| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20150312032924.GA12390@wfg-t540p.sh.intel.com>
Date: Thu, 12 Mar 2015 11:29:24 +0800
From: Fengguang Wu <fengguang.wu@...el.com>
To: Herbert Xu <herbert@...dor.apana.org.au>
Cc: fengguang.wu@...el.com, LKP <lkp@...org>, netdev@...r.kernel.org,
linux-kernel@...r.kernel.org,
Jeff Kirsher <jeffrey.t.kirsher@...el.com>
Subject: [rhashtable] [ INFO: possible recursive locking detected ]
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/net-next.git master
commit aa34a6cb0478842452bac58edb50d3ef9e178c92
Author: Herbert Xu <herbert@...dor.apana.org.au>
AuthorDate: Wed Mar 11 09:43:48 2015 +1100
Commit: David S. Miller <davem@...emloft.net>
CommitDate: Wed Mar 11 16:36:21 2015 -0400
rhashtable: Add arbitrary rehash function
This patch adds a rehash function that supports the use of any
hash function for the new table. This is needed to support changing
the random seed value during the lifetime of the hash table.
However for now the random seed value is still constant and the
rehash function is simply used to replace the existing expand/shrink
functions.
[ ASSERT_BUCKET_LOCK() and thus debug_dump_table() +
debug_dump_buckets() are not longer used, so delete them
entirely. -DaveM ]
Signed-off-by: Herbert Xu <herbert.xu@...hat.com>
Signed-off-by: David S. Miller <davem@...emloft.net>
+------------------------------------------+------------+------------+------------+
| | 988dfbd795 | aa34a6cb04 | 61f0d861fc |
+------------------------------------------+------------+------------+------------+
| boot_successes | 60 | 0 | 0 |
| boot_failures | 0 | 20 | 14 |
| INFO:possible_recursive_locking_detected | 0 | 20 | 14 |
| backtrace:test_rht_init | 0 | 20 | 14 |
| backtrace:rhashtable_expand | 0 | 20 | 14 |
| backtrace:kernel_init_freeable | 0 | 20 | 14 |
+------------------------------------------+------------+------------+------------+
[ 2.307176]
[ 2.307922] =============================================
[ 2.307922] =============================================
[ 2.310446] [ INFO: possible recursive locking detected ]
[ 2.310446] [ INFO: possible recursive locking detected ]
[ 2.311089] 4.0.0-rc3-00505-gaa34a6c #7 Not tainted
[ 2.311089] 4.0.0-rc3-00505-gaa34a6c #7 Not tainted
[ 2.311089] ---------------------------------------------
[ 2.311089] ---------------------------------------------
[ 2.311089] swapper/1 is trying to acquire lock:
[ 2.311089] swapper/1 is trying to acquire lock:
[ 2.311089] (
[ 2.311089] (&(&tbl->locks[i])->rlock&(&tbl->locks[i])->rlock){+.....}){+.....}, at: , at: [<ffffffff813ef48d>] rhashtable_rehash+0xfd/0x1a0
[<ffffffff813ef48d>] rhashtable_rehash+0xfd/0x1a0
[ 2.311089]
[ 2.311089] but task is already holding lock:
[ 2.311089]
[ 2.311089] but task is already holding lock:
[ 2.311089] (
[ 2.311089] (&(&tbl->locks[i])->rlock&(&tbl->locks[i])->rlock){+.....}){+.....}, at: , at: [<ffffffff813ef401>] rhashtable_rehash+0x71/0x1a0
[<ffffffff813ef401>] rhashtable_rehash+0x71/0x1a0
[ 2.311089]
[ 2.311089] other info that might help us debug this:
[ 2.311089]
[ 2.311089] other info that might help us debug this:
[ 2.311089] Possible unsafe locking scenario:
[ 2.311089]
[ 2.311089] Possible unsafe locking scenario:
[ 2.311089]
[ 2.311089] CPU0
[ 2.311089] CPU0
[ 2.311089] ----
[ 2.311089] ----
[ 2.311089] lock(
[ 2.311089] lock(&(&tbl->locks[i])->rlock&(&tbl->locks[i])->rlock);
);
[ 2.311089] lock(
[ 2.311089] lock(&(&tbl->locks[i])->rlock&(&tbl->locks[i])->rlock);
);
[ 2.311089]
[ 2.311089] *** DEADLOCK ***
[ 2.311089]
[ 2.311089]
[ 2.311089] *** DEADLOCK ***
[ 2.311089]
[ 2.311089] May be due to missing lock nesting notation
[ 2.311089]
[ 2.311089] May be due to missing lock nesting notation
[ 2.311089]
[ 2.311089] 2 locks held by swapper/1:
[ 2.311089] 2 locks held by swapper/1:
