| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20210318144658.GC17012@xsang-OptiPlex-9020>
Date: Thu, 18 Mar 2021 22:46:58 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Jens Axboe <axboe@...nel.dk>
Cc: LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
lkp@...el.com
Subject: [block] 36b9004aff: kernel_BUG_at_block/bio.c
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 36b9004affce6d9a640b7c3f8ce4231fe8dbbdc6 ("block: enable use of bio allocation cache")
https://git.kernel.org/cgit/linux/kernel/git/axboe/linux-block.git io_uring-bio-cache
in testcase: ocfs2test
version: ocfs2test-x86_64-d802bf7-1_20210101
with following parameters:
disk: 1HDD
test: test-reserve_space
ucode: 0x21
on test machine: 8 threads Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz with 16G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 60.286813] kernel BUG at block/bio.c:628!
[ 60.286883] invalid opcode: 0000 [#1] SMP PTI
[ 60.286955] CPU: 2 PID: 13172 Comm: mkfs.ocfs2 Not tainted 5.12.0-rc2-00046-g36b9004affce #1
[ 60.287087] Hardware name: /DZ77BH-55K, BIOS BHZ7710H.86A.0097.2012.1228.1346 12/28/2012
[ 60.287233] RIP: 0010:__bio_put (kbuild/src/consumer/block/bio.c:628 kbuild/src/consumer/block/bio.c:623)
[ 60.287302] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f6 47 14 40 74 0f 8b 47 64 85 c0 74 0e f0 ff 4f 64 0f 94 c0 c3 b8 01 00 00 00 c3 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
0: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
7: 00 00 00
a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
f: f6 47 14 40 testb $0x40,0x14(%rdi)
13: 74 0f je 0x24
15: 8b 47 64 mov 0x64(%rdi),%eax
18: 85 c0 test %eax,%eax
1a: 74 0e je 0x2a
1c: f0 ff 4f 64 lock decl 0x64(%rdi)
20: 0f 94 c0 sete %al
23: c3 retq
24: b8 01 00 00 00 mov $0x1,%eax
29: c3 retq
2a:* 0f 0b ud2 <-- trapping instruction
2c: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
33: 00 00 00 00
37: 66 data16
38: 66 data16
39: 2e cs
3a: 0f .byte 0xf
3b: 1f (bad)
3c: 84 00 test %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
9: 00 00 00 00
d: 66 data16
e: 66 data16
f: 2e cs
10: 0f .byte 0xf
11: 1f (bad)
12: 84 00 test %al,(%rax)
...
[ 60.287589] RSP: 0018:ffffc9000c43fc88 EFLAGS: 00010246
[ 60.287674] RAX: 0000000000000000 RBX: ffffc9000c43fe80 RCX: 0000000000000002
[ 60.287786] RDX: ffff888417168000 RSI: ffff888417168000 RDI: ffff88841b81ac18
[ 60.287898] RBP: ffff88841b81ac18 R08: ffff88841b81ac18 R09: ffff88841f2abc58
[ 60.288010] R10: 0000000000000235 R11: ffff88841f2aa144 R12: ffff88841b81ac18
[ 60.288122] R13: ffffffff81395075 R14: 00000000ffffffff R15: ffff888417168000
[ 60.288233] FS: 00007f4d924a5280(0000) GS:ffff88841f280000(0000) knlGS:0000000000000000
[ 60.288360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.288451] CR2: 0000558bf5e42000 CR3: 0000000412716006 CR4: 00000000001706e0
[ 60.288563] Call Trace:
[ 60.288605] bio_put (kbuild/src/consumer/block/bio.c:646)
[ 60.288658] __blkdev_direct_IO (kbuild/src/consumer/fs/block_dev.c:505)
[ 60.288729] generic_file_direct_write (kbuild/src/consumer/mm/filemap.c:3473)
[ 60.288808] __generic_file_write_iter (kbuild/src/consumer/mm/filemap.c:3661)
[ 60.288883] blkdev_write_iter (kbuild/src/consumer/fs/block_dev.c:1716 kbuild/src/consumer/fs/block_dev.c:1690)
[ 60.288951] new_sync_write (kbuild/src/consumer/fs/read_write.c:519 (discriminator 1))
[ 60.289016] vfs_write (kbuild/src/consumer/fs/read_write.c:605)
[ 60.289075] ksys_pwrite64 (kbuild/src/consumer/include/linux/file.h:45 kbuild/src/consumer/fs/read_write.c:713)
[ 60.289134] do_syscall_64 (kbuild/src/consumer/arch/x86/entry/common.c:46)
[ 60.289195] entry_SYSCALL_64_after_hwframe (kbuild/src/consumer/arch/x86/entry/entry_64.S:112)
[ 60.289277] RIP: 0033:0x7f4d92620a37
