| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <202601271341.5d24a59f-lkp@intel.com>
Date: Tue, 27 Jan 2026 14:06:21 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Qiliang Yuan <realwujing@...il.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, Qiliang Yuan
<yuanql9@...natelecom.cn>, <linux-mm@...ck.org>, <vbabka@...e.cz>,
<akpm@...ux-foundation.org>, <david@...nel.org>, <edumazet@...gle.com>,
<hannes@...xchg.org>, <jackmanb@...gle.com>, <jis1@...natelecom.cn>,
<lance.yang@...ux.dev>, <linux-kernel@...r.kernel.org>,
<liyi1@...natelecom.cn>, <mhocko@...e.com>, <netdev@...r.kernel.org>,
<realwujing@...il.com>, <rppt@...nel.org>, <sunshx@...natelecom.cn>,
<surenb@...gle.com>, <wangh13@...natelecom.cn>, <weixugc@...gle.com>,
<willy@...radead.org>, <zhangjn11@...natelecom.cn>,
<zhangzq20@...natelecom.cn>, <ziy@...dia.com>, <oliver.sang@...el.com>
Subject: Re: [PATCH v7] mm/page_alloc: boost watermarks on atomic allocation
failure
Hello,
kernel test robot noticed "WARNING:inconsistent_lock_state" on:
commit: 4f0cbecbc533f56605274f6211e31907ed792bdf ("[PATCH v7] mm/page_alloc: boost watermarks on atomic allocation failure")
url: https://github.com/intel-lab-lkp/linux/commits/Qiliang-Yuan/mm-page_alloc-boost-watermarks-on-atomic-allocation-failure/20260123-144418
base: v6.19-rc6
patch link: https://lore.kernel.org/all/20260123064231.250767-1-realwujing@gmail.com/
patch subject: [PATCH v7] mm/page_alloc: boost watermarks on atomic allocation failure
in testcase: trinity
version: trinity-i386-abe9de86-1_20230429
with following parameters:
runtime: 600s
config: x86_64-randconfig-075-20251114
compiler: gcc-14
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G
(please refer to attached dmesg/kmsg for entire log/backtrace)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202601271341.5d24a59f-lkp@intel.com
[ 151.153230][ T1379] WARNING: inconsistent lock state
[ 151.153836][ T1379] 6.19.0-rc6-00001-g4f0cbecbc533 #1 Not tainted
[ 151.154605][ T1379] --------------------------------
[ 151.155192][ T1379] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.
[ 151.155825][ T1379] trinity-c0/1379 [HC0[0]:SC0[0]:HE1:SE1] takes:
[ 151.156424][ T1379] ffffffff8865d9e8 (&zone->lock){+.?.}-{3:3}, at: __alloc_pages_slowpath+0x1265/0x1b00
[ 151.157399][ T1379] {IN-SOFTIRQ-W} state was registered at:
[ 151.158029][ T1379] __lock_acquire (kernel/locking/lockdep.c:5191 (discriminator 1))
[ 151.158629][ T1379] lock_acquire (include/trace/events/lock.h:24 (discriminator 15) include/trace/events/lock.h:24 (discriminator 15) kernel/locking/lockdep.c:5831 (discriminator 15))
[ 151.159221][ T1379] lock_acquire (kernel/locking/lockdep.c:5833)
[ 151.159670][ T1379] _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162)
