lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Tue, 8 May 2018 11:18:54 +0800
From:   kernel test robot <shun.hao@...el.com>
To:     Ursula Braun <ubraun@...ux.vnet.ibm.com>
Cc:     linux-s390@...r.kernel.org, netdev@...r.kernel.org,
        linux-kernel@...r.kernel.org, LKP <lkp@...org>
Subject: [lkp-robot] 51f1de79ad [   72.673003] WARNING: CPU: 0 PID: 1392 at
 include/net/sock.h:638 smc_unhash_sk

Greetings,

0day kernel testing robot got the below dmesg and the first bad commit is

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

commit 51f1de79ad8ed3555fd01ae8fd432691d397684b
Author:     Ursula Braun <ubraun@...ux.vnet.ibm.com>
AuthorDate: Fri Jan 26 09:28:48 2018 +0100
Commit:     David S. Miller <davem@...emloft.net>
CommitDate: Fri Jan 26 10:41:56 2018 -0500

    net/smc: replace sock_put worker by socket refcounting
    
    Proper socket refcounting makes the sock_put worker obsolete.
    
    Signed-off-by: Ursula Braun <ubraun@...ux.vnet.ibm.com>
    Signed-off-by: David S. Miller <davem@...emloft.net>

8dce2786a2  net/smc: smc_poll improvements
51f1de79ad  net/smc: replace sock_put worker by socket refcounting
f142f08bf7  Fix typo in comment.
28b24f518f  Add linux-next specific files for 20180507
+------------------------------------------------------------------+------------+------------+------------+---------------+
|                                                                  | 8dce2786a2 | 51f1de79ad | f142f08bf7 | next-20180507 |
+------------------------------------------------------------------+------------+------------+------------+---------------+
| boot_successes                                                   | 994        | 817        | 855        | 67            |
| boot_failures                                                    | 15         | 16         | 7          | 24            |
| Mem-Info                                                         | 15         | 10         | 3          | 5             |
| WARNING:at_include/net/sock.h:#smc_unhash_sk                     | 0          | 4          | 0          | 19            |
| EIP:smc_unhash_sk                                                | 0          | 4          | 0          | 19            |
| WARNING:at_lib/refcount.c:#refcount_dec                          | 0          | 4          | 0          | 19            |
| EIP:refcount_dec                                                 | 0          | 4          | 0          | 19            |
| WARNING:at_lib/refcount.c:#refcount_sub_and_test                 | 0          | 4          | 0          | 19            |
| EIP:refcount_sub_and_test                                        | 0          | 4          | 0          | 19            |
| invoked_oom-killer:gfp_mask=0x                                   | 0          | 2          | 0          | 4             |
| EIP:preempt_count_sub                                            | 0          | 1          |            |               |
| EIP:rcu_gp_kthread                                               | 0          | 1          |            |               |
| BUG:kernel_reboot-without-warning_in_test_stage                  | 0          | 1          |            |               |
| BUG:kernel_hang_in_boot_stage                                    | 0          | 0          | 1          |               |
| EIP:preempt_schedule_common                                      | 0          | 0          | 1          |               |
| EIP:schedule_timeout                                             | 0          | 0          | 2          |               |
| INFO:rcu_preempt_detected_stalls_on_CPUs/tasks                   | 0          | 0          | 3          |               |
| EIP:arch_local_irq_restore                                       | 0          | 0          | 1          |               |
| EIP:finish_swait                                                 | 0          | 0          | 2          |               |
| EIP:arch_local_irq_enable                                        | 0          | 0          | 2          |               |
| EIP:schedule                                                     | 0          | 0          | 1          |               |
| EIP:prepare_to_swait                                             | 0          | 0          | 1          |               |
| EIP:arch_local_save_flags                                        | 0          | 0          | 1          |               |
| INFO:rcu_sched_detected_stalls_on_CPUs/tasks                     | 0          | 0          | 1          |               |
| EIP:poll_schedule_timeout                                        | 0          | 0          | 1          |               |
| EIP:worker_thread                                                | 0          | 0          | 1          |               |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 0          | 0          | 0          | 4             |
+------------------------------------------------------------------+------------+------------+------------+---------------+


