lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <202510160935.b4c10a7e-lkp@intel.com>
Date: Thu, 16 Oct 2025 10:13:45 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Ian Rogers <irogers@...gle.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, <linux-kernel@...r.kernel.org>,
	Namhyung Kim <namhyung@...nel.org>, <linux-perf-users@...r.kernel.org>,
	<oliver.sang@...el.com>
Subject: [linus:master] [perf test]  2d58468864:
 kmsg.sanitizer.indirect_leak/malloc/maps__by_name_index/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/machine__process_ksymbol/free/map__put/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/malloc/map__get/__maps__insert_sorted/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/maps__by_name_index/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/machine__process_ksymbol/free/map__put/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/malloc/map__get/__maps__insert_sorted/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register



Hello,


we noticed the issue in new added test and test itself failed.


kernel test robot noticed "kmsg.sanitizer.indirect_leak/malloc/maps__by_name_index/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/machine__process_ksymbol/free/map__put/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/malloc/map__get/__maps__insert_sorted/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/maps__by_name_index/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/machine__process_ksymbol/free/map__put/__maps__remove/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register/malloc/map__get/__maps__insert_sorted/__maps__fixup_overlap_and_insert/maps__fixup_overlap_and_insert/machine__process_ksymbol_register" on:

commit: 2d584688643fac90428ab12513e05d6deff7c606 ("perf test: Add header shell test")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

[test failed on      linus/master 3a8660878839faadb4f1a6dd72c3179c1df56787]
[test failed on linux-next/master 52ba76324a9d7c39830c850999210a36ef023cde]
[test failed on        fix commit 844f962ca6bf5b01d0af0bc62a7f06135581fe92]

in testcase: perf-sanity-tests
version: 
with following parameters:

	perf_compiler: clang
	group: group-02



config: x86_64-rhel-9.4-bpf
compiler: gcc-14
test machine: 20 threads 1 sockets (Commet Lake) with 16G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202510160935.b4c10a7e-lkp@intel.com


2025-10-13 10:33:04 sudo /usr/src/linux-perf-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf test 82 -v
 82: perf header tests                                               : Running (1 active)
--- start ---
test child forked, pid 11993
Test perf header file
[ perf record: Woken up 2 times to write data ]
=================================================================
==11998==ERROR: AddressSanitizer: heap-use-after-free on address 0x502000039c50 at pc 0x55831a0ef091 bp 0x7ffd8cf52980 sp 0x7ffd8cf52978
READ of size 8 at 0x502000039c50 thread T0
    #0 0x55831a0ef090 in maps__by_name_index util/maps.c:423
    #1 0x55831a0efc72 in __maps__remove util/maps.c:536
    #2 0x55831a0f3849 in __maps__fixup_overlap_and_insert util/maps.c:956
    #3 0x55831a0f3975 in maps__fixup_overlap_and_insert util/maps.c:975
    #4 0x55831a0c92e0 in machine__process_ksymbol_register util/machine.c:756
    #5 0x55831a0c9aa8 in machine__process_ksymbol util/machine.c:824
    #6 0x558319f713be in perf_event__process_ksymbol util/event.c:297
    #7 0x55831a10acce in machines__deliver_event util/session.c:1344
    #8 0x55831a10b342 in perf_session__deliver_event util/session.c:1381
    #9 0x55831a10ec96 in perf_session__process_event util/session.c:1674
    #10 0x55831a116359 in process_simple util/session.c:2251
    #11 0x55831a115319 in reader__read_event util/session.c:2180
    #12 0x55831a115cbf in reader__process_events util/session.c:2229
    #13 0x55831a116b48 in __perf_session__process_events util/session.c:2274
    #14 0x55831a119c04 in perf_session__process_events util/session.c:2438
    #15 0x558319a4b942 in process_buildids /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1492
    #16 0x558319a50376 in record__finish_output /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1815
    #17 0x558319a5e2f9 in __cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:2876
    #18 0x558319a6b9f4 in cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:4350
    #19 0x558319c7dc20 in run_builtin /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:351
    #20 0x558319c7e520 in handle_internal_command /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:404
    #21 0x558319c7ea76 in run_argv /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:448
    #22 0x558319c7f21d in main /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:556
    #23 0x7fa209c64ca7  (/lib/x86_64-linux-gnu/libc.so.6+0x29ca7) (BuildId: def5460e3cee00bfee25b429c97bcc4853e5b3a8)
    #24 0x7fa209c64d64 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29d64) (BuildId: def5460e3cee00bfee25b429c97bcc4853e5b3a8)
    #25 0x5583199eb4f0 in _start (/usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf+0x102b4f0) (BuildId: 40dc84e2c3040544dfd4a81fbc58e1bb98e5bb4e)