[ 151.160180][ T1379] rmqueue_bulk (mm/page_alloc.c:2592 (discriminator 1))
[ 151.160637][ T1379] __rmqueue_pcplist (mm/page_alloc.c:3374 (discriminator 3))
[ 151.161132][ T1379] rmqueue+0x1b3c/0x3400
[ 151.161630][ T1379] get_page_from_freelist (mm/page_alloc.c:3982)
[ 151.162294][ T1379] __alloc_frozen_pages_noprof (mm/page_alloc.c:5282)
[ 151.163006][ T1379] allocate_slab (mm/slub.c:3079 mm/slub.c:3248)
[ 151.163482][ T1379] ___slab_alloc (mm/slub.c:3302 mm/slub.c:4656)
[ 151.163962][ T1379] __slab_alloc+0x30/0x80
[ 151.164464][ T1379] __kmalloc_noprof (mm/slub.c:4855 mm/slub.c:5251 mm/slub.c:5656 mm/slub.c:5669)
[ 151.164954][ T1379] alloc_ep_req (drivers/usb/gadget/u_f.c:22 (discriminator 4))
[ 151.165425][ T1379] source_sink_start_ep (drivers/usb/gadget/function/f_sourcesink.c:292 drivers/usb/gadget/function/f_sourcesink.c:608)
[ 151.166375][ T1379] enable_source_sink (drivers/usb/gadget/function/f_sourcesink.c:662)
[ 151.167006][ T1379] sourcesink_set_alt (drivers/usb/gadget/function/f_sourcesink.c:744)
[ 151.167515][ T1379] set_config+0x323/0xb00
[ 151.168019][ T1379] composite_setup (include/linux/spinlock.h:391 drivers/usb/gadget/composite.c:1901)
[ 151.168548][ T1379] dummy_timer (include/linux/spinlock.h:351 drivers/usb/gadget/udc/dummy_hcd.c:1929)
[ 151.169019][ T1379] __hrtimer_run_queues (kernel/time/hrtimer.c:1777 kernel/time/hrtimer.c:1841)
[ 151.169550][ T1379] hrtimer_run_softirq (kernel/time/hrtimer.c:1860)
[ 151.170198][ T1379] handle_softirqs (arch/x86/include/asm/jump_label.h:37 include/trace/events/irq.h:142 kernel/softirq.c:623)
[ 151.170817][ T1379] __irq_exit_rcu (kernel/softirq.c:657 kernel/softirq.c:496 kernel/softirq.c:723)
[ 151.171325][ T1379] irq_exit_rcu (kernel/softirq.c:741 (discriminator 38))
[ 151.171780][ T1379] sysvec_call_function_single (arch/x86/kernel/smp.c:266 (discriminator 35) arch/x86/kernel/smp.c:266 (discriminator 35))
[ 151.172366][ T1379] asm_sysvec_call_function_single (arch/x86/include/asm/idtentry.h:704)
[ 151.172952][ T1379] pv_native_safe_halt (arch/x86/kernel/paravirt.c:82)
[ 151.173449][ T1379] arch_cpu_idle (arch/x86/kernel/process.c:805)
[ 151.173991][ T1379] default_idle_call (include/linux/cpuidle.h:143 (discriminator 1) kernel/sched/idle.c:123 (discriminator 1))
[ 151.174997][ T1379] cpuidle_idle_call (kernel/sched/idle.c:192)
[ 151.175913][ T1379] do_idle (kernel/sched/idle.c:332)
[ 151.176666][ T1379] cpu_startup_entry (kernel/sched/idle.c:429)
[ 151.177536][ T1379] rest_init (init/main.c:757)
[ 151.178357][ T1379] start_kernel (init/main.c:1206)
[ 151.179249][ T1379] x86_64_start_reservations (arch/x86/kernel/head64.c:310)
[ 151.180213][ T1379] x86_64_start_kernel (??:?)
