| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20210902023830.GA8267@xsang-OptiPlex-9020>
Date: Thu, 2 Sep 2021 10:38:30 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Takashi Iwai <tiwai@...e.de>
Cc: LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
lkp@...el.com
Subject: [ALSA] 5b88da3c80:
WARNING:at_kernel/locking/lockdep.c:#__lock_acquire
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 5b88da3c800f21a76b9fd755c604402c15b10855 ("ALSA: gus: Allocate resources with device-managed APIs")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: boot
on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-----------------------------------------------------+------------+------------+
| | 35a245ec06 | 5b88da3c80 |
+-----------------------------------------------------+------------+------------+
| boot_successes | 14 | 0 |
| boot_failures | 0 | 14 |
| WARNING:at_kernel/locking/lockdep.c:#__lock_acquire | 0 | 14 |
| EIP:__lock_acquire | 0 | 14 |
| BUG:kernel_NULL_pointer_dereference,address | 0 | 14 |
| Oops:#[##] | 0 | 14 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 14 |
+-----------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>
[ 15.007455][ T1] WARNING: CPU: 0 PID: 1 at kernel/locking/lockdep.c:203 __lock_acquire (kernel/locking/lockdep.c:203 kernel/locking/lockdep.c:4688 kernel/locking/lockdep.c:4965)
[ 15.009094][ T1] Modules linked in:
[ 15.009568][ T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.14.0-rc1-00074-g5b88da3c800f #1
[ 15.009940][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 15.009940][ T1] EIP: __lock_acquire (kernel/locking/lockdep.c:203 kernel/locking/lockdep.c:4688 kernel/locking/lockdep.c:4965)
[ 15.009940][ T1] Code: 00 e8 6b e5 3c 00 85 c0 0f 84 c0 fe ff ff a1 d4 5e a0 42 85 c0 0f 85 b3 fe ff ff 68 9c 2d 3d 42 68 b4 97 35 42 e8 6c a3 d3 00 <0f> 0b 5e 58 31 c0 e9 a4 f8 ff ff 8d b4 26 00 00 00 00 8d 74 26 00
All code
========
0: 00 e8 add %ch,%al
2: 6b e5 3c imul $0x3c,%ebp,%esp
5: 00 85 c0 0f 84 c0 add %al,-0x3f7bf040(%rbp)
b: fe (bad)
c: ff (bad)
d: ff a1 d4 5e a0 42 jmpq *0x42a05ed4(%rcx)
13: 85 c0 test %eax,%eax
15: 0f 85 b3 fe ff ff jne 0xfffffffffffffece
1b: 68 9c 2d 3d 42 pushq $0x423d2d9c
20: 68 b4 97 35 42 pushq $0x423597b4
25: e8 6c a3 d3 00 callq 0xd3a396
2a:* 0f 0b ud2 <-- trapping instruction
2c: 5e pop %rsi
2d: 58 pop %rax
2e: 31 c0 xor %eax,%eax
30: e9 a4 f8 ff ff jmpq 0xfffffffffffff8d9
35: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi
3c: 8d 74 26 00 lea 0x0(%rsi,%riz,1),%esi
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 5e pop %rsi
3: 58 pop %rax
4: 31 c0 xor %eax,%eax
6: e9 a4 f8 ff ff jmpq 0xfffffffffffff8af
b: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi
12: 8d 74 26 00 lea 0x0(%rsi,%riz,1),%esi
[ 15.013271][ T1] EAX: 00000016 EBX: 00080000 ECX: 00000000 EDX: 00000000
[ 15.013271][ T1] ESI: 00000000 EDI: 40809f88 EBP: 403e3c40 ESP: 403e3c04
[ 15.013271][ T1] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010006
[ 15.013271][ T1] CR0: 80050033 CR2: 37f19080 CR3: 02b42000 CR4: 00040690
[ 15.013271][ T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 15.013271][ T1] DR6: fffe0ff0 DR7: 00000400
[ 15.013271][ T1] Call Trace:
[ 15.013271][ T1] ? kfree (mm/slub.c:3223 mm/slub.c:3236 mm/slub.c:4295)
[ 15.013271][ T1] ? __slab_free (arch/x86/include/asm/irqflags.h:45 arch/x86/include/asm/irqflags.h:80 arch/x86/include/asm/irqflags.h:140 mm/slub.c:451 mm/slub.c:3111)
[ 15.013271][ T1] ? lock_acquire (kernel/locking/lockdep.c:438 kernel/locking/lockdep.c:5627)
[ 15.013271][ T1] ? snd_gf1_i_write8 (sound/isa/gus/gus_io.c:193)
[ 15.013271][ T1] ? _raw_spin_unlock_irqrestore (arch/x86/include/asm/irqflags.h:45 arch/x86/include/asm/irqflags.h:80 arch/x86/include/asm/irqflags.h:140 include/linux/spinlock_api_smp.h:160 kernel/locking/spinlock.c:191)