run-parts: /etc/kernel-tests/99-rmmod exited with code 123
wfg: skip syslogd
Deconfiguring network interfaces... done.
Sending all processes the TERM signal...
[   72.673003] WARNING: CPU: 0 PID: 1392 at include/net/sock.h:638 smc_unhash_sk+0x30/0x5a
[   72.678155] Modules linked in:
[   72.679274] CPU: 0 PID: 1392 Comm: trinity-c1 Not tainted 4.15.0-rc9-02013-g51f1de7 #2
[   72.685861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   72.692551] EIP: smc_unhash_sk+0x30/0x5a
[   72.693926] EFLAGS: 00010246 CPU: 0
[   72.695216] EAX: 00000000 EBX: cf837740 ECX: 00000001 EDX: cf9a80f4
[   72.703836] ESI: cf7bd480 EDI: 00000000 EBP: cf9fbed4 ESP: cf9fbed0
[   72.705525]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[   72.707064] CR0: 80050033 CR2: 47f8704b CR3: 107f1000 CR4: 000406d0
[   72.712833] Call Trace:
[   72.713903]  smc_release+0xf0/0xfe
[   72.715134]  sock_release+0x10/0x4d
[   72.720395]  sock_close+0xb/0xf
[   72.721551]  __fput+0xcc/0x13d
[   72.722679]  ____fput+0x8/0xa
[   72.727855]  task_work_run+0x6e/0x8c
[   72.729112]  do_exit+0x356/0x7b4
[   72.730290]  ? remove_wait_queue+0x51/0x51
[   72.731595]  do_group_exit+0x2e/0x90
[   72.736913]  SyS_exit_group+0x11/0x11
[   72.738139]  do_fast_syscall_32+0x8f/0xd0
[   72.739414]  entry_SYSENTER_32+0x47/0x71
[   72.744758] EIP: 0xb7fdbb19
[   72.745832] EFLAGS: 00000292 CPU: 0
[   72.747025] EAX: ffffffda EBX: 00000000 ECX: 00000000 EDX: 00000000
[   72.752851] ESI: 00000001 EDI: 00007a3b EBP: 00000008 ESP: bfa5563c
[   72.754534]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b
[   72.760161] Code: c3 b8 01 02 00 00 e8 6d d3 83 ff 8b 53 38 85 d2 74 31 8b 43 34 85 c0 89 02 74 03 89 50 04 8b 43 44 c7 43 38 00 00 00 00 48 75 02 <0f> ff 8d 43 44 e8 53 fa a1 ff 8b 53 20 8b 43 24 83 c9 ff e8 e0
[   72.769124] ---[ end trace c8ecd73b4a109872 ]---
[   72.770588] ------------[ cut here ]------------
[   72.770588] ------------[ cut here ]------------
[   72.776088] refcount_t: decrement hit 0; leaking memory.
[   72.777633] WARNING: CPU: 0 PID: 1392 at lib/refcount.c:228 refcount_dec+0x26/0x2b
[   72.784474] Modules linked in:
[   72.785657] CPU: 0 PID: 1392 Comm: trinity-c1 Tainted: G        W        4.15.0-rc9-02013-g51f1de7 #2
[   72.792584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   72.795270] EIP: refcount_dec+0x26/0x2b
[   72.800692] EFLAGS: 00010282 CPU: 0
[   72.801906] EAX: 0000002c EBX: cf837740 ECX: 00000000 EDX: 00000202
[   72.803594] ESI: cf7bd480 EDI: 00000000 EBP: cf9fbec8 ESP: cf9fbec4
[   72.809414]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[   72.810976] CR0: 80050033 CR2: 47f8704b CR3: 107f1000 CR4: 000406d0
[   72.816794] Call Trace:
[   72.817814]  smc_unhash_sk+0x3a/0x5a
[   72.819026]  smc_release+0xf0/0xfe
[   72.824328]  sock_release+0x10/0x4d
[   72.825546]  sock_close+0xb/0xf
[   72.826726]  __fput+0xcc/0x13d