[ 151.181119][ T1379] common_startup_64 (arch/x86/kernel/head_64.S:419)
[ 151.181992][ T1379] irq event stamp: 16437333
[ 151.182773][ T1379] hardirqs last enabled at (16437333): _raw_spin_unlock_irq (arch/x86/include/asm/irqflags.h:42 arch/x86/include/asm/irqflags.h:119 include/linux/spinlock_api_smp.h:159 kernel/locking/spinlock.c:202)
[ 151.184399][ T1379] hardirqs last disabled at (16437332): _raw_spin_lock_irq (include/linux/spinlock_api_smp.h:117 (discriminator 1) kernel/locking/spinlock.c:170 (discriminator 1))
[ 151.186068][ T1379] softirqs last enabled at (16422642): handle_softirqs (kernel/softirq.c:469 (discriminator 2) kernel/softirq.c:650 (discriminator 2))
[ 151.187758][ T1379] softirqs last disabled at (16422637): __irq_exit_rcu (kernel/softirq.c:657 kernel/softirq.c:496 kernel/softirq.c:723)
[ 151.189383][ T1379]
[ 151.189383][ T1379] other info that might help us debug this:
[ 151.190809][ T1379] Possible unsafe locking scenario:
[ 151.190809][ T1379]
[ 151.192092][ T1379] CPU0
[ 151.192740][ T1379] ----
[ 151.193401][ T1379] lock(&zone->lock);
[ 151.194192][ T1379] <Interrupt>
[ 151.194940][ T1379] lock(&zone->lock);
[ 151.195734][ T1379]
[ 151.195734][ T1379] *** DEADLOCK ***
[ 151.195734][ T1379]
[ 151.197223][ T1379] 2 locks held by trinity-c0/1379:
[ 151.198134][ T1379] #0: ffff8881001b2400 (sb_writers#5){.+.+}-{0:0}, at: ksys_fallocate (include/linux/file.h:62 (discriminator 1) include/linux/file.h:83 (discriminator 1) fs/open.c:358 (discriminator 1))
[ 151.199767][ T1379] #1: ffff8881373cd0d0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: shmem_fallocate (mm/shmem.c:3688)
[ 151.201543][ T1379]
[ 151.201543][ T1379] stack backtrace:
[ 151.202709][ T1379] CPU: 0 UID: 65534 PID: 1379 Comm: trinity-c0 Not tainted 6.19.0-rc6-00001-g4f0cbecbc533 #1 PREEMPT 5190a26909b47a16cbbcf00ba20dd51a77658a62
[ 151.202723][ T1379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 151.202735][ T1379] Call Trace:
[ 151.202739][ T1379] <TASK>
[ 151.202743][ T1379] dump_stack_lvl (lib/dump_stack.c:122)
[ 151.202760][ T1379] dump_stack (lib/dump_stack.c:130)
[ 151.202766][ T1379] print_usage_bug+0x25d/0x380
[ 151.202775][ T1379] mark_lock_irq (kernel/locking/lockdep.c:4268)
[ 151.202782][ T1379] ? save_trace (kernel/locking/lockdep.c:557 (discriminator 1) kernel/locking/lockdep.c:594 (discriminator 1))
[ 151.202792][ T1379] mark_lock (kernel/locking/lockdep.c:4753)
[ 151.202798][ T1379] mark_usage (kernel/locking/lockdep.c:4666 (discriminator 1))
[ 151.202803][ T1379] __lock_acquire (kernel/locking/lockdep.c:5191 (discriminator 1))
[ 151.202809][ T1379] ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1))
[ 151.202815][ T1379] lock_acquire (include/trace/events/lock.h:24 (discriminator 15) include/trace/events/lock.h:24 (discriminator 15) kernel/locking/lockdep.c:5831 (discriminator 15))
[ 151.202820][ T1379] ? __alloc_pages_slowpath+0x1265/0x1b00
[ 151.202832][ T1379] ? get_page_from_freelist (mm/page_alloc.c:3733 (discriminator 1) mm/page_alloc.c:3936 (discriminator 1))
[ 151.202838][ T1379] ? wakeup_kswapd (arch/x86/include/asm/atomic64_64.h:15 include/linux/atomic/atomic-arch-fallback.h:2583 include/linux/atomic/atomic-long.h:38 include/linux/atomic/atomic-instrumented.h:3189 include/linux/mmzone.h:1106 include/linux/mmzone.h:1600 mm/vmscan.c:7378)
[ 151.202848][ T1379] lock_acquire (kernel/locking/lockdep.c:5833)
[ 151.202853][ T1379] ? __alloc_pages_slowpath+0x1265/0x1b00
[ 151.202861][ T1379] _raw_spin_lock (include/linux/spinlock_api_smp.h:134 kernel/locking/spinlock.c:154)
[ 151.202869][ T1379] ? __alloc_pages_slowpath+0x1265/0x1b00
