[lib/stackdepot] 1cd8ce52c5: BUG:unable_to_handle_page_fault_for_address
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 1cd8ce52c520c26c513899fb5aee42b8e5f60d0d ("[PATCH v2] lib/stackdepot: allow optional init and stack_table allocation by kvmalloc()")
url: https://github.com/0day-ci/linux/commits/Vlastimil-Babka/lib-stackdepot-a...
base: git://anongit.freedesktop.org/drm-intel for-linux-next
in testcase: rcutorture
version:
with following parameters:
runtime: 300s
test: cpuhotplug
torture_type: srcud
test-description: rcutorture is rcutorture kernel module load/unload test.
test-url: https://www.kernel.org/doc/Documentation/RCU/torture.txt
on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+---------------------------------------------+------------+------------+
| | a94a6d76c9 | 1cd8ce52c5 |
+---------------------------------------------+------------+------------+
| boot_successes | 30 | 0 |
| boot_failures | 0 | 7 |
| BUG:kernel_NULL_pointer_dereference,address | 0 | 2 |
| Oops:#[##] | 0 | 7 |
| EIP:stack_depot_save | 0 | 7 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 7 |
| BUG:unable_to_handle_page_fault_for_address | 0 | 5 |
+---------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
[ 319.147926][ T259] BUG: unable to handle page fault for address: 0ec74110
[ 319.149309][ T259] #PF: supervisor read access in kernel mode
[ 319.150362][ T259] #PF: error_code(0x0000) - not-present page
[ 319.151372][ T259] *pde = 00000000
[ 319.151964][ T259] Oops: 0000 [#1] SMP
[ 319.152617][ T259] CPU: 0 PID: 259 Comm: systemd-rc-loca Not tainted 5.15.0-rc1-00270-g1cd8ce52c520 #1
[ 319.154514][ T259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 319.156200][ T259] EIP: stack_depot_save+0x12a/0x4d0
[ 319.157287][ T259] Code: ff 0f 00 8d 04 90 89 45 dc 8b 18 85 db 0f 84 0d 01 00 00 8b 55 e8 eb 12 8d b4 26 00 00 00 00 90 8b 1b 85 db 0f 84 f6 00 00 00 <39> 73 04
75 f1 3b 53 08 75 ec 8b 4d e4 31 c0 8d b4 26 00 00 00 00
[ 319.161025][ T259] EAX: f286870c EBX: 0ec7410c ECX: ae94980e EDX: 00000010
[ 319.163557][ T259] ESI: ca0ea9c3 EDI: 6e32801a EBP: bec0bc90 ESP: bec0bc5c
[ 319.164952][ T259] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010206
[ 319.166533][ T259] CR0: 80050033 CR2: 0ec74110 CR3: 0373f000 CR4: 00000690
[ 319.167965][ T259] Call Trace:
[ 319.168625][ T259] save_stack+0x66/0x90
[ 319.169561][ T259] ? free_pcp_prepare+0x192/0x340
[ 319.170597][ T259] ? free_unref_page+0x18/0x210
[ 319.171478][ T259] ? __free_pages+0xa7/0xd0
[ 319.172294][ T259] ? put_task_stack+0x9d/0x140
[ 319.173115][ T259] ? finish_task_switch+0x180/0x240
[ 319.174197][ T259] ? __schedule+0x39a/0xc00
[ 319.175268][ T259] ? preempt_schedule_common+0x1c/0x30
[ 319.176344][ T259] ? __cond_resched+0x25/0x30
[ 319.177302][ T259] ? unmap_page_range+0x366/0x7a0
[ 319.178325][ T259] ? unmap_single_vma+0x55/0xc0
[ 319.179247][ T259] ? unmap_vmas+0x35/0x50
[ 319.180072][ T259] ? exit_mmap+0x72/0x1c0
[ 319.180894][ T259] ? mmput+0x61/0x100
[ 319.181663][ T259] ? do_exit+0x296/0xa50
[ 319.182511][ T259] ? do_group_exit+0x31/0x90
[ 319.183380][ T259] ? __ia32_sys_exit_group+0x10/0x10
[ 319.184357][ T259] __reset_page_owner+0x36/0x90
[ 319.185331][ T259] free_pcp_prepare+0x192/0x340
[ 319.186292][ T259] free_unref_page+0x18/0x210
[ 319.187183][ T259] __free_pages+0xa7/0xd0
[ 319.188035][ T259] put_task_stack+0x9d/0x140
[ 319.188928][ T259] finish_task_switch+0x180/0x240
[ 319.189949][ T259] ? finish_task_switch+0x52/0x240
[ 319.190896][ T259] __schedule+0x39a/0xc00
[ 319.191645][ T259] ? find_held_lock+0x2a/0x90
[ 319.192566][ T259] preempt_schedule_common+0x1c/0x30
[ 319.193495][ T259] __cond_resched+0x25/0x30
[ 319.194320][ T259] unmap_page_range+0x366/0x7a0
[ 319.195237][ T259] unmap_single_vma+0x55/0xc0
[ 319.196144][ T259] unmap_vmas+0x35/0x50
[ 319.196942][ T259] exit_mmap+0x72/0x1c0
[ 319.197742][ T259] ? up_read+0x16/0x240
[ 319.198527][ T259] mmput+0x61/0x100
[ 319.199208][ T259] do_exit+0x296/0xa50
[ 319.199930][ T259] do_group_exit+0x31/0x90
[ 319.200757][ T259] ? __might_fault+0x79/0x80
[ 319.201653][ T259] __ia32_sys_exit_group+0x10/0x10
[ 319.202662][ T259] __do_fast_syscall_32+0x5b/0xd0
[ 319.203658][ T259] do_fast_syscall_32+0x32/0x70
[ 319.204650][ T259] do_SYSENTER_32+0x15/0x20
[ 319.205571][ T259] entry_SYSENTER_32+0x98/0xe7
[ 319.206581][ T259] EIP: 0x37f47549
[ 319.207276][ T259] Code: Unable to access opcode bytes at RIP 0x37f4751f.
