Date:   Mon, 9 Sep 2019 09:41:40 +0800
From:   kernel test robot <lkp@...el.com>
To:     Shmulik Ladkani <shmulik@...anetworks.com>
Cc:     Daniel Borkmann <daniel@...earbox.net>, Yonghong Song <yhs@...com>,
        Eric Dumazet <eric.dumazet@...il.com>,
        Alexei Starovoitov <ast@...nel.org>, netdev@...r.kernel.org,
        bpf@...r.kernel.org, Shmulik Ladkani <shmulik.ladkani@...il.com>,
        lkp@...org
Subject: [test_bpf] f1f1a8af9e: kernel_BUG_at_net/core/skbuff.c

FYI, we noticed the following commit (built with gcc-7):

commit: f1f1a8af9e009a09d477d6e0f86abaacf1f396ea ("[RFC PATCH bpf-next 2/2] test_bpf: Introduce 'gso_linear_no_head_frag' skb_segment test")
url: https://github.com/0day-ci/linux/commits/Shmulik-Ladkani/test_bpf-Add-an-skb_segment-test-for-a-linear-head_frag-0-skb-whose-gso_size-was-mangled/20190830-012803
base: https://kernel.googlesource.com/pub/scm/linux/kernel/git/bpf/bpf-next.git master

in testcase: test_bpf
with following parameters:

	test: non-jit



on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+------------------------------------------+------------+------------+
|                                          | a112eab19b | f1f1a8af9e |
+------------------------------------------+------------+------------+
| boot_successes                           | 8          | 3          |
| boot_failures                            | 0          | 4          |
| kernel_BUG_at_net/core/skbuff.c          | 0          | 4          |
| invalid_opcode:#[##]                     | 0          | 4          |
| RIP:skb_segment                          | 0          | 4          |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 4          |
+------------------------------------------+------------+------------+


If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp@...el.com>


[   12.199218] kernel BUG at net/core/skbuff.c:3852!
[   12.200425] invalid opcode: 0000 [#1] SMP PTI
[   12.201513] CPU: 1 PID: 564 Comm: modprobe Not tainted 5.3.0-rc3-00989-gf1f1a8af9e009 #2
[   12.203968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[   12.206701] RIP: 0010:skb_segment+0xaad/0xd40
[   12.208154] Code: 48 8b 4d 98 44 8b 55 8c 44 8b 4d 80 44 8b 45 88 0f 84 f7 fb ff ff e9 4d fe ff ff c7 85 3c ff ff ff 00 00 00 00 e9 9f f6 ff ff <0f> 0b 48 8b 42 08 41 8b 74 24 70 48 85 c0 75 28 e9 b5 fd ff ff 48
[   12.211919] RSP: 0000:ffffa139c0983b20 EFLAGS: 00010246
[   12.213093] RAX: ffff8b2d7fc3cec0 RBX: ffff8b2cbda3cef0 RCX: ffff8b2d7fc39ef0
[   12.214709] RDX: 0000000000000a20 RSI: 0000000000000000 RDI: ffff8b2cbeed4900
[   12.216940] RBP: ffffa139c0983c00 R08: 0000000000000a58 R09: 0000000000000564
[   12.219283] R10: 0000000000000000 R11: 000000000000c72d R12: ffff8b2cbeed4e00
[   12.221609] R13: 0000000000000000 R14: 0000000000000564 R15: ffff8b2cbeed4900
[   12.223213] FS:  00007f01feb42700(0000) GS:ffff8b2d7fd00000(0000) knlGS:0000000000000000
[   12.224825] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   12.226243] CR2: 00005572a213c020 CR3: 000000007db20000 CR4: 00000000000406e0
[   12.227681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   12.230023] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   12.232338] Call Trace:
[   12.234078]  test_bpf_init+0x789/0xd06 [test_bpf]
[   12.235169]  ? __switch_to_asm+0x40/0x70
[   12.236109]  ? __switch_to_asm+0x40/0x70
[   12.237043]  ? build_test_skb_linear_no_head_frag+0x158/0x158 [test_bpf]
[   12.238491]  do_one_initcall+0x46/0x214
[   12.239426]  ? free_unref_page_commit+0x9f/0x120
[   12.240459]  ? _cond_resched+0x19/0x30
[   12.241380]  ? kmem_cache_alloc_trace+0x3b/0x230
[   12.243023]  do_init_module+0x5b/0x227
[   12.244349]  load_module+0x1b3a/0x1fc0
[   12.245827]  ? ima_post_read_file+0xe2/0x120
[   12.247389]  ? __do_sys_finit_module+0xe9/0x110
[   12.248631]  __do_sys_finit_module+0xe9/0x110
[   12.249761]  do_syscall_64+0x5b/0x1f0
[   12.250855]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   12.252111] RIP: 0033:0x7f01fe66d229
[   12.253158] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48
[   12.258458] RSP: 002b:00007ffc89fba408 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   12.261110] RAX: ffffffffffffffda RBX: 000055ab7c3ee400 RCX: 00007f01fe66d229
[   12.262829] RDX: 0000000000000000 RSI: 000055ab7c096638 RDI: 0000000000000004
[   12.264517] RBP: 000055ab7c096638 R08: 0000000000000000 R09: 000055ab7c3ec3b0
[   12.266254] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[   12.267963] R13: 000055ab7c3ee510 R14: 0000000000040000 R15: 0000000000000000
[   12.270631] Modules linked in: test_bpf(+) sr_mod cdrom sg ata_generic pata_acpi intel_rapl_msr intel_rapl_common crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel ppdev ata_piix snd_pcm bochs_drm drm_vram_helper aesni_intel crypto_simd ttm snd_timer snd cryptd glue_helper drm_kms_helper libata soundcore pcspkr joydev syscopyarea serio_raw sysfillrect sysimgblt fb_sys_fops drm i2c_piix4 floppy parport_pc parport ip_tables
[   12.280203] ---[ end trace fba2810f415be42f ]---


To reproduce:

        # build kernel
	cd linux
	cp config-5.3.0-rc3-00989-gf1f1a8af9e009 .config
	make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email



Thanks,
lkp


View attachment "config-5.3.0-rc3-00989-gf1f1a8af9e009" of type "text/plain" (199627 bytes)

View attachment "job-script" of type "text/plain" (4675 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (19056 bytes)

Powered by blists - more mailing lists