lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Mon, 11 Oct 2021 16:20:54 +0800
From:   kernel test robot <oliver.sang@...el.com>
To:     ultrachin@....com
Cc:     0day robot <lkp@...el.com>, zeng jingxiang <linuszeng@...cent.com>,
        lu yihui <yihuilu@...cent.com>,
        LKML <linux-kernel@...r.kernel.org>, lkp@...ts.01.org,
        akpm@...ux-foundation.org, linux-mm@...ck.org,
        brookxu.cn@...il.com, chen xiaoguang <xiaoggchen@...cent.com>
Subject: [mm] 3e55b36596: kernel_BUG_at_mm/page_alloc.c



Greeting,

FYI, we noticed the following commit (built with gcc-9):

commit: 3e55b36596eb3a798c6f649e5e1c0f5eac8522b3 ("[PATCH] mm: Free per cpu pages async to shorten program exit time")
url: https://github.com/0day-ci/linux/commits/ultrachin-163-com/mm-Free-per-cpu-pages-async-to-shorten-program-exit-time/20211008-145835
base: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git 5816b3e6577eaa676ceb00a848f0fd65fe2adc29

in testcase: boot

on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+-----------+------------+
|                                          | v5.15-rc3 | 3e55b36596 |
+------------------------------------------+-----------+------------+
| boot_successes                           | 23        | 0          |
| boot_failures                            | 0         | 16         |
| kernel_BUG_at_mm/page_alloc.c            | 0         | 16         |
| invalid_opcode:#[##]                     | 0         | 16         |
| EIP:rmqueue                              | 0         | 16         |
| Kernel_panic-not_syncing:Fatal_exception | 0         | 16         |
+------------------------------------------+-----------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@...el.com>



[    2.500620][    T0] page dumped because: VM_BUG_ON_PAGE(page && bad_range(zone, page))
[    2.501442][    T0] page_owner tracks the page as allocated
[    2.502037][    T0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, ts 2424910211, free_ts 0
[    2.503206][    T0]  register_early_stack+0x25/0x50
[    2.503728][    T0]  init_page_owner+0x28/0x2d0
[    2.504204][    T0]  page_ext_init_flatmem_late+0x13/0x16
[    2.504759][    T0]  start_kernel+0x4fd/0x7f6
[    2.505207][    T0] page_owner free stack trace missing
[    2.505797][    T0] ------------[ cut here ]------------
[    2.506355][    T0] kernel BUG at mm/page_alloc.c:3813!
[    2.506943][    T0] invalid opcode: 0000 [#1] PREEMPT SMP
[    2.507523][    T0] CPU: 0 PID: 0 Comm: swapper Not tainted 5.15.0-rc3-00001-g3e55b36596eb #1 3acab236a53eb2dfa57d9f9053a0a9f758db6152
[    2.508778][    T0] EIP: rmqueue+0x82b/0x10c0
[    2.509279][    T0] Code: 1d b3 39 c3 74 29 31 c9 ba 01 00 00 00 c7 04 24 00 00 00 00 b8 28 48 21 b3 e8 81 24 f2 ff ba fc 77 af b2 89 f8 e8 c5 f1 fc ff <0f> 0b 8d 76 00 31 c9 31 d2 c7 04 24 00 00 00 00 b8 28 48 21 b3 e8
[    2.511254][    T0] EAX: 00000000 EBX: b31d8360 ECX: 00000000 EDX: 00000000
[    2.511974][    T0] ESI: b2cc9b80 EDI: ee64bfe0 EBP: b2cc1e44 ESP: b2cc1de4
[    2.512713][    T0] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00210086
[    2.513476][    T0] CR0: 80050033 CR2: ffcb2000 CR3: 034ee000 CR4: 00040690
[    2.514177][    T0] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    2.514884][    T0] DR6: fffe0ff0 DR7: 00000400
[    2.515365][    T0] Call Trace:
[    2.515695][    T0]  ? rmqueue+0x28b/0x10c0
[    2.516220][    T0]  ? prb_read_valid+0x23/0x30
[    2.516685][    T0]  get_page_from_freelist+0xce/0x410
[    2.517209][    T0]  __alloc_pages+0x1fb/0x540
[    2.517683][    T0]  allocate_slab+0xb4/0x690
[    2.518133][    T0]  new_slab+0x88/0xc0
[    2.518516][    T0]  __kmem_cache_create+0x2f8/0x4e0
[    2.518998][    T0]  ? _printk+0x14/0x16
[    2.519404][    T0]  ? init_page_owner+0x232/0x2d0
[    2.519907][    T0]  create_boot_cache+0x6c/0x8c
[    2.520400][    T0]  kmem_cache_init+0x56/0x12b
[    2.520882][    T0]  start_kernel+0x502/0x7f6
[    2.521376][    T0]  ? early_idt_handler_common+0x44/0x44
[    2.521932][    T0]  i386_start_kernel+0x48/0x4a
[    2.522406][    T0]  startup_32_smp+0x161/0x164
[    2.522873][    T0] Modules linked in:
[    2.523260][    T0] random: get_random_bytes called from init_oops_id+0x42/0x50 with crng_init=0
[    2.523272][    T0] ---[ end trace 0000000000000000 ]---
[    2.524663][    T0] EIP: rmqueue+0x82b/0x10c0
[    2.525173][    T0] Code: 1d b3 39 c3 74 29 31 c9 ba 01 00 00 00 c7 04 24 00 00 00 00 b8 28 48 21 b3 e8 81 24 f2 ff ba fc 77 af b2 89 f8 e8 c5 f1 fc ff <0f> 0b 8d 76 00 31 c9 31 d2 c7 04 24 00 00 00 00 b8 28 48 21 b3 e8
[    2.527208][    T0] EAX: 00000000 EBX: b31d8360 ECX: 00000000 EDX: 00000000
[    2.527938][    T0] ESI: b2cc9b80 EDI: ee64bfe0 EBP: b2cc1e44 ESP: b2cc1de4
[    2.528655][    T0] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00210086
[    2.529411][    T0] CR0: 80050033 CR2: ffcb2000 CR3: 034ee000 CR4: 00040690
[    2.530104][    T0] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    2.530821][    T0] DR6: fffe0ff0 DR7: 00000400
[    2.531300][    T0] Kernel panic - not syncing: Fatal exception



To reproduce:

        # build kernel
	cd linux
	cp config-5.15.0-rc3-00001-g3e55b36596eb .config
	make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



---
0DAY/LKP+ Test Infrastructure                   Open Source Technology Center
https://lists.01.org/hyperkitty/list/lkp@lists.01.org       Intel Corporation

Thanks,
Oliver Sang


View attachment "config-5.15.0-rc3-00001-g3e55b36596eb" of type "text/plain" (131882 bytes)

View attachment "job-script" of type "text/plain" (4891 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (4996 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