[ 60.289337] Code: ff ff eb b6 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 8d 05 c9 7c 0d 00 49 89 ca 8b 00 85 c0 75 10 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 59 c3 41 55 49 89 cd 41 54 49 89 d4 55 48 89
All code
========
0: ff (bad)
1: ff (bad)
2: eb b6 jmp 0xffffffffffffffba
4: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
b: 00 00 00
e: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
13: 48 8d 05 c9 7c 0d 00 lea 0xd7cc9(%rip),%rax # 0xd7ce3
1a: 49 89 ca mov %rcx,%r10
1d: 8b 00 mov (%rax),%eax
1f: 85 c0 test %eax,%eax
21: 75 10 jne 0x33
23: b8 12 00 00 00 mov $0x12,%eax
28: 0f 05 syscall
2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction
30: 77 59 ja 0x8b
32: c3 retq
33: 41 55 push %r13
35: 49 89 cd mov %rcx,%r13
38: 41 54 push %r12
3a: 49 89 d4 mov %rdx,%r12
3d: 55 push %rbp
3e: 48 rex.W
3f: 89 .byte 0x89
Code starting with the faulting instruction
===========================================
0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax
6: 77 59 ja 0x61
8: c3 retq
9: 41 55 push %r13
b: 49 89 cd mov %rcx,%r13
e: 41 54 push %r12
10: 49 89 d4 mov %rdx,%r12
13: 55 push %rbp
14: 48 rex.W
15: 89 .byte 0x89
[ 60.289622] RSP: 002b:00007ffcf0404458 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 60.289741] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d92620a37
[ 60.289853] RDX: 0000000000100000 RSI: 0000558bf5d43c00 RDI: 0000000000000004
[ 60.289964] RBP: 0000000000100000 R08: 00007ffcf04044d4 R09: 0000000000000000
[ 60.290075] R10: 0000000000086000 R11: 0000000000000246 R12: 0000000000086000
[ 60.290188] R13: 0000000000000000 R14: 0000558bf1feac10 R15: 0000558bf5d43c00
[ 60.290300] Modules linked in: ocfs2_stack_o2cb ocfs2_dlm ocfs2 ocfs2_nodemanager ocfs2_stackglue netconsole btrfs blake2b_generic xor zstd_compress raid6_pq libcrc32c intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel sd_mod t10_pi sg kvm i915 irqbypass crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel intel_gtt rapl drm_kms_helper intel_cstate syscopyarea sysfillrect ahci sysimgblt ipmi_devintf ipmi_msghandler fb_sys_fops intel_uncore mxm_wmi firewire_ohci libahci drm firewire_core crc_itu_t libata video wmi ip_tables
[ 60.291117] ---[ end trace a751dff58752f140 ]---
[ 60.291196] RIP: 0010:__bio_put (kbuild/src/consumer/block/bio.c:628 kbuild/src/consumer/block/bio.c:623)
[ 60.291269] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f6 47 14 40 74 0f 8b 47 64 85 c0 74 0e f0 ff 4f 64 0f 94 c0 c3 b8 01 00 00 00 c3 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
0: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
7: 00 00 00
a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
f: f6 47 14 40 testb $0x40,0x14(%rdi)
13: 74 0f je 0x24
15: 8b 47 64 mov 0x64(%rdi),%eax
18: 85 c0 test %eax,%eax
1a: 74 0e je 0x2a
1c: f0 ff 4f 64 lock decl 0x64(%rdi)
20: 0f 94 c0 sete %al
23: c3 retq
24: b8 01 00 00 00 mov $0x1,%eax
29: c3 retq
2a:* 0f 0b ud2 <-- trapping instruction
2c: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
33: 00 00 00 00
37: 66 data16
38: 66 data16
39: 2e cs
3a: 0f .byte 0xf
3b: 1f (bad)
3c: 84 00 test %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
9: 00 00 00 00
d: 66 data16
e: 66 data16
f: 2e cs
10: 0f .byte 0xf
11: 1f (bad)
12: 84 00 test %al,(%rax)
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml
bin/lkp run compatible-job.yaml
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org Intel Corporation
Thanks,
Oliver Sang
View attachment "config-5.12.0-rc2-00046-g36b9004affce" of type "text/plain" (172899 bytes)
View attachment "job-script" of type "text/plain" (5629 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (4128 bytes)
View attachment "job.yaml" of type "text/plain" (4626 bytes)
Powered by blists - more mailing lists