| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <202309102139.f96019d5-oliver.sang@intel.com>
Date: Sun, 10 Sep 2023 22:15:15 +0800
From: kernel test robot <oliver.sang@...el.com>
To: "Liam R. Howlett" <Liam.Howlett@...cle.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>,
<linux-kernel@...r.kernel.org>,
Andrew Morton <akpm@...ux-foundation.org>,
David Binderman <dcb314@...mail.com>,
Peng Zhang <zhangpeng.00@...edance.com>,
"Sergey Senozhatsky" <senozhatsky@...omium.org>,
Vernon Yang <vernon2gm@...il.com>,
Wei Yang <richard.weiyang@...il.com>,
<maple-tree@...ts.infradead.org>, <linux-mm@...ck.org>,
<oliver.sang@...el.com>
Subject: [linus:master] [maple_tree] a5199577b1: canonical_address#:#[##]
Hello,
kernel test robot noticed "canonical_address#:#[##]" on:
commit: a5199577b1ddae696528d7e4e7a406d5a8f23a7b ("maple_tree: make test code work without debug enabled")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
[test failed on linus/master a48fa7efaf1161c1c898931fe4c7f0070964233a]
[test failed on linux-next/master af3c30d33476bc2694b0d699173544b07f7ae7de]
in testcase: boot
compiler: gcc-11
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
there are below diff between parent and this commit's config in our tests:
@@ -5899,7 +5899,7 @@ CONFIG_STACKTRACE=y
# CONFIG_DEBUG_SG is not set
# CONFIG_DEBUG_NOTIFIERS is not set
# CONFIG_BUG_ON_DATA_CORRUPTION is not set
-CONFIG_DEBUG_MAPLE_TREE=y
+# CONFIG_DEBUG_MAPLE_TREE is not set
# end of Debug kernel data structures
we observed a5199577b1 shows various issues as below.
acd4de60dd356ffe a5199577b1ddae696528d7e4e7a
---------------- ---------------------------
fail:runs %reproduction fail:runs
| | |
:95 17% 16:91 dmesg.Kernel_panic-not_syncing:Fatal_exception
:95 78% 74:91 dmesg.Kernel_panic-not_syncing:System_is_deadlocked_on_memory
:95 78% 74:91 dmesg.Mem-Info
:95 78% 74:91 dmesg.Out_of_memory_and_no_killable_processes
:95 17% 16:91 dmesg.RIP:mas_safe_min
:95 17% 16:91 dmesg.canonical_address#:#[##]
:95 78% 74:91 dmesg.invoked_oom-killer:gfp_mask=0x
since we are not sure if they are expected after this commit, just report FYI.
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202309102139.f96019d5-oliver.sang@intel.com
[ 444.720153][ T35] Writes: Total: 23172604 Max/Min: 11656389/11516215 Fail: 0
[ 506.160379][ T35] Writes: Total: 25012806 Max/Min: 12602093/12410713 Fail: 0
[ 567.601589][ T35] Writes: Total: 27405411 Max/Min: 13810351/13595060 Fail: 0
[ 577.965424][ T1] BUG at check_dup_gaps:2486 (1)
[ 577.966713][ T1] Pass: 3756763 Run:3756764
[ 577.967637][ T1] general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] PREEMPT KASAN
[ 577.969546][ T1] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7]
[ 577.969546][ T1] CPU: 0 PID: 1 Comm: swapper Tainted: G N 6.4.0-rc4-00075-ga5199577b1dd #1
[ 577.969546][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 577.969546][ T1] RIP: 0010:mas_safe_min (kbuild/src/consumer/lib/maple_tree.c:726)
[ 577.969546][ T1] Code: e8 d9 3b 90 fe 84 db 74 37 e8 d0 3b 90 fe 0f b6 db b8 ff ff 37 00 ff cb 48 c1 e0 2a 48 63 db 49 8d 1c dc 48 89 da 48 c1 ea 03 <80> 3c 02 00 74 08 48 89 df e8 fe 0f b8 fe 4c 8b 23 49 ff c4 eb 28
All code
========
0: e8 d9 3b 90 fe call 0xfffffffffe903bde
5: 84 db test %bl,%bl
7: 74 37 je 0x40
9: e8 d0 3b 90 fe call 0xfffffffffe903bde
e: 0f b6 db movzbl %bl,%ebx
11: b8 ff ff 37 00 mov $0x37ffff,%eax
16: ff cb dec %ebx
18: 48 c1 e0 2a shl $0x2a,%rax
1c: 48 63 db movslq %ebx,%rbx
1f: 49 8d 1c dc lea (%r12,%rbx,8),%rbx
23: 48 89 da mov %rbx,%rdx
26: 48 c1 ea 03 shr $0x3,%rdx
2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction
2e: 74 08 je 0x38
30: 48 89 df mov %rbx,%rdi
33: e8 fe 0f b8 fe call 0xfffffffffeb81036
38: 4c 8b 23 mov (%rbx),%r12
3b: 49 ff c4 inc %r12
3e: eb 28 jmp 0x68
Code starting with the faulting instruction
===========================================
0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
4: 74 08 je 0xe
6: 48 89 df mov %rbx,%rdi
9: e8 fe 0f b8 fe call 0xfffffffffeb8100c
e: 4c 8b 23 mov (%rbx),%r12
11: 49 ff c4 inc %r12
14: eb 28 jmp 0x3e
[ 577.969546][ T1] RSP: 0000:ffff88811037f9a8 EFLAGS: 00010206
[ 577.969546][ T1] RAX: dffffc0000000000 RBX: 00000000000000f0 RCX: 0000000000000000
[ 577.969546][ T1] RDX: 000000000000001e RSI: ffffffff829b7dfb RDI: ffff88811037fc50
[ 577.969546][ T1] RBP: ffff88811037fc50 R08: 0000000000000001 R09: 0000000000000100
[ 577.969546][ T1] R10: ffffffff81504a19 R11: ffffffff848decbf R12: 0000000000000000
[ 577.969546][ T1] R13: 000000000000001f R14: ffffffffffffffff R15: dffffc0000000000
[ 577.969546][ T1] FS: 0000000000000000(0000) GS:ffffffff83cca000(0000) knlGS:0000000000000000
[ 577.969546][ T1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 577.969546][ T1] CR2: ffff88843ffff000 CR3: 0000000003ca8000 CR4: 00000000000406f0
[ 577.969546][ T1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 577.969546][ T1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 577.969546][ T1] Call Trace:
[ 577.969546][ T1] <TASK>
[ 577.969546][ T1] ? __die_body (kbuild/src/consumer/arch/x86/kernel/dumpstack.c:421)
[ 577.969546][ T1] ? die_addr (kbuild/src/consumer/arch/x86/kernel/dumpstack.c:462)
[ 577.969546][ T1] ? exc_general_protection (kbuild/src/consumer/arch/x86/kernel/traps.c:786 kbuild/src/consumer/arch/x86/kernel/traps.c:728)
[ 577.969546][ T1] ? asm_exc_general_protection (kbuild/src/consumer/arch/x86/include/asm/idtentry.h:564)
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20230910/202309102139.f96019d5-oliver.sang@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
Powered by blists - more mailing lists