[ 319.208586][ T259] EAX: ffffffda EBX: 00000000 ECX: 37d181d8 EDX: 00000000
[ 319.209955][ T259] ESI: 00000000 EDI: 37d152f0 EBP: 37d181e0 ESP: 3fc3cf2c
[ 319.211250][ T259] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b EFLAGS: 00000216
[ 319.212737][ T259] Modules linked in:
[ 319.213484][ T259] CR2: 000000000ec74110
[ 319.214357][ T259] ---[ end trace d840069cc585ecdc ]---
[ 319.215361][ T259] EIP: stack_depot_save+0x12a/0x4d0
[ 319.216296][ T259] Code: ff 0f 00 8d 04 90 89 45 dc 8b 18 85 db 0f 84 0d 01 00 00 8b 55 e8 eb 12 8d b4 26 00 00 00 00 90 8b 1b 85 db 0f 84 f6 00 00 00 <39> 73 04 75 f1 3b 53 08 75 ec 8b 4d e4 31 c0 8d b4 26 00 00 00 00
[ 319.219967][ T259] EAX: f286870c EBX: 0ec7410c ECX: ae94980e EDX: 00000010
[ 319.221339][ T259] ESI: ca0ea9c3 EDI: 6e32801a EBP: bec0bc90 ESP: bec0bc5c
[ 319.222743][ T259] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010206
[ 319.224002][ T259] CR0: 80050033 CR2: 0ec74110 CR3: 0373f000 CR4: 00000690
[ 319.225147][ T259] Kernel panic - not syncing: Fatal exception
[ 319.226616][ T259] Kernel Offset: disabled
To reproduce:
# build kernel
cd linux
cp config-5.15.0-rc1-00270-g1cd8ce52c520 .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
9 months, 4 weeks
[perf metrics] fb8c3a0694: perf-sanity-tests.Parse_and_process_metrics.fail
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: fb8c3a06943cc3c7a7ffc465b3866cb24b4661ac ("perf metrics: Modify setup and deduplication")
https://git.kernel.org/cgit/linux/kernel/git/acme/linux.git tmp.perf/core
in testcase: perf-sanity-tests
version: perf-x86_64-7fd2bf83d59a-1_20211010
with following parameters:
perf_compiler: clang
ucode: 0xde
on test machine: 8 threads 1 sockets Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz with 32G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
please be noted besides "Parse and process metrics", we also found regression of
"Event expansion for cgroups", which both can PASS on parent commit.
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
2021-10-14 13:41:36 sudo /usr/src/perf_selftests-x86_64-rhel-8.3-fb8c3a06943cc3c7a7ffc465b3866cb24b4661ac/tools/perf/perf test 68
68: Parse and process metrics : FAILED!
...
2021-10-14 13:41:36 sudo /usr/src/perf_selftests-x86_64-rhel-8.3-fb8c3a06943cc3c7a7ffc465b3866cb24b4661ac/tools/perf/perf test 70
70: Event expansion for cgroups : FAILED!