[   72.831994]  ____fput+0x8/0xa
[   72.833201]  task_work_run+0x6e/0x8c
[   72.834376]  do_exit+0x356/0x7b4
[   72.835425]  ? remove_wait_queue+0x51/0x51
[   72.840816]  do_group_exit+0x2e/0x90
[   72.842131]  SyS_exit_group+0x11/0x11
[   72.844547]  do_fast_syscall_32+0x8f/0xd0
[   72.845741]  entry_SYSENTER_32+0x47/0x71
[   72.846907] EIP: 0xb7fdbb19
[   72.852084] EFLAGS: 00000292 CPU: 0
[   72.853281] EAX: ffffffda EBX: 00000000 ECX: 00000000 EDX: 00000000
[   72.855091] ESI: 00000001 EDI: 00007a3b EBP: 00000008 ESP: bfa5563c
[   72.860871]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b
[   72.862416] Code: 0f ff 58 c9 c3 55 89 e5 e8 48 ff ff ff 84 c0 74 1d 80 3d 35 97 c8 c1 00 75 14 68 64 ff ad c1 c6 05 35 97 c8 c1 01 e8 45 78 e0 ff <0f> ff 58 c9 c3 55 89 e5 53 89 c3 e8 2b ff ff ff 84 c0 74 04 31
[   72.871405] ---[ end trace c8ecd73b4a109873 ]---
[   72.877271] ------------[ cut here ]------------
[   72.877271] ------------[ cut here ]------------
[   72.878680] refcount_t: underflow; use-after-free.
[   72.884627] WARNING: CPU: 0 PID: 1392 at lib/refcount.c:187 refcount_sub_and_test+0x31/0x53
[   72.887533] Modules linked in:
[   72.892771] CPU: 0 PID: 1392 Comm: trinity-c1 Tainted: G        W        4.15.0-rc9-02013-g51f1de7 #2
[   72.895493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   72.902119] EIP: refcount_sub_and_test+0x31/0x53
[   72.903543] EFLAGS: 00010286 CPU: 0
[   72.911780] EAX: 00000026 EBX: 00000000 ECX: 00000000 EDX: 00000001
[   72.913495] ESI: cf7bd480 EDI: 00000000 EBP: cf9fbec0 ESP: cf9fbeb4
[   72.915191]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[   72.920813] CR0: 80050033 CR2: 47f8704b CR3: 107f1000 CR4: 000406d0
[   72.922491] Call Trace:
[   72.923525]  refcount_dec_and_test+0xf/0x11
[   72.928967]  sock_put+0xe/0x1c
[   72.930114]  smc_release+0xf7/0xfe
[   72.931373]  sock_release+0x10/0x4d
[   72.936646]  sock_close+0xb/0xf
[   72.937765]  __fput+0xcc/0x13d
[   72.938895]  ____fput+0x8/0xa
[   72.944117]  task_work_run+0x6e/0x8c
[   72.945377]  do_exit+0x356/0x7b4
[   72.946541]  ? remove_wait_queue+0x51/0x51
[   72.951929]  do_group_exit+0x2e/0x90
[   72.953188]  SyS_exit_group+0x11/0x11
[   72.954437]  do_fast_syscall_32+0x8f/0xd0
[   72.959794]  entry_SYSENTER_32+0x47/0x71
[   72.961089] EIP: 0xb7fdbb19
[   72.962143] EFLAGS: 00000292 CPU: 0
[   72.963384] EAX: ffffffda EBX: 00000000 ECX: 00000000 EDX: 00000000
[   72.969183] ESI: 00000001 EDI: 00007a3b EBP: 00000008 ESP: bfa5563c
[   72.970893]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b
[   72.976496] Code: 51 8b 02 83 f8 ff 74 3c 89 c1 29 d9 39 c1 76 20 8a 1d 36 97 c8 c1 84 db 75 2a 68 e3 fe ad c1 c6 05 36 97 c8 c1 01 e8 3d 79 e0 ff <0f> ff 58 eb 16 0f b1 0a 0f 94 45 fb 80 7d fb 00 74 c6 85 c9 0f
[   72.985500] ---[ end trace c8ecd73b4a109874 ]---
Sending all processes the KILL signal...