0x502000039c50 is located 0 bytes inside of 8-byte region [0x502000039c50,0x502000039c58)
freed by thread T0 here:
    #0 0x7fa20aebf8f8 in free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
    #1 0x55831a0e7d3a in map__put util/map.c:313
    #2 0x55831a0efb77 in __maps__remove util/maps.c:530
    #3 0x55831a0f3849 in __maps__fixup_overlap_and_insert util/maps.c:956
    #4 0x55831a0f3975 in maps__fixup_overlap_and_insert util/maps.c:975
    #5 0x55831a0c92e0 in machine__process_ksymbol_register util/machine.c:756
    #6 0x55831a0c9aa8 in machine__process_ksymbol util/machine.c:824
    #7 0x558319f713be in perf_event__process_ksymbol util/event.c:297
    #8 0x55831a10acce in machines__deliver_event util/session.c:1344
    #9 0x55831a10b342 in perf_session__deliver_event util/session.c:1381
    #10 0x55831a10ec96 in perf_session__process_event util/session.c:1674
    #11 0x55831a116359 in process_simple util/session.c:2251
    #12 0x55831a115319 in reader__read_event util/session.c:2180
    #13 0x55831a115cbf in reader__process_events util/session.c:2229
    #14 0x55831a116b48 in __perf_session__process_events util/session.c:2274
    #15 0x55831a119c04 in perf_session__process_events util/session.c:2438
    #16 0x558319a4b942 in process_buildids /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1492
    #17 0x558319a50376 in record__finish_output /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1815
    #18 0x558319a5e2f9 in __cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:2876
    #19 0x558319a6b9f4 in cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:4350
    #20 0x558319c7dc20 in run_builtin /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:351
    #21 0x558319c7e520 in handle_internal_command /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:404
    #22 0x558319c7ea76 in run_argv /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:448
    #23 0x558319c7f21d in main /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:556
    #24 0x7fa209c64ca7  (/lib/x86_64-linux-gnu/libc.so.6+0x29ca7) (BuildId: def5460e3cee00bfee25b429c97bcc4853e5b3a8)

previously allocated by thread T0 here:
    #0 0x7fa20aec0c57 in malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
    #1 0x55831a0eb14a in map__get util/map.h:189
    #2 0x55831a0f22ab in __maps__insert_sorted util/maps.c:791
    #3 0x55831a0f38c0 in __maps__fixup_overlap_and_insert util/maps.c:965
    #4 0x55831a0f3975 in maps__fixup_overlap_and_insert util/maps.c:975
    #5 0x55831a0c92e0 in machine__process_ksymbol_register util/machine.c:756
    #6 0x55831a0c9aa8 in machine__process_ksymbol util/machine.c:824
    #7 0x558319f713be in perf_event__process_ksymbol util/event.c:297
    #8 0x55831a10acce in machines__deliver_event util/session.c:1344
    #9 0x55831a10b342 in perf_session__deliver_event util/session.c:1381
    #10 0x55831a10ec96 in perf_session__process_event util/session.c:1674
    #11 0x55831a116359 in process_simple util/session.c:2251
    #12 0x55831a115319 in reader__read_event util/session.c:2180
    #13 0x55831a115cbf in reader__process_events util/session.c:2229
    #14 0x55831a116b48 in __perf_session__process_events util/session.c:2274
    #15 0x55831a119c04 in perf_session__process_events util/session.c:2438
    #16 0x558319a4b942 in process_buildids /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1492
    #17 0x558319a50376 in record__finish_output /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:1815
    #18 0x558319a5e2f9 in __cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:2876
    #19 0x558319a6b9f4 in cmd_record /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/builtin-record.c:4350
    #20 0x558319c7dc20 in run_builtin /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:351
    #21 0x558319c7e520 in handle_internal_command /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:404
    #22 0x558319c7ea76 in run_argv /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:448
    #23 0x558319c7f21d in main /usr/src/perf_selftests-x86_64-rhel-9.4-bpf-2d584688643fac90428ab12513e05d6deff7c606/tools/perf/perf.c:556
    #24 0x7fa209c64ca7  (/lib/x86_64-linux-gnu/libc.so.6+0x29ca7) (BuildId: def5460e3cee00bfee25b429c97bcc4853e5b3a8)

SUMMARY: AddressSanitizer: heap-use-after-free util/maps.c:423 in maps__by_name_index
Shadow bytes around the buggy address:
  0x502000039980: fa fa fd fa fa fa 01 fa fa fa fd fa fa fa fd fa
  0x502000039a00: fa fa 00 fa fa fa 00 fa fa fa 00 fa fa fa 06 fa
  0x502000039a80: fa fa fd fd fa fa 00 fa fa fa fd fa fa fa fd fa
  0x502000039b00: fa fa fd fa fa fa fd fa fa fa 00 fa fa fa 00 fa
  0x502000039b80: fa fa 00 04 fa fa 00 fa fa fa 00 fa fa fa fd fa
=>0x502000039c00: fa fa fd fa fa fa 00 fa fa fa[fd]fa fa fa 00 fa
  0x502000039c80: fa fa 00 06 fa fa 00 01 fa fa 00 01 fa fa 00 03
  0x502000039d00: fa fa 00 00 fa fa 00 05 fa fa 00 03 fa fa 00 02
  0x502000039d80: fa fa 00 03 fa fa 00 02 fa fa 00 01 fa fa 00 06
  0x502000039e00: fa fa fd fa fa fa fd fa fa fa 00 fa fa fa 00 fa
  0x502000039e80: fa fa 00 fa fa fa fd fa fa fa fd fa fa fa 00 fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==11998==ABORTING
Unexpected signal in test_file
---- end(-1) ----
 82: perf header tests                                               : FAILED!



The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20251016/202510160935.b4c10a7e-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