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
sudo bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
sudo bin/lkp run generated-yaml-file
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
9 months, 4 weeks
[mm] 1609369623: BUG:kernel_NULL_pointer_dereference,address
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: 1609369623c4b6fe45602ee0d8192f6df9d4b1fe ("[PATCH 1/5] mm: Make free_area->nr_free per migratetype")
url: https://github.com/0day-ci/linux/commits/Kent-Overstreet/Minor-mm-struct-...
base: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git 5816b3e6577eaa676ceb00a848f0fd65fe2adc29
in testcase: xfstests
version: xfstests-x86_64-99bc497-1_20211014
with following parameters:
disk: 4HDD
fs: xfs
test: xfs-reflink-25
ucode: 0x28
test-description: xfstests is a regression test suite for xfs and other files ystems.
test-url: git://git.kernel.org/pub/scm/fs/xfs/xfstests-dev.git
on test machine: 8 threads 1 sockets Intel(R) Core(TM) i7-4790 v3 @ 3.60GHz with 6G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------------------+-----------+------------+
| | v5.15-rc3 | 1609369623 |
+-------------------------------------------------------------+-----------+------------+
| boot_successes | 121 | 0 |
| BUG:kernel_NULL_pointer_dereference,address | 0 | 6 |
| Oops:#[##] | 0 | 6 |
| RIP:steal_suitable_fallback | 0 | 6 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 6 |
+-------------------------------------------------------------+-----------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
[ 1.331661][ T0] BUG: kernel NULL pointer dereference, address: 0000000000000028
[ 1.339184][ T0] #PF: supervisor read access in kernel mode
[ 1.344956][ T0] #PF: error_code(0x0000) - not-present page
[ 1.350724][ T0] PGD 0 P4D 0
[ 1.353914][ T0] Oops: 0000 [#1] SMP PTI
[ 1.358047][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.0-rc3-00001-g1609369623c4 #1
[ 1.366659][ T0] Hardware name: Dell Inc. OptiPlex 9020/03CPWF, BIOS A11 04/01/2015
[ 1.374497][ T0] RIP: 0010:steal_suitable_fallback+0x2a/0x240
[ 1.380438][ T0] Code: 0f 1f 44 00 00 41 57 41 89 d7 ba 07 00 00 00 41 56 41 55 49 89 fd 41 54 49 89 f4 55 4c 89 e7 48 63 e9 53 44 89 c3 48 83 ec 18 <4c> 8b 76 28 48 2b 35 1b 7a 32 01 65 48 8b 04 25 28 00 00 00 48 89
[ 1.399730][ T0] RSP: 0000:ffffffff828039d8 EFLAGS: 00010096
[ 1.405587][ T0] RAX: ffff88819edd6720 RBX: 0000000000000001 RCX: 0000000000000002
[ 1.413338][ T0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000
[ 1.421088][ T0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
[ 1.428837][ T0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1.436585][ T0] R13: ffff88819edd6080 R14: 0000000000000000 R15: 0000000000000101
[ 1.444338][ T0] FS: 0000000000000000(0000) GS:ffff88817de00000(0000) knlGS:0000000000000000
[ 1.453034][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1.459405][ T0] CR2: 0000000000000028 CR3: 000000019da10001 CR4: 00000000000606b0
[ 1.467155][ T0] Call Trace:
[ 1.470255][ T0] rmqueue_bulk+0x882/0x980
[ 1.474559][ T0] rmqueue+0x551/0xe00
[ 1.478434][ T0] ? rmqueue_bulk+0x331/0x980
[ 1.482911][ T0] ? rmqueue_bulk+0x331/0x980
[ 1.487389][ T0] ? __raw_callee_save___native_queued_spin_unlock+0x11/0x1e
[ 1.494535][ T0] get_page_from_freelist+0xde/0x400
[ 1.499615][ T0] __alloc_pages+0x197/0x380
[ 1.504008][ T0] allocate_slab+0x2f8/0x440
[ 1.508399][ T0] ___slab_alloc+0x6aa/0x800
