lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 25 Oct 2023 23:12:25 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Xabier Marquiegui <reibax@...il.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, Linux Memory Management List
	<linux-mm@...ck.org>, "David S. Miller" <davem@...emloft.net>, "Richard
 Cochran" <richardcochran@...il.com>, <netdev@...r.kernel.org>,
	<oliver.sang@...el.com>
Subject: [linux-next:master] [ptp]  8f5de6fb24: kernel_BUG_at_lib/list_debug.c



Hello,

kernel test robot noticed "kernel_BUG_at_lib/list_debug.c" on:

commit: 8f5de6fb245326704f37d91780b9a10253a8a100 ("ptp: support multiple timestamp event readers")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

[test failed on linux-next/master 2030579113a1b1b5bfd7ff24c0852847836d8fd1]

in testcase: stress-ng
version: stress-ng-x86_64-0.15.04-1_20231012
with following parameters:

	nr_threads: 10%
	disk: 1HDD
	testtime: 60s
	fs: ext4
	class: os
	test: clock
	cpufreq_governor: performance



compiler: gcc-12
test machine: 64 threads 2 sockets Intel(R) Xeon(R) Gold 6346 CPU @ 3.10GHz (Ice Lake) with 256G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202310252217.816dfed6-oliver.sang@intel.com


[   58.146527][ T4761] ------------[ cut here ]------------
[   58.146528][ T4761] kernel BUG at lib/list_debug.c:32!
[   58.146534][ T4761] invalid opcode: 0000 [#1] SMP NOPTI
[   58.146537][ T4761] CPU: 55 PID: 4761 Comm: stress-ng-clock Not tainted 6.6.0-rc5-01265-g8f5de6fb2453 #1
[   58.146540][ T4761] Hardware name: Inspur NF5180M6/NF5180M6, BIOS 06.00.04 04/12/2022
[ 58.146542][ T4761] RIP: 0010:__list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146552][ T4761] Code: a3 ff 0f 0b 48 89 c1 48 c7 c7 08 c8 72 82 e8 1f 31 a3 ff 0f 0b 48 89 d1 48 89 c6 4c 89 c2 48 c7 c7 60 c8 72 82 e8 08 31 a3 ff <0f> 0b 48 89 f2 48 89 c1 48 89 fe 48 c7 c7 b8 c8 72 82 e8 f1 30 a3
All code
========
   0:	a3 ff 0f 0b 48 89 c1 	movabs %eax,0xc748c189480b0fff
   7:	48 c7 
   9:	c7                   	(bad)
   a:	08 c8                	or     %cl,%al
   c:	72 82                	jb     0xffffffffffffff90
   e:	e8 1f 31 a3 ff       	call   0xffffffffffa33132
  13:	0f 0b                	ud2
  15:	48 89 d1             	mov    %rdx,%rcx
  18:	48 89 c6             	mov    %rax,%rsi
  1b:	4c 89 c2             	mov    %r8,%rdx
  1e:	48 c7 c7 60 c8 72 82 	mov    $0xffffffff8272c860,%rdi
  25:	e8 08 31 a3 ff       	call   0xffffffffffa33132
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	48 89 f2             	mov    %rsi,%rdx
  2f:	48 89 c1             	mov    %rax,%rcx
  32:	48 89 fe             	mov    %rdi,%rsi
  35:	48 c7 c7 b8 c8 72 82 	mov    $0xffffffff8272c8b8,%rdi
  3c:	e8                   	.byte 0xe8
  3d:	f1                   	int1
  3e:	30                   	.byte 0x30
  3f:	a3                   	.byte 0xa3

