| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20210525030502.GA7744@xsang-OptiPlex-9020>
Date: Tue, 25 May 2021 11:05:02 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Jens Axboe <axboe@...nel.dk>
Cc: LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
lkp@...el.com
Subject: [block] [confidence: ] cf7b625ba0: kernel_BUG_at_block/bio.c
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: cf7b625ba00b429805d50215a1e1cc175f273aa3 ("block: enable use of bio allocation cache")
https://git.kernel.org/cgit/linux/kernel/git/axboe/linux-block.git io_uring-bio-cache
in testcase: ocfs2test
version: ocfs2test-x86_64-d802bf7-1_20210507
with following parameters:
disk: 1HDD
test: test-reserve_space
ucode: 0x21
on test machine: 8 threads 1 sockets Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz with 16G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 46.757432] kernel BUG at block/bio.c:628!
[ 46.757503] invalid opcode: 0000 [#1] SMP PTI
[ 46.757574] CPU: 7 PID: 5003 Comm: mkfs.ocfs2 Not tainted 5.13.0-rc2-00004-gcf7b625ba00b #1
[ 46.757728] Hardware name: /DZ77BH-55K, BIOS BHZ7710H.86A.0097.2012.1228.1346 12/28/2012
[ 46.757856] RIP: 0010:__bio_put (kbuild/src/consumer/block/bio.c:628 kbuild/src/consumer/block/bio.c:623)
[ 46.757928] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f6 47 14 40 74 0f 8b 47 64 85 c0 74 0e f0 ff 4f 64 0f 94 c0 c3 b8 01 00 00 00 c3 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
0: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
7: 00 00 00
a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
f: f6 47 14 40 testb $0x40,0x14(%rdi)
13: 74 0f je 0x24
15: 8b 47 64 mov 0x64(%rdi),%eax
18: 85 c0 test %eax,%eax
1a: 74 0e je 0x2a
1c: f0 ff 4f 64 lock decl 0x64(%rdi)
20: 0f 94 c0 sete %al
23: c3 retq
24: b8 01 00 00 00 mov $0x1,%eax
29: c3 retq
2a:* 0f 0b ud2 <-- trapping instruction
2c: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
33: 00 00 00 00
37: 66 data16
38: 66 data16
39: 2e cs
3a: 0f .byte 0xf
3b: 1f (bad)
3c: 84 00 test %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
9: 00 00 00 00
d: 66 data16
e: 66 data16
f: 2e cs
10: 0f .byte 0xf
11: 1f (bad)
12: 84 00 test %al,(%rax)
...
[ 46.758215] RSP: 0018:ffffc900095efc68 EFLAGS: 00010246
[ 46.758300] RAX: 0000000000000000 RBX: ffff88841d6eda18 RCX: 0000000000000002
[ 46.758412] RDX: ffff88841b52a7c0 RSI: ffff88841b52a7c0 RDI: ffff88841d6eda18
[ 46.758527] RBP: ffff88841d6eda18 R08: ffff88841d6eda18 R09: 000000000002af60
[ 46.758661] R10: 00000000000002c2 R11: ffff88841f3ea584 R12: ffffc900095efe78
[ 46.758776] R13: 0000000000100000 R14: ffffffff813e67e1 R15: ffff88841b52a7c0
[ 46.758888] FS: 00007fdcd85d0280(0000) GS:ffff88841f3c0000(0000) knlGS:0000000000000000
[ 46.759018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 46.759110] CR2: 0000559bbf26f000 CR3: 0000000416382005 CR4: 00000000001706e0
[ 46.759223] Call Trace:
[ 46.759266] bio_put (kbuild/src/consumer/block/bio.c:646)
[ 46.759318] __blkdev_direct_IO (kbuild/src/consumer/fs/block_dev.c:520)
[ 46.759388] generic_file_direct_write (kbuild/src/consumer/mm/filemap.c:3558)
[ 46.759468] __generic_file_write_iter (kbuild/src/consumer/mm/filemap.c:3746)
[ 46.759545] blkdev_write_iter (kbuild/src/consumer/fs/block_dev.c:1729)
[ 46.759622] new_sync_write (kbuild/src/consumer/fs/read_write.c:519 (discriminator 1))
[ 46.759697] vfs_write (kbuild/src/consumer/fs/read_write.c:605)
[ 46.759755] ksys_pwrite64 (kbuild/src/consumer/include/linux/file.h:45 kbuild/src/consumer/fs/read_write.c:713)
[ 46.759814] do_syscall_64 (kbuild/src/consumer/arch/x86/entry/common.c:47)
[ 46.759875] entry_SYSCALL_64_after_hwframe (kbuild/src/consumer/arch/x86/entry/entry_64.S:112)
[ 46.759958] RIP: 0033:0x7fdcd874ba37