[ 2.311089] #0:
[ 2.311089] #0: ( (&ht->mutex&ht->mutex){+.+.+.}){+.+.+.}, at: , at: [<ffffffff81eb1d2e>] test_rht_init+0x15c/0x37d
[<ffffffff81eb1d2e>] test_rht_init+0x15c/0x37d
[ 2.311089] #1:
[ 2.311089] #1: ( (&(&tbl->locks[i])->rlock&(&tbl->locks[i])->rlock){+.....}){+.....}, at: , at: [<ffffffff813ef401>] rhashtable_rehash+0x71/0x1a0
[<ffffffff813ef401>] rhashtable_rehash+0x71/0x1a0
[ 2.311089]
[ 2.311089] stack backtrace:
[ 2.311089]
[ 2.311089] stack backtrace:
[ 2.311089] CPU: 0 PID: 1 Comm: swapper Not tainted 4.0.0-rc3-00505-gaa34a6c #7
[ 2.311089] CPU: 0 PID: 1 Comm: swapper Not tainted 4.0.0-rc3-00505-gaa34a6c #7
[ 2.311089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.7.5-20140531_083030-gandalf 04/01/2014
[ 2.311089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.7.5-20140531_083030-gandalf 04/01/2014
[ 2.311089] ffffffff826cedb0
[ 2.311089] ffffffff826cedb0 ffff88001246fc18 ffff88001246fc18 ffffffff817c123e ffffffff817c123e ffff88001246fcf8 ffff88001246fcf8
[ 2.311089] ffffffff81098da8
[ 2.311089] ffffffff81098da8 0000000000000292 0000000000000292 ffffffff81e1d7b8 ffffffff81e1d7b8 ffff88001246fc48 ffff88001246fc48
[ 2.311089] ffffffff00000000
[ 2.311089] ffffffff00000000 000000001246fc68 000000001246fc68 000000040c102081 000000040c102081 0000000000000002 0000000000000002
[ 2.311089] Call Trace:
[ 2.311089] Call Trace:
[ 2.311089] [<ffffffff817c123e>] dump_stack+0x19/0x1b
[ 2.311089] [<ffffffff817c123e>] dump_stack+0x19/0x1b
[ 2.311089] [<ffffffff81098da8>] __lock_acquire+0x17a8/0x2180
[ 2.311089] [<ffffffff81098da8>] __lock_acquire+0x17a8/0x2180
[ 2.311089] [<ffffffff81099fda>] lock_acquire+0x6a/0x90
[ 2.311089] [<ffffffff81099fda>] lock_acquire+0x6a/0x90
[ 2.311089] [<ffffffff813ef48d>] ? rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff813ef48d>] ? rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff81eb1cba>] ? test_rht_init+0xe8/0x37d
[ 2.311089] [<ffffffff81eb1cba>] ? test_rht_init+0xe8/0x37d
[ 2.311089] [<ffffffff817c7377>] _raw_spin_lock+0x37/0x70
[ 2.311089] [<ffffffff817c7377>] _raw_spin_lock+0x37/0x70
[ 2.311089] [<ffffffff813ef48d>] ? rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff813ef48d>] ? rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff813ef48d>] rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff813ef48d>] rhashtable_rehash+0xfd/0x1a0
[ 2.311089] [<ffffffff81eb1cba>] ? test_rht_init+0xe8/0x37d
[ 2.311089] [<ffffffff81eb1cba>] ? test_rht_init+0xe8/0x37d
[ 2.311089] [<ffffffff81eb1bd2>] ? test_rht_lookup+0xca/0xca
[ 2.311089] [<ffffffff81eb1bd2>] ? test_rht_lookup+0xca/0xca
[ 2.311089] [<ffffffff813eff12>] rhashtable_expand+0x42/0x70
[ 2.311089] [<ffffffff813eff12>] rhashtable_expand+0x42/0x70
[ 2.311089] [<ffffffff81eb1d3a>] test_rht_init+0x168/0x37d
[ 2.311089] [<ffffffff81eb1d3a>] test_rht_init+0x168/0x37d
[ 2.311089] [<ffffffff81124838>] ? kfree+0xa8/0x110
[ 2.311089] [<ffffffff81124838>] ? kfree+0xa8/0x110
[ 2.311089] [<ffffffff813f19c0>] ? test_fw_misc_read+0x60/0x60
[ 2.311089] [<ffffffff813f19c0>] ? test_fw_misc_read+0x60/0x60
[ 2.311089] [<ffffffff810002a4>] do_one_initcall+0x84/0x1c0
[ 2.311089] [<ffffffff810002a4>] do_one_initcall+0x84/0x1c0
[ 2.311089] [<ffffffff81e930c4>] kernel_init_freeable+0x1eb/0x273
[ 2.311089] [<ffffffff81e930c4>] kernel_init_freeable+0x1eb/0x273
[ 2.311089] [<ffffffff817bcef0>] ? rest_init+0xc0/0xc0
[ 2.311089] [<ffffffff817bcef0>] ? rest_init+0xc0/0xc0
[ 2.311089] [<ffffffff817bcef9>] kernel_init+0x9/0xf0
[ 2.311089] [<ffffffff817bcef9>] kernel_init+0x9/0xf0
[ 2.311089] [<ffffffff817c8297>] ret_from_fork+0x57/0x90
[ 2.311089] [<ffffffff817c8297>] ret_from_fork+0x57/0x90
[ 2.311089] [<ffffffff817bcef0>] ? rest_init+0xc0/0xc0
[ 2.311089] [<ffffffff817bcef0>] ? rest_init+0xc0/0xc0
[ 2.566279] Verifying lookups...