[ 1.512790][ T0] ? radix_tree_node_alloc+0x40/0xc0
[ 1.518901][ T0] ? pcpu_alloc_area+0x1d8/0x300
[ 1.523636][ T0] ? __raw_callee_save___native_queued_spin_unlock+0x11/0x1e
[ 1.530786][ T0] ? radix_tree_node_alloc+0x40/0xc0
[ 1.536897][ T0] __slab_alloc+0x1c/0x40
[ 1.541636][ T0] kmem_cache_alloc+0x382/0x400
[ 1.546287][ T0] radix_tree_node_alloc+0x40/0xc0
[ 1.552230][ T0] idr_get_free+0x1e1/0x300
[ 1.556537][ T0] idr_alloc_u32+0x5f/0xc0
[ 1.560758][ T0] idr_alloc+0x39/0x80
[ 1.564632][ T0] workqueue_init_early+0x17d/0x33b
[ 1.569627][ T0] start_kernel+0x378/0x5fb
[ 1.573933][ T0] ? load_ucode_intel_bsp+0x21/0x52
[ 1.578927][ T0] secondary_startup_64_no_verify+0xc2/0xcb
[ 1.584611][ T0] Modules linked in:
[ 1.588313][ T0] CR2: 0000000000000028
[ 1.592275][ T0] ---[ end trace 1ab7942b05fdb9ba ]---
[ 1.597526][ T0] RIP: 0010:steal_suitable_fallback+0x2a/0x240
[ 1.603469][ T0] Code: 0f 1f 44 00 00 41 57 41 89 d7 ba 07 00 00 00 41 56 41 55 49 89 fd 41 54 49 89 f4 55 4c 89 e7 48 63 e9 53 44 89 c3 48 83 ec 18 <4c> 8b 76 28 48 2b 35 1b 7a 32 01 65 48 8b 04 25 28 00 00 00 48 89
[ 1.622760][ T0] RSP: 0000:ffffffff828039d8 EFLAGS: 00010096
[ 1.628614][ T0] RAX: ffff88819edd6720 RBX: 0000000000000001 RCX: 0000000000000002
[ 1.636365][ T0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000
[ 1.644115][ T0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
[ 1.651867][ T0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1.659616][ T0] R13: ffff88819edd6080 R14: 0000000000000000 R15: 0000000000000101
[ 1.667368][ T0] FS: 0000000000000000(0000) GS:ffff88817de00000(0000) knlGS:0000000000000000
[ 1.676065][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1.682438][ T0] CR2: 0000000000000028 CR3: 000000019da10001 CR4: 00000000000606b0
[ 1.690190][ T0] Kernel panic - not syncing: Fatal exception
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
sudo bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
sudo bin/lkp run generated-yaml-file
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
9 months, 4 weeks
lkp
by oiloncanvas＠foxmail.com
You email us a picture,
we make an oil painting.
2021-10-15 00:38:53
Oil on canvas, 100% hand-painted.
lkp
Any picture will do.
EB29DA4F-86EE-4C07-B823-0CECE4D7D9D0
Free shipping to your home address.
10 months
[mtd] d3ff51cfa9: WARNING:at_kernel/locking/rwsem.c:#down_read
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with clang-14):
commit: d3ff51cfa9a64cdc18abe24c9821891b5122e617 ("[PATCH 1/3] mtd: core: protect access to MTD devices while in suspend")
url: https://github.com/0day-ci/linux/commits/Sean-Nyekjaer/mtd-core-protect-a...
base: https://git.kernel.org/cgit/linux/kernel/git/mtd/linux.git mtd/next
in testcase: boot
on test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+----------------------------------------------+------------+------------+
| | b72841e4dc | d3ff51cfa9 |
+----------------------------------------------+------------+------------+
| boot_successes | 20 | 0 |
| boot_failures | 0 | 21 |
| INFO:trying_to_register_non-static_key | 0 | 21 |
| WARNING:at_kernel/locking/rwsem.c:#down_read | 0 | 21 |
| EIP:down_read | 0 | 21 |
| WARNING:at_kernel/locking/rwsem.c:#__up_read | 0 | 21 |
| EIP:__up_read | 0 | 21 |
+----------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
[ 4.304729][ T1] ------------[ cut here ]------------