[ 46.760018] Code: ff ff eb b6 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 8d 05 c9 7c 0d 00 49 89 ca 8b 00 85 c0 75 10 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 59 c3 41 55 49 89 cd 41 54 49 89 d4 55 48 89
All code
========
0: ff (bad)
1: ff (bad)
2: eb b6 jmp 0xffffffffffffffba
4: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
b: 00 00 00
e: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
13: 48 8d 05 c9 7c 0d 00 lea 0xd7cc9(%rip),%rax # 0xd7ce3
1a: 49 89 ca mov %rcx,%r10
1d: 8b 00 mov (%rax),%eax
1f: 85 c0 test %eax,%eax
21: 75 10 jne 0x33
23: b8 12 00 00 00 mov $0x12,%eax
28: 0f 05 syscall
2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction
30: 77 59 ja 0x8b
32: c3 retq
33: 41 55 push %r13
35: 49 89 cd mov %rcx,%r13
38: 41 54 push %r12
3a: 49 89 d4 mov %rdx,%r12
3d: 55 push %rbp
3e: 48 rex.W
3f: 89 .byte 0x89
Code starting with the faulting instruction
===========================================
0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax
6: 77 59 ja 0x61
8: c3 retq
9: 41 55 push %r13
b: 49 89 cd mov %rcx,%r13
e: 41 54 push %r12
10: 49 89 d4 mov %rdx,%r12
13: 55 push %rbp
14: 48 rex.W
15: 89 .byte 0x89
[ 46.760308] RSP: 002b:00007ffc273955a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 46.760427] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcd874ba37
[ 46.760538] RDX: 0000000000100000 RSI: 0000559bbf170200 RDI: 0000000000000004
[ 46.760652] RBP: 0000000000100000 R08: 00007ffc27395624 R09: 0000000000000000
[ 46.760764] R10: 0000000000060000 R11: 0000000000000246 R12: 0000000000060000
[ 46.760877] R13: 0000000000000000 R14: 0000559bbd9febb0 R15: 0000559bbf170200
[ 46.760993] Modules linked in: ocfs2_stack_o2cb ocfs2_dlm ocfs2 ocfs2_nodemanager ocfs2_stackglue netconsole btrfs blake2b_generic xor zstd_compress raid6_pq libcrc32c intel_rapl_msr intel_rapl_common sd_mod t10_pi sg i915 x86_pkg_temp_thermal intel_powerclamp coretemp vfio_mdev vfio_iommu_type1 vfio mdev intel_gtt kvm_intel drm_kms_helper kvm irqbypass crct10dif_pclmul crc32_pclmul crc32c_intel syscopyarea sysfillrect sysimgblt ghash_clmulni_intel rapl ipmi_devintf ipmi_msghandler fb_sys_fops firewire_ohci intel_cstate ahci mxm_wmi libahci intel_uncore firewire_core drm libata crc_itu_t wmi video ip_tables
[ 46.761861] ---[ end trace 878c4be4ad690aa6 ]---
[ 46.761943] RIP: 0010:__bio_put (kbuild/src/consumer/block/bio.c:628 kbuild/src/consumer/block/bio.c:623)
[ 46.762022] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f6 47 14 40 74 0f 8b 47 64 85 c0 74 0e f0 ff 4f 64 0f 94 c0 c3 b8 01 00 00 00 c3 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
0: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
7: 00 00 00
a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
f: f6 47 14 40 testb $0x40,0x14(%rdi)
13: 74 0f je 0x24
15: 8b 47 64 mov 0x64(%rdi),%eax
18: 85 c0 test %eax,%eax
1a: 74 0e je 0x2a
1c: f0 ff 4f 64 lock decl 0x64(%rdi)
20: 0f 94 c0 sete %al
23: c3 retq
24: b8 01 00 00 00 mov $0x1,%eax
29: c3 retq
2a:* 0f 0b ud2 <-- trapping instruction
2c: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
33: 00 00 00 00
37: 66 data16
38: 66 data16
39: 2e cs
3a: 0f .byte 0xf
3b: 1f (bad)
3c: 84 00 test %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)
9: 00 00 00 00
d: 66 data16
e: 66 data16
f: 2e cs
10: 0f .byte 0xf
11: 1f (bad)
12: 84 00 test %al,(%rax)
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
bin/lkp run generated-yaml-file
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org Intel Corporation
Thanks,
Oliver Sang
View attachment "config-5.13.0-rc2-00004-gcf7b625ba00b" of type "text/plain" (174118 bytes)
View attachment "job-script" of type "text/plain" (5709 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (4040 bytes)
View attachment "job.yaml" of type "text/plain" (4658 bytes)
Powered by blists - more mailing lists