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	48 89 f2             	mov    %rsi,%rdx
   5:	48 89 c1             	mov    %rax,%rcx
   8:	48 89 fe             	mov    %rdi,%rsi
   b:	48 c7 c7 b8 c8 72 82 	mov    $0xffffffff8272c8b8,%rdi
  12:	e8                   	.byte 0xe8
  13:	f1                   	int1
  14:	30                   	.byte 0x30
  15:	a3                   	.byte 0xa3
[   58.146554][ T4761] RSP: 0018:ffa0000024d03c28 EFLAGS: 00010246
[   58.146556][ T4761] RAX: 0000000000000075 RBX: ff110020890c2000 RCX: 0000000000000000
[   58.146557][ T4761] RDX: 0000000000000000 RSI: ff11003fc09dc700 RDI: ff11003fc09dc700
[   58.146559][ T4761] RBP: ff11002086fa9330 R08: 80000000ffff8b8c R09: 0000000000ffff10
[   58.146560][ T4761] R10: 000000000000000f R11: 000000000000000f R12: ff11002086262800
[   58.146561][ T4761] R13: ff11002086aa1010 R14: ff110020890c3010 R15: ff11002086262bf0
[   58.146562][ T4761] FS:  00007f2138c47740(0000) GS:ff11003fc09c0000(0000) knlGS:0000000000000000
[   58.146563][ T4761] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.146565][ T4761] CR2: 00007f2138c1e8f8 CR3: 00000040581c0004 CR4: 0000000000771ee0
[   58.146566][ T4761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   58.146568][ T4761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.146569][ T4761] PKRU: 55555554
[   58.146570][ T4761] Call Trace:
[   58.146572][ T4761]  <TASK>
[ 58.146574][ T4761] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[ 58.146578][ T4761] ? do_trap (arch/x86/kernel/traps.c:112 arch/x86/kernel/traps.c:153) 
[ 58.146589][ T4761] ? __list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146592][ T4761] ? do_error_trap (arch/x86/include/asm/traps.h:59 arch/x86/kernel/traps.c:174) 
[ 58.146595][ T4761] ? __list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146597][ T4761] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[ 58.146603][ T4761] ? __list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146605][ T4761] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:568) 
[ 58.146615][ T4761] ? __list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146617][ T4761] ? __list_add_valid_or_report (lib/list_debug.c:32 (discriminator 3)) 
[ 58.146619][ T4761] ptp_open (include/linux/list.h:150 include/linux/list.h:183 drivers/ptp/ptp_chardev.c:114) 
[ 58.146624][ T4761] posix_clock_open (kernel/time/posix-clock.c:134) 
[ 58.146632][ T4761] chrdev_open (fs/char_dev.c:414) 
[ 58.146638][ T4761] ? __pfx_chrdev_open (fs/char_dev.c:374) 
[ 58.146640][ T4761] do_dentry_open (fs/open.c:929) 
[ 58.146644][ T4761] do_open (fs/namei.c:3642) 
[ 58.146652][ T4761] ? open_last_lookups (fs/namei.c:3586) 
[ 58.146655][ T4761] path_openat (fs/namei.c:3797) 
[ 58.146658][ T4761] do_filp_open (fs/namei.c:3823) 
[ 58.146661][ T4761] do_sys_openat2 (fs/open.c:1422) 
[ 58.146666][ T4761] __x64_sys_openat (fs/open.c:1448) 
[ 58.146669][ T4761] do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80) 
[ 58.146672][ T4761] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120) 
[   58.146676][ T4761] RIP: 0033:0x7f2138dd5127
[ 58.146678][ T4761] Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25
All code
========
   0:	25 00 00 41 00       	and    $0x410000,%eax
   5:	3d 00 00 41 00       	cmp    $0x410000,%eax
   a:	74 47                	je     0x53
   c:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  13:	00 
  14:	85 c0                	test   %eax,%eax
  16:	75 6b                	jne    0x83
  18:	44 89 e2             	mov    %r12d,%edx
  1b:	48 89 ee             	mov    %rbp,%rsi
  1e:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	0f 87 95 00 00 00    	ja     0xcb
  36:	48 8b 4c 24 28       	mov    0x28(%rsp),%rcx
  3b:	64                   	fs
  3c:	48                   	rex.W
  3d:	2b                   	.byte 0x2b
  3e:	0c 25                	or     $0x25,%al

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	0f 87 95 00 00 00    	ja     0xa1
   c:	48 8b 4c 24 28       	mov    0x28(%rsp),%rcx
  11:	64                   	fs
  12:	48                   	rex.W
  13:	2b                   	.byte 0x2b
  14:	0c 25                	or     $0x25,%al


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20231025/202310252217.816dfed6-oliver.sang@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


Powered by blists - more mailing lists