[ 4.305194][ T1] DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x0, magic = 0x0, owner = 0x0, curr 0xb3690000, list not empty
[ 4.306218][ T1] WARNING: CPU: 1 PID: 1 at kernel/locking/rwsem.c:1240 down_read+0xff/0x110
[ 4.306989][ T1] Modules linked in:
[ 4.307318][ T1] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.15.0-rc1-00002-gd3ff51cfa9a6 #1
[ 4.308071][ T1] EIP: down_read+0xff/0x110
[ 4.308445][ T1] Code: 9f 03 b2 ba 0f 44 d1 52 0f 44 d1 52 ff 75 f0 ff ff 75 f0 ff 00 b2 68 79 00 b2 68 79 c7 d5 5a ff c7 d5 5a ff c4 1c 0f 0b c4 1c <0f> 0b 58 ff ff ff 58 ff ff ff ff 90 90 3e ff 90 90 3e 55 89 e5 53
[ 4.310153][ T1] EAX: 00000000 EBX: b15a2702 ECX: 80000001 EDX: 00000001
[ 4.310861][ T1] ESI: f5dc0404 EDI: 00000000 EBP: b3693c98 ESP: b3693c84
[ 4.311546][ T1] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010296
[ 4.312277][ T1] CR0: 80050033 CR2: 00000000 CR3: 027d9000 CR4: 000406d0
[ 4.312919][ T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 4.313518][ T1] DR6: fffe0ff0 DR7: 00000400
[ 4.313926][ T1] Call Trace:
[ 4.314237][ T1] mtd_start_access+0x32/0xc0
[ 4.314707][ T1] ? ledtrig_mtd_activity+0x37/0x40
[ 4.315194][ T1] mtd_read_oob+0x75/0x1e0
[ 4.315572][ T1] scan_block_fast+0x6a/0xc0
[ 4.316003][ T1] create_bbt+0x130/0x2a0
[ 4.316399][ T1] ? __kmalloc+0x146/0x1a0
[ 4.316811][ T1] ? trace_kmalloc_node+0x39/0x100
[ 4.317267][ T1] nand_create_bbt+0x1fe/0x9e0
[ 4.317685][ T1] ? ns_alloc_device+0xa4/0x18b
[ 4.318107][ T1] ? ns_init+0x3b6/0x688
[ 4.318459][ T1] ? __kmalloc+0x146/0x1a0
[ 4.318858][ T1] ns_init_module+0x5f9/0x809
[ 4.319254][ T1] ? __this_cpu_preempt_check+0xf/0x11
[ 4.319719][ T1] ? debug_smp_processor_id+0x12/0x20
[ 4.320174][ T1] ? generic_onenand_driver_init+0x16/0x16
[ 4.320662][ T1] ? rcu_read_lock_sched_held+0x36/0x70
[ 4.321122][ T1] ? generic_onenand_driver_init+0x16/0x16
[ 4.321602][ T1] do_one_initcall+0x93/0x160
[ 4.321997][ T1] ? irqentry_exit+0x56/0x80
[ 4.322382][ T1] ? __this_cpu_preempt_check+0xf/0x11
[ 4.322854][ T1] ? lockdep_hardirqs_on+0x82/0x110
[ 4.323273][ T1] ? irqentry_exit+0x56/0x80
[ 4.323642][ T1] ? sysvec_call_function_single+0x30/0x30
[ 4.324124][ T1] ? trace_hardirqs_on+0x45/0x50
[ 4.324523][ T1] ? irqentry_exit+0x56/0x80
[ 4.324893][ T1] ? sysvec_apic_timer_interrupt+0x29/0x30
[ 4.325367][ T1] ? handle_exception+0x101/0x101
[ 4.325776][ T1] ? p9_client_readlink+0x9b/0xa0
[ 4.326186][ T1] ? strlen+0xd/0x20
[ 4.326508][ T1] ? next_arg+0xfb/0x110
[ 4.326877][ T1] ? parse_args+0x15c/0x330
[ 4.327244][ T1] ? __this_cpu_preempt_check+0xf/0x11
[ 4.327688][ T1] ? debug_smp_processor_id+0x12/0x20
[ 4.328155][ T1] ? generic_onenand_driver_init+0x16/0x16
[ 4.328664][ T1] do_initcall_level+0x80/0x92
[ 4.329088][ T1] ? rest_init+0x1c0/0x1c0
[ 4.329475][ T1] do_initcalls+0x41/0x62
[ 4.329838][ T1] do_basic_setup+0x17/0x19
[ 4.330214][ T1] kernel_init_freeable+0x8c/0xd1
[ 4.330657][ T1] kernel_init+0x17/0x170
[ 4.331087][ T1] ret_from_fork+0x1c/0x28
[ 4.331503][ T1] irq event stamp: 319917
[ 4.331919][ T1] hardirqs last enabled at (319917): [<b10e59cc>] __up_console_sem+0x5c/0x90
[ 4.332719][ T1] hardirqs last disabled at (319916): [<b10e59b3>] __up_console_sem+0x43/0x90
[ 4.333495][ T1] softirqs last enabled at (318956): [<b121d2f1>] bdi_register_va+0x1d1/0x1f0
[ 4.334243][ T1] softirqs last disabled at (318954): [<b121d202>] bdi_register_va+0xe2/0x1f0