                                                          # HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start v4.16 v4.15 --
git bisect  bad 1388c80438e69fc01d83fbe98da3cac24c3c8731  # 23:41  B    566     3    0  86  Merge branch 'sched-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect  bad 4bf772b14675411a69b3c807f73006de0fe4b649  # 23:41  B    538     1    0 116  Merge tag 'drm-for-v4.16' of git://people.freedesktop.org/~airlied/linux
git bisect good c0cef30e4ff0dc025f4a1660b8f0ba43ed58426e  # 23:48  G    909     0   30  89  iversion: make inode_cmp_iversion{+raw} return bool instead of s64
git bisect  bad 73da9e1a9f310a449eeb9bf5735a9cd475fef5e2  # 23:48  B    954     1    0 136  Merge branch 'akpm' (patches from Andrew)
git bisect good 9798f5178f5791f964562eccedcf4dabe02fd825  # 00:03  G    910     0   76 100  Merge tag 'gpio-v4.16-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio
git bisect good 3c29548f87f9545f2f3c1cd1a784fae8ad2d53ba  # 00:18  G    909     0   62 102  Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
git bisect good 3dbc4f548519f9882676843b4fcdb4e61668baf8  # 00:35  G    904     0   62 101  Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
git bisect good a103950e0dd2058df5e8a8d4a915707bdcf205f0  # 00:50  G    904     0   84 118  Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
git bisect  bad b2fe5fa68642860e7de76167c3111623aa0d5de1  # 00:50  B    274     1    0  35  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
git bisect good a9f894634e679b560af4aaf29eeabd631c3d2f64  # 01:04  G    904     0   58  92  Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
git bisect good 1057c55f6b6cdc4fa3e8e29cfb9061c211e58395  # 01:20  G    902     0   58  85  net: sched: cls: add extack support for tcf_change_indev
git bisect good bf4405737f9f85a06db2b0ce5d76a818b61992e2  # 01:42  G    910     0   56  82  kill dev_ifsioc()
git bisect  bad 457740a903db30b14d53060f4e10d8cdecf464ac  # 01:53  B    396     1   17  63  Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
git bisect good 2bafa8fac19a31ca72ae1a3e48df35f73661dbed  # 03:00  G    909     0  107 107  ixgbe: don't set RXDCTL.RLPML for 82599
git bisect good 96a71005bdcbbcf01abe50e2965bbcd1aee6a1e5  # 03:27  G    909     0   99  99  bpf, arm64: remove obsolete exception handling from div/mod
git bisect  bad 79eee41085414c25c788cd98b78e8776551d837f  # 03:45  B    104     1   17  17  net: hns3: add int_gl_idx setup for VF
git bisect good 8dce2786a2905e5b0ce49263910b4a47af75b752  # 04:25  G    901     0  100 100  net/smc: smc_poll improvements
git bisect  bad 72a231b7a7c801d413fb3aacaff04af6457a59b7  # 04:49  B    518     1   83  83  Merge branch 'net-smc-fixes-2018-01-26'
git bisect  bad 127f497058236e5f07672e11382232f80cb7e8c4  # 05:19  B    707     1   98  98  net/smc: release clcsock from tcp_listen_worker
git bisect  bad 51f1de79ad8ed3555fd01ae8fd432691d397684b  # 05:40  B     53     1    7   7  net/smc: replace sock_put worker by socket refcounting
# first bad commit: [51f1de79ad8ed3555fd01ae8fd432691d397684b] net/smc: replace sock_put worker by socket refcounting
git bisect good 8dce2786a2905e5b0ce49263910b4a47af75b752  # 06:07  G   1007     0   16 116  net/smc: smc_poll improvements
# extra tests on HEAD of linux-devel/devel-hourly-2018050615
git bisect  bad 4d35c4fd4f1336f48b26b11f2a3c56717838c8e7  # 06:08  B     26     7    0   2  0day head guard for 'devel-hourly-2018050615'
# extra tests on tree/branch linus/master
git bisect good f142f08bf7ecc41c3e71e05b765ea654047cf0c0  # 06:51  G    907     0   61  61  Fix typo in comment.
# extra tests on tree/branch linux-next/master
git bisect  bad 28b24f518f4590b02baa794669e82678ebef695d  # 07:05  B     27     8    4   5  Add linux-next specific files for 20180507

---
0-DAY kernel test infrastructure                Open Source Technology Center
https://lists.01.org/pipermail/lkp                          Intel Corporation

Download attachment "dmesg-yocto-vp-16:20180508054006:i386-randconfig-x0-05062255:4.15.0-rc9-02013-g51f1de7:2.gz" of type "application/gzip" (18484 bytes)

Download attachment "dmesg-yocto-vp-10:20180508041802:i386-randconfig-x0-05062255:4.15.0-rc9-02012-g8dce278:1.gz" of type "application/gzip" (37726 bytes)

View attachment "reproduce-yocto-vp-16:20180508054006:i386-randconfig-x0-05062255:4.15.0-rc9-02013-g51f1de7:2" of type "text/plain" (920 bytes)

View attachment "config-4.15.0-rc9-02013-g51f1de7" of type "text/plain" (133896 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