[ 15.013271][ T1] ? _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:117 kernel/locking/spinlock.c:159)
[ 15.023274][ T1] ? snd_gf1_i_write8 (sound/isa/gus/gus_io.c:193)
[ 15.023274][ T1] ? snd_gf1_stop (sound/isa/gus/gus_reset.c:386)
[ 15.023274][ T1] ? snd_gus_dev_free (sound/isa/gus/gus_main.c:92 sound/isa/gus/gus_main.c:100)
[ 15.023274][ T1] ? __snd_device_free (sound/core/device.c:76)
[ 15.023274][ T1] ? snd_device_free_all (sound/core/device.c:237 (discriminator 12))
[ 15.023274][ T1] ? release_card_device (sound/core/init.c:554 sound/core/init.c:145)
[ 15.023274][ T1] ? device_release (drivers/base/core.c:2194)
[ 15.023274][ T1] ? kobject_release (lib/kobject.c:709 lib/kobject.c:736)
[ 15.023274][ T1] ? kobject_put (lib/kobject.c:755)
[ 15.023274][ T1] ? put_device (drivers/base/core.c:3461)
[ 15.023274][ T1] ? snd_card_free (sound/core/init.c:613)
[ 15.023274][ T1] ? __snd_card_release (sound/core/init.c:194)
[ 15.023274][ T1] ? release_nodes (drivers/base/devres.c:501 (discriminator 12))
[ 15.023274][ T1] ? devres_release_all (drivers/base/devres.c:532)
[ 15.023274][ T1] ? really_probe (drivers/base/dd.c:665)
[ 15.023274][ T1] ? __driver_probe_device (drivers/base/dd.c:747)
[ 15.023274][ T1] ? driver_probe_device (drivers/base/dd.c:777)
[ 15.023274][ T1] ? __device_attach_driver (drivers/base/dd.c:895)
[ 15.023274][ T1] ? driver_allows_async_probing (drivers/base/dd.c:863)
[ 15.023274][ T1] ? bus_for_each_drv (drivers/base/bus.c:427)
[ 15.023274][ T1] ? __device_attach (drivers/base/dd.c:965)
[ 15.023274][ T1] ? driver_allows_async_probing (drivers/base/dd.c:863)
[ 15.023274][ T1] ? device_initial_probe (drivers/base/dd.c:1013)
[ 15.023274][ T1] ? bus_probe_device (drivers/base/bus.c:487)
[ 15.023274][ T1] ? device_add (drivers/base/core.c:3359)
[ 15.023274][ T1] ? device_register (drivers/base/core.c:3435)
[ 15.023274][ T1] ? isa_register_driver (drivers/base/isa.c:149)
[ 15.023274][ T1] ? snd_gusclassic_driver_init (sound/isa/gus/gusclassic.c:207)
[ 15.023274][ T1] ? do_one_initcall (init/main.c:1282)
[ 15.023274][ T1] ? snd_galaxy_driver_init (sound/isa/galaxy/galaxy.c:610)
[ 15.023274][ T1] ? rdinit_setup (init/main.c:1339)
[ 15.023274][ T1] ? rcu_read_lock_sched_held (kernel/rcu/update.c:125)
[ 15.023274][ T1] ? kernel_init_freeable (init/main.c:1354 init/main.c:1371 init/main.c:1391 init/main.c:1593)
[ 15.023274][ T1] ? rest_init (init/main.c:1477)
[ 15.023274][ T1] ? kernel_init (init/main.c:1487)
[ 15.023274][ T1] ? ret_from_fork (arch/x86/entry/entry_32.S:775)
[ 15.023274][ T1] irq event stamp: 2382682
[ 15.023274][ T1] hardirqs last enabled at (2382681): __slab_free (arch/x86/include/asm/irqflags.h:45 arch/x86/include/asm/irqflags.h:80 arch/x86/include/asm/irqflags.h:140 mm/slub.c:451 mm/slub.c:3111)
[ 15.023274][ T1] hardirqs last disabled at (2382682): _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:108 kernel/locking/spinlock.c:159)
[ 15.023274][ T1] softirqs last enabled at (2381134): __do_softirq (arch/x86/include/asm/preempt.h:27 kernel/softirq.c:402 kernel/softirq.c:587)
[ 15.023274][ T1] softirqs last disabled at (2381123): do_softirq_own_stack (arch/x86/kernel/irq_32.c:60 arch/x86/kernel/irq_32.c:149)
[ 15.023274][ T1] ---[ end trace 25f99dc7c4a3dc1d ]---
To reproduce:
# build kernel
cd linux
cp config-5.14.0-rc1-00074-g5b88da3c800f .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org Intel Corporation
Thanks,
Oliver Sang
View attachment "config-5.14.0-rc1-00074-g5b88da3c800f" of type "text/plain" (129740 bytes)
View attachment "job-script" of type "text/plain" (4600 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (13468 bytes)
Powered by blists - more mailing lists