[ 4.334994][ T1] _warn_unseeded_randomness: 5 callbacks suppressed
[ 4.334997][ T1] random: get_random_bytes called from __warn+0xc3/0x140 with crng_init=0
[ 4.335006][ T1] ---[ end trace 8e9a8c821c89b3d1 ]---
To reproduce:
# build kernel
cd linux
cp config-5.15.0-rc1-00002-gd3ff51cfa9a6 .config
make HOSTCC=clang-14 CC=clang-14 ARCH=i386 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
10 months
d7c9e99aee: WARNING:at_kernel/ucount.c:#dec_rlimit_ucounts
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: d7c9e99aee48e6bc0b427f3e3c658a6aba15001e ("Reimplement RLIMIT_MEMLOCK on top of ucounts")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: trinity
version: trinity-i386-4d2343bd-1_20200320
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-------------------------------------------------------------+------------+------------+
| | d646969055 | d7c9e99aee |
+-------------------------------------------------------------+------------+------------+
| BUG:kernel_NULL_pointer_dereference,address | 0 | 55 |
| Oops:#[##] | 0 | 62 |
| EIP:dec_rlimit_ucounts | 0 | 64 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 62 |
| WARNING:at_kernel/ucount.c:#dec_rlimit_ucounts | 0 | 16 |
+-------------------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
[ 110.857468][ T857] WARNING: CPU: 0 PID: 857 at kernel/ucount.c:269 dec_rlimit_ucounts (kernel/ucount.c:269 (discriminator 1))
[ 110.858412][ T857] Modules linked in:
[ 110.858848][ T857] CPU: 0 PID: 857 Comm: trinity-c2 Tainted: G W 5.12.0-00007-gd7c9e99aee48 #1
[ 110.859937][ T857] EIP: dec_rlimit_ucounts (kernel/ucount.c:269 (discriminator 1))
[ 110.860493][ T857] Code: 3b 29 ca 78 25 39 d8 0f 44 f2 8b 53 08 8b 9a b4 01 00 00 85 db 75 e3 5a 85 f6 0f 94 c0 5b 5e 5f 5d c3 8d b4 26 00 00 00 00 90 <0f> 0b eb d7 8d 74 26 00 85 f6 0f 94 c0 c3 66 90 55 89 e5 57 56 89
All code
========
0: 3b 29 cmp (%rcx),%ebp
2: ca 78 25 lret $0x2578
5: 39 d8 cmp %ebx,%eax
7: 0f 44 f2 cmove %edx,%esi
a: 8b 53 08 mov 0x8(%rbx),%edx
d: 8b 9a b4 01 00 00 mov 0x1b4(%rdx),%ebx
13: 85 db test %ebx,%ebx
15: 75 e3 jne 0xfffffffffffffffa
17: 5a pop %rdx
18: 85 f6 test %esi,%esi
1a: 0f 94 c0 sete %al
1d: 5b pop %rbx
1e: 5e pop %rsi
1f: 5f pop %rdi
20: 5d pop %rbp
21: c3 retq
22: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi
29: 90 nop
2a:* 0f 0b ud2 <-- trapping instruction
2c: eb d7 jmp 0x5
2e: 8d 74 26 00 lea 0x0(%rsi,%riz,1),%esi
32: 85 f6 test %esi,%esi
34: 0f 94 c0 sete %al
37: c3 retq
38: 66 90 xchg %ax,%ax
3a: 55 push %rbp
3b: 89 e5 mov %esp,%ebp
3d: 57 push %rdi
3e: 56 push %rsi
3f: 89 .byte 0x89
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: eb d7 jmp 0xffffffffffffffdb
4: 8d 74 26 00 lea 0x0(%rsi,%riz,1),%esi
8: 85 f6 test %esi,%esi
a: 0f 94 c0 sete %al
d: c3 retq
e: 66 90 xchg %ax,%ax
10: 55 push %rbp
11: 89 e5 mov %esp,%ebp
13: 57 push %rdi
14: 56 push %rsi
15: 89 .byte 0x89
[ 110.862416][ T857] EAX: f338c408 EBX: ef4b1bd0 ECX: 00000001 EDX: 9e08001b
[ 110.863153][ T857] ESI: 00000000 EDI: 00000048 EBP: f33f7e80 ESP: f33f7e70
[ 110.863887][ T857] DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068 EFLAGS: 00010286
[ 110.864670][ T857] CR0: 80050033 CR2: 000000ff CR3: 333be000 CR4: 00040690
[ 110.865415][ T857] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 110.866160][ T857] DR6: fffe0ff0 DR7: 00000400
[ 110.866620][ T857] Call Trace:
[ 110.866945][ T857] user_shm_unlock (include/linux/spinlock.h:394 mm/mlock.c:852)