[ 2.566279] Verifying lookups...
[ 2.570044] Table expansion iteration 1...
git bisect start 61f0d861fc6924fa673ecf1128a911d49cb10dc8 2c90331cf5ed1d648a711b9483e173aaaf2c4a9b --
git bisect good 843c2fdf7a12951815d981fa431d7e04d8259332 # 07:17 20+ 0 net: dctcp: loosen requirement to assert ECT(0) during 3WHS
git bisect good 723b8e460d87e957f251dc5764f4ab86af6ab44e # 07:45 20+ 0 udp: In udp_flow_src_port use random hash value if skb_get_hash fails
git bisect good 496127290f298d839918a14728b653b43ef02708 # 07:53 20+ 0 inet_diag: remove duplicate code from inet_twsk_diag_dump()
git bisect good cbe21d92e4d501e4895ef668b43fd8998c9b3b02 # 08:10 20+ 0 net: stmmac: make reset control an optional requirement
git bisect good bf0b211256be342e92d3ee5c5a1fb8d42f3928bb # 08:33 20+ 0 Merge branch 'dsa-next'
git bisect good ddb4b9a1328ea89733133e86cf1972d23891abfc # 08:44 20+ 0 fib_trie: Address possible NULL pointer dereference in resize
git bisect bad aa34a6cb0478842452bac58edb50d3ef9e178c92 # 09:02 0- 1 rhashtable: Add arbitrary rehash function
git bisect good 0ddcf43d5d4a03ded1ee3f6b3b72a0cbed4e90b1 # 09:09 20+ 0 ipv4: FIB Local/MAIN table collapse
git bisect good 988dfbd795cf08b00576c1ced4210281b2bccffc # 09:23 20+ 0 rhashtable: Move hash_rnd into bucket_table
# first bad commit: [aa34a6cb0478842452bac58edb50d3ef9e178c92] rhashtable: Add arbitrary rehash function
git bisect good 988dfbd795cf08b00576c1ced4210281b2bccffc # 09:26 60+ 0 rhashtable: Move hash_rnd into bucket_table
# extra tests with DEBUG_INFO
git bisect bad aa34a6cb0478842452bac58edb50d3ef9e178c92 # 09:35 0- 2 rhashtable: Add arbitrary rehash function
# extra tests on HEAD of net-next/master
git bisect bad 61f0d861fc6924fa673ecf1128a911d49cb10dc8 # 09:35 0- 14 fib_trie: Fix uninitialized variable warning
# extra tests with first bad commit reverted
# extra tests on tree/branch linus/master
git bisect good cca28a5fda5d8fa69982bdb54341eeeb3eab215a # 09:54 60+ 1 Merge tag 'for-linus-20150310' of git://git.infradead.org/linux-mtd
# extra tests on tree/branch next/master
git bisect good 23bd64da26b62ee37a637be015149b703e6c3d04 # 10:08 60+ 0 Add linux-next specific files for 20150311
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
initrd=quantal-core-x86_64.cgz
wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
kvm=(
qemu-system-x86_64
-cpu kvm64
-enable-kvm
-kernel $kernel
-initrd $initrd
-m 320
-smp 2
-net nic,vlan=1,model=e1000
-net user,vlan=1
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
rd.udev.log-priority=err
systemd.log_target=journal
systemd.log_level=warning
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
Thanks,
Fengguang
View attachment "dmesg-quantal-client9-13:20150312090115:x86_64-randconfig-iv1-03120156:4.0.0-rc3-00505-gaa34a6c:7" of type "text/plain" (86091 bytes)
View attachment "config-4.0.0-rc3-00505-gaa34a6c" of type "text/plain" (91963 bytes)
Powered by blists - more mailing lists