[  537.683795]  drm_gem_vram_vmap+0x410/0x600
[  537.689216]  drm_gem_vram_object_vmap+0xa/0x20
[  537.694737]  drm_gem_vmap+0x62/0x90
[  537.700081]  drm_client_buffer_vmap+0x5d/0xb0
[  537.705385]  drm_fb_helper_dirty_work+0x1fa/0x7d0
[  537.710782]  ? rcu_read_unlock+0x40/0x40
[  537.715638]  ? drm_fb_helper_restore_work_fn+0x100/0x100
[  537.720763]  ? rcu_read_lock_bh_held+0xa0/0xa0
[  537.725764]  process_one_work+0x813/0x1440
[  537.730637]  ? pwq_dec_nr_in_flight+0x290/0x290
[  537.735624]  worker_thread+0x91/0xcb0
[  537.740403]  ? __kthread_parkme+0xcb/0x1b0
[  537.745468]  ? process_one_work+0x1440/0x1440
[  537.750474]  ? process_one_work+0x1440/0x1440
[  537.755137]  kthread+0x32a/0x430
[  537.759717]  ? _raw_spin_unlock_irq+0x24/0x30
[  537.764662]  ? kthread_bind+0x40/0x40
[  537.769740]  ret_from_fork+0x22/0x30
[  537.774508] irq event stamp: 1691985
[  537.779330] hardirqs last  enabled at (1691995): [<ffffffff8128d172>] console_unlock+0x672/0x950
[  537.785674] hardirqs last disabled at (1692004): [<ffffffff8128d168>] console_unlock+0x668/0x950
[  537.791796] softirqs last  enabled at (1691678): [<ffffffff86a004f1>] __do_softirq+0x4f1/0x998
[  537.797464] softirqs last disabled at (1691667): [<ffffffff86800e22>] asm_call_irq_on_stack+0x12/0x20
[  537.803179] ---[ end trace 1a7a925fff207a99 ]---




To reproduce:

        # build kernel
	cd linux
	cp config-5.10.0-rc2-g1086db71a1db .config
	make HOSTCC=gcc-9 CC=gcc-9 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
Oliver Sang


View attachment "config-5.10.0-rc2-g1086db71a1db" of type "text/plain" (132864 bytes)

View attachment "job-script" of type "text/plain" (4316 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (68520 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