[ 110.867559][ T857] shmem_lock (mm/shmem.c:2249)
[ 110.867988][ T857] ksys_shmctl (ipc/shm.c:1122 ipc/shm.c:1187)
[ 110.868438][ T857] ? ksys_shmctl (arch/x86/include/asm/preempt.h:80 include/linux/rcupdate.h:68 include/linux/rcupdate.h:654 ipc/shm.c:1069 ipc/shm.c:1187)
[ 110.868920][ T857] ? __lock_acquire (kernel/locking/lockdep.c:4901)
[ 110.869436][ T857] ? kvm_sched_clock_read (arch/x86/include/asm/preempt.h:85 arch/x86/kernel/kvmclock.c:90 arch/x86/kernel/kvmclock.c:101)
[ 110.870020][ T857] ? sched_clock (arch/x86/include/asm/paravirt.h:22 arch/x86/kernel/tsc.c:252)
[ 110.870565][ T857] ? sched_clock_cpu (kernel/sched/clock.c:371)
[ 110.871238][ T857] ? find_held_lock (kernel/locking/lockdep.c:5004)
[ 110.871763][ T857] ? rcu_read_lock_sched_held (kernel/rcu/update.c:125)
[ 110.872352][ T857] ? syscall_trace_enter+0xff/0x1c0
[ 110.872927][ T857] __ia32_sys_shmctl (ipc/shm.c:1193)
[ 110.873427][ T857] __do_fast_syscall_32 (arch/x86/entry/common.c:77 arch/x86/entry/common.c:140)
[ 110.873963][ T857] do_fast_syscall_32 (arch/x86/entry/common.c:165)
[ 110.874492][ T857] do_SYSENTER_32 (arch/x86/entry/common.c:209)
[ 110.874950][ T857] entry_SYSENTER_32 (arch/x86/entry/entry_32.S:953)
[ 110.875466][ T857] EIP: 0xb7ee9549
[ 110.875867][ T857] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d 76 00 58 b8 77 00 00 00 cd 80 90 8d 76
All code
========
0: 03 74 c0 01 add 0x1(%rax,%rax,8),%esi
4: 10 05 03 74 b8 01 adc %al,0x1b87403(%rip) # 0x1b8740d
a: 10 06 adc %al,(%rsi)
c: 03 74 b4 01 add 0x1(%rsp,%rsi,4),%esi
10: 10 07 adc %al,(%rdi)
12: 03 74 b0 01 add 0x1(%rax,%rsi,4),%esi
16: 10 08 adc %cl,(%rax)
18: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi
1c: 00 00 add %al,(%rax)
1e: 00 00 add %al,(%rax)
20: 00 51 52 add %dl,0x52(%rcx)
23: 55 push %rbp
24: 89 e5 mov %esp,%ebp
26: 0f 34 sysenter
28: cd 80 int $0x80
2a:* 5d pop %rbp <-- trapping instruction
2b: 5a pop %rdx
2c: 59 pop %rcx
2d: c3 retq
2e: 90 nop
2f: 90 nop
30: 90 nop
31: 90 nop
32: 8d 76 00 lea 0x0(%rsi),%esi
35: 58 pop %rax
36: b8 77 00 00 00 mov $0x77,%eax
3b: cd 80 int $0x80
3d: 90 nop
3e: 8d .byte 0x8d
3f: 76 .byte 0x76
Code starting with the faulting instruction
===========================================
0: 5d pop %rbp
1: 5a pop %rdx
2: 59 pop %rcx
3: c3 retq
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 8d 76 00 lea 0x0(%rsi),%esi
b: 58 pop %rax
c: b8 77 00 00 00 mov $0x77,%eax
11: cd 80 int $0x80
13: 90 nop
14: 8d .byte 0x8d
15: 76 .byte 0x76
To reproduce:
# build kernel
cd linux
cp config-5.12.0-00007-gd7c9e99aee48 .config
make HOSTCC=gcc-9 CC=gcc-9 ARCH=i386 olddefconfig prepare modules_prepare bzImage
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
10 months
[dmaengine] fe364a7d95: UBSAN:array-index-out-of-bounds_in_drivers/acpi/acpica/dswexec.c
by kernel test robot
Greeting,
FYI, we noticed the following commit (built with gcc-9):
commit: fe364a7d95c24e07e9b3f2ab917f01d6d8330bba ("dmaengine: dw: Program xBAR hardware for Elkhart Lake")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master
in testcase: netperf
version: netperf-x86_64-2.7-0_20210908
with following parameters:
ip: ipv4
runtime: 300s
nr_threads: 1
cluster: cs-localhost
test: TCP_CRR
cpufreq_governor: performance
ucode: 0xb000280
test-description: Netperf is a benchmark that can be use to measure various aspect of networking performance.