[ 151.202876][ T1379] __alloc_pages_slowpath+0x1265/0x1b00
[ 151.202887][ T1379] ? warn_alloc (mm/page_alloc.c:4731)
[ 151.202896][ T1379] ? get_page_from_freelist (mm/page_alloc.c:3733 (discriminator 1) mm/page_alloc.c:3936 (discriminator 1))
[ 151.202902][ T1379] ? lock_is_held_type (kernel/locking/lockdep.c:5601 (discriminator 1) kernel/locking/lockdep.c:5940 (discriminator 1))
[ 151.202913][ T1379] __alloc_frozen_pages_noprof (mm/page_alloc.c:5295)
[ 151.202920][ T1379] ? __alloc_pages_slowpath+0x1b00/0x1b00
[ 151.202929][ T1379] ? filemap_get_entry (mm/filemap.c:1888)
[ 151.202936][ T1379] ? __folio_lock_or_retry (mm/filemap.c:1888)
[ 151.202944][ T1379] __folio_alloc_noprof (mm/page_alloc.c:5316 mm/page_alloc.c:5326)
[ 151.202951][ T1379] shmem_alloc_and_add_folio+0xfc/0x3c0
[ 151.202961][ T1379] shmem_get_folio_gfp+0x388/0xd80
[ 151.202970][ T1379] shmem_fallocate (mm/shmem.c:3780)
[ 151.202980][ T1379] ? shmem_get_link (mm/shmem.c:3675)
[ 151.202987][ T1379] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[ 151.202998][ T1379] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1))
[ 151.203003][ T1379] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[ 151.203013][ T1379] ? lock_acquire (include/trace/events/lock.h:24 (discriminator 15) include/trace/events/lock.h:24 (discriminator 15) kernel/locking/lockdep.c:5831 (discriminator 15))
[ 151.203018][ T1379] ? ksys_fallocate (include/linux/file.h:62 (discriminator 1) include/linux/file.h:83 (discriminator 1) fs/open.c:358 (discriminator 1))
[ 151.203030][ T1379] ? lock_is_held_type (kernel/locking/lockdep.c:5601 (discriminator 1) kernel/locking/lockdep.c:5940 (discriminator 1))
[ 151.203039][ T1379] vfs_fallocate (fs/open.c:339 (discriminator 1))
[ 151.203047][ T1379] ksys_fallocate (include/linux/file.h:62 (discriminator 1) include/linux/file.h:83 (discriminator 1) fs/open.c:358 (discriminator 1))
[ 151.203055][ T1379] __ia32_sys_ia32_fallocate (arch/x86/kernel/sys_ia32.c:119)
[ 151.203065][ T1379] ? __do_fast_syscall_32 (arch/x86/include/asm/irqflags.h:42 arch/x86/include/asm/irqflags.h:119 arch/x86/entry/syscall_32.c:280)
[ 151.203074][ T1379] ia32_sys_call (arch/x86/entry/syscall_32.c:50)
[ 151.203079][ T1379] __do_fast_syscall_32 (arch/x86/entry/syscall_32.c:83 (discriminator 1) arch/x86/entry/syscall_32.c:307 (discriminator 1))
[ 151.203088][ T1379] do_fast_syscall_32 (arch/x86/entry/syscall_32.c:332 (discriminator 1))
[ 151.203096][ T1379] do_SYSENTER_32 (arch/x86/entry/syscall_32.c:371)
[ 151.203103][ T1379] entry_SYSENTER_compat_after_hwframe (arch/x86/entry/entry_64_compat.S:127)
[ 151.203111][ T1379] RIP: 0023:0xf7ed9589
[ 151.203118][ T1379] Code: 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
All code
========
0: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi
...
20: 00 51 52 add %dl,0x52(%rcx)
23: 55 push %rbp
24: 89 e5 mov %esp,%ebp
26:* 0f 34 sysenter <-- trapping instruction
28: cd 80 int $0x80
2a: 5d pop %rbp
2b: 5a pop %rdx
2c: 59 pop %rcx
2d: c3 ret
2e: 90 nop
2f: 90 nop
30: 90 nop
31: 90 nop
32: 2e 8d b4 26 00 00 00 cs lea 0x0(%rsi,%riz,1),%esi
39: 00
3a: 8d .byte 0x8d
3b: b4 26 mov $0x26,%ah
3d: 00 00 add %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 5d pop %rbp
1: 5a pop %rdx
2: 59 pop %rcx
3: c3 ret
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 2e 8d b4 26 00 00 00 cs lea 0x0(%rsi,%riz,1),%esi
f: 00
10: 8d .byte 0x8d
11: b4 26 mov $0x26,%ah
13: 00 00 add %al,(%rax)
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260127/202601271341.5d24a59f-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
Powered by blists - more mailing lists