test-url: http://www.netperf.org/netperf/
on test machine: 96 threads 2 sockets Ice Lake with 256G memory
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang(a)intel.com>
[ 47.872842][ T1341] ================================================================================
[ 47.884637][ T1341] UBSAN: array-index-out-of-bounds in drivers/acpi/acpica/dswexec.c:401:12
[ 47.884644][ T1341] index -1 is out of range for type 'acpi_operand_object *[9]'
[ 47.884647][ T1341] CPU: 9 PID: 1341 Comm: systemd-udevd Not tainted 5.14.0-rc1-00001-gfe364a7d95c2-dirty #1
[ 47.884650][ T1341] Call Trace:
0m] Reached targ[ 47.889421][ T1346] IPMI message handler: version 39.2
[ 47.927593][ T1341] ubsan_epilogue+0x5/0x40
[ 47.931873][ T1341] __ubsan_handle_out_of_bounds+0x69/0x80
[ 47.943808][ T1341] acpi_ps_parse_loop+0x4a5/0x5e4
[ 47.948707][ T1341] acpi_ps_parse_aml+0x94/0x2c0
[ 47.954716][ T1341] acpi_ps_execute_method+0x15e/0x193
[ 47.959953][ T1341] acpi_ns_evaluate+0x1c7/0x25e
[ 47.964663][ T1341] acpi_evaluate_object+0x140/0x250
[ 47.969727][ T1341] acpi_evaluate_dsm+0xac/0x140
[ 47.974456][ T1341] acpi_nfit_ctl+0x2c0/0xa00 [nfit]
[ 47.979522][ T1341] ? lock_acquire+0xbb/0x2c0
[ 47.983985][ T1341] intel_bus_fwa_businfo+0x6a/0xc0 [nfit]
[ 47.989580][ T1341] intel_bus_fwa_state+0x66/0x100 [nfit]
[ 47.995086][ T1341] intel_bus_fwa_capability+0x19/0x40 [nfit]
[ 48.000933][ T1341] nvdimm_bus_firmware_visible+0x35/0x80 [libnvdimm]
Startin[ 48.007478][ T1341] internal_create_group+0xde/0x380
OpenIPMI Driver [ 48.020614][ T1341] internal_create_groups+0x3d/0xc0
..
[ 48.033229][ T1341] ? dev_set_name+0x53/0x80
[ 48.037936][ T1341] nvdimm_bus_register+0x133/0x1c0 [libnvdimm]
[ 48.043959][ T1341] acpi_nfit_init+0xccf/0x1540 [nfit]
[ 48.049208][ T1341] ? get_object+0x40/0x40
[ 48.053409][ T1341] ? call_rcu+0x197/0x5c0
[ 48.057618][ T1341] ? lockdep_hardirqs_on_prepare+0xd4/0x180
[ 48.063392][ T1341] ? kfree+0x33b/0x5c0
[ 48.067341][ T1341] ? acpi_evaluate_object+0x229/0x250
[ 48.072592][ T1341] ? acpi_nfit_add+0x196/0x200 [nfit]
[ 48.077832][ T1341] acpi_nfit_add+0x196/0x200 [nfit]
[ 48.082897][ T1341] acpi_device_probe+0x44/0x180
Startin[ 48.087616][ T1341] really_probe+0xb3/0x340
e command to reb[ 48.106497][ T1341] __driver_attach+0x9e/0x180
.
[ 48.119201][ T1341] ? __device_attach_driver+0x100/0x100
[ 48.124863][ T1341] bus_for_each_dev+0x78/0xc0
[ 48.129409][ T1341] bus_add_driver+0x150/0x200
[ 48.133959][ T1341] driver_register+0x6c/0xc0
[ 48.138418][ T1341] ? 0xffffffffc065b000
[ 48.142453][ T1341] nfit_init+0x164/0x1000 [nfit]
[ 48.147269][ T1341] do_one_initcall+0x58/0x300
[ 48.151817][ T1341] ? kmem_cache_alloc_trace+0x58a/0x780
1;39mRegular bac[ 48.168887][ T1341] ? aa_get_task_label+0xc0/0x300
kground program [ 48.175164][ T1341] ? __do_sys_finit_module+0xae/0x140
processing daemo[ 48.181758][ T1341] __do_sys_finit_module+0xae/0x140
[ 48.188211][ T1341] do_syscall_64+0x38/0xc0
[ 48.193162][ T1341] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 48.198928][ T1341] RIP: 0033:0x7fbf24907f59
[ 48.203215][ T1341] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 07 6f 0c 00 f7 d8 64 89 01 48
[ 48.222712][ T1341] RSP: 002b:00007fffbc5e56e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 48.222715][ T1341] RAX: ffffffffffffffda RBX: 00005607041aae50 RCX: 00007fbf24907f59
[ 48.222717][ T1341] RDX: 0000000000000000 RSI: 00007fbf2480ccad RDI: 000000000000000f
Startin[ 48.222719][ T1341] RBP: 00007fbf2480ccad R08: 0000000000000000 R09: 0000000000000000
m Logging Servic[ 48.265121][ T1341] R13: 00005607042343b0 R14: 0000000000020000 R15: 00005607041aae50
[ 48.274370][ T1341] ================================================================================
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
sudo bin/lkp install job.yaml # job file is attached in this email
bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
sudo bin/lkp run generated-yaml-file
# if come across any failure that blocks the test,
# please remove ~/.lkp and /lkp dir to run from a clean state.
---
0DAY/LKP+ Test Infrastructure Open Source Technology Center
https://lists.01.org/hyperkitty/list/[email protected] Intel Corporation
Thanks,
Oliver Sang
10 months
