[[DEBUG] force CONFIG_DEBUG_UACCESS] 4805ee99b0: BUG: tried to access memory at 0x9eaf48b while not in USER_DS
by kernel test robot
FYI, we noticed the following commit:
https://git.kernel.org/pub/scm/linux/kernel/git/luto/linux.git x86/uaccess
commit 4805ee99b0ac1282d09545e294e218a575208b72 ("[DEBUG] force CONFIG_DEBUG_UACCESS")
on test machine: vm-lkp-wsx03-quantal-i386: 1 threads qemu-system-i386 -enable-kvm with 360M memory
caused below changes:
+----------------+------------+------------+
| | 19cca1fd38 | 4805ee99b0 |
+----------------+------------+------------+
| boot_successes | 26 | 0 |
+----------------+------------+------------+
[ 27.685036] Write protecting the kernel text: 7112k
[ 27.695139] Write protecting the kernel read-only data: 2544k
[ 27.722178] random: init urandom read with 1 bits of entropy available
[ 27.795802] BUG: tried to access memory at 0x9eaf48b while not in USER_DS
[ 27.806808] BUG: tried to access memory at 0x94a52ab while not in USER_DS
[ 27.806837] ------------[ cut here ]------------
[ 27.806840] kernel BUG at arch/x86/mm/extable.c:189!
[ 27.806843] invalid opcode: 0000 [#1] SMP
[ 27.806847] Modules linked in:
[ 27.806859] CPU: 0 PID: 131 Comm: sh Not tainted 4.7.0-rc2-00014-g4805ee9 #1
[ 27.806861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1 04/01/2014
[ 27.806864] task: ccb1b480 ti: d625e000 task.ti: d625e000
[ 27.806874] EIP: 0060:[<c1045626>] EFLAGS: 00010292 CPU: 0
[ 27.806904] EIP is at bad_uaccess_kernel_ds+0x16/0x20
[ 27.806907] EAX: 0000003d EBX: 094a52a8 ECX: c10a20ae EDX: 00000001
[ 27.806908] ESI: 00000000 EDI: ccb1b480 EBP: d625ff24 ESP: d625ff1c
[ 27.806910] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
[ 27.806912] CR0: 80050033 CR2: 094a5000 CR3: 1625a000 CR4: 00000690
[ 27.806918] Stack:
[ 27.806926] c18acd14 094a52ab d625ff38 c1175ad6 00000000 d5e75c00 ccaeb000 d625ff74
[ 27.806932] c11774a0 00000002 00000000 00000000 c11771a6 d62492bc 00000000 d5e75c00
[ 27.806939] 094a52a8 d62c76c0 00000000 d625ffb4 d625e000 b771aff4 d625ff84 c11779eb
[ 27.806940] Call Trace:
[ 27.806964] [<c1175ad6>] count+0x36/0xc0
[ 27.806969] [<c11774a0>] do_execveat_common+0x3e0/0x6c0
[ 27.806974] [<c11771a6>] ? do_execveat_common+0xe6/0x6c0
[ 27.806978] [<c11779eb>] SyS_execve+0x2b/0x30
[ 27.806982] [<c10014bd>] do_int80_syscall_32+0x6d/0xc0
[ 27.807005] [<c16eff5a>] entry_INT80_32+0x2a/0x2a
[ 27.807050] Code: 26 00 00 00 00 31 c0 5d c3 8d b6 00 00 00 00 8d bf 00 00 00 00 55 89 e5 83 ec 08 89 44 24 04 c7 04 24 14 cd 8a c1 e8 09 b4 0d 00 <0f> 0b 90 8d b4 26 00 00 00 00 55 89 e5 57 56 53 83 ec 0c 89 c3
[ 27.807057] EIP: [<c1045626>] bad_uaccess_kernel_ds+0x16/0x20 SS:ESP 0068:d625ff1c
[ 27.807081] ---[ end trace ecc4b7edb5ca4295 ]---
[ 27.807084] Kernel panic - not syncing: Fatal exception
FYI, raw QEMU command line is:
qemu-system-i386 -enable-kvm -kernel /pkg/linux/i386-randconfig-r0-201623/gcc-6/4805ee99b0ac1282d09545e294e218a575208b72/vmlinuz-4.7.0-rc2-00014-g4805ee9 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-lkp-wsx03-quantal-i386-11/bisect_boot-1-quantal-core-i386.cgz-i386-randconfig-r0-201623-4805ee99b0ac1282d09545e294e218a575208b72-20160611-75443-cg68q1-1.yaml~ ARCH=i386 kconfig=i386-randconfig-r0-201623 branch=linux-devel/devel-catchup-201606110618 commit=4805ee99b0ac1282d09545e294e218a575208b72 BOOT_IMAGE=/pkg/linux/i386-randconfig-r0-201623/gcc-6/4805ee99b0ac1282d09545e294e218a575208b72/vmlinuz-4.7.0-rc2-00014-g4805ee9 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-lkp-wsx03-quantal-i386/quantal-core-i386.cgz/i386-randconfig-r0-201623/gcc-6/4805ee99b0ac1282d09545e294e218a575208b72/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-lkp-wsx03-quantal-i386-11::dhcp drbd.minor_count=8' -initrd /fs/sdc1/initrd-vm-lkp-wsx03-quantal-i386-11 -m 360 -smp 1 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -pidfile /dev/shm/kboot/pid-vm-lkp-wsx03-quantal-i386-11 -serial file:/dev/shm/kboot/serial-vm-lkp-wsx03-quantal-i386-11 -daemonize -display none -monitor null
Thanks,
Kernel Test Robot
4 years, 8 months
[fs] 325bca518d: BUG kmalloc-4096 (Not tainted): Redzone overwritten
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/luto/linux.git x86/uaccess
commit 325bca518d477325102e898213c348ec620b0487
Author: Andy Lutomirski <luto(a)kernel.org>
AuthorDate: Sun May 29 15:54:05 2016 -0700
Commit: Andy Lutomirski <luto(a)kernel.org>
CommitDate: Fri Jun 10 15:11:15 2016 -0700
fs: Improve and simplify copy_mount_options
copy_mount_options always tries to copy a full page even if the
string is shorter than a page. If the string starts part-way into a
page and ends on the same page it started on, this means that
copy_mount_options can overrun the supplied buffer and read into the
next page.
If the buffer came from userspace (USER_DS), then this could be a
performance issue (reading across the page boundary could block).
If the buffer came from the kernel (KERNEL_DS), then this could read
an unrelated page, and the kernel can have pages mapped in that have
side-effects.
I noticed this due to a new sanity-check I'm working on that tries
to make sure that we don't try to access nonexistent pages under
KERNEL_DS.
This is the same issue that was fixed by commit eca6f534e619 ("fs:
fix overflow in sys_mount() for in-kernel calls"), but for
copy_mount_options instead of copy_mount_string.
Signed-off-by: Andy Lutomirski <luto(a)kernel.org>
+-----------------------------------------------------------+------------+------------+------------+
| | luto/20160 | 325bca518d | ed65a9b989 |
+-----------------------------------------------------------+------------+------------+------------+
| boot_successes | 10 | 0 | 0 |
| boot_failures | 88 | 32 | 49 |
| IP-Config:Auto-configuration_of_network_failed | 2 | | |
| Kernel_panic-not_syncing:Attempted_to_kill_init!exitcode= | 86 | 14 | 12 |
| BUG_kmalloc-#(Not_tainted):Redzone_overwritten | 0 | 32 | 49 |
| INFO:#-#.First_byte#instead_of | 0 | 32 | 49 |
| INFO:Allocated_in_copy_mount_options_age=#cpu=#pid= | 0 | 32 | 49 |
| INFO:Freed_in__register_sysctl_paths_age=#cpu=#pid= | 0 | 32 | 49 |
| INFO:Slab#objects=#used=#fp=#flags= | 0 | 32 | 49 |
| INFO:Object#@offset=#fp= | 0 | 32 | 49 |
| backtrace:kfree | 0 | 32 | 49 |
| backtrace:SyS_mount | 0 | 32 | 49 |
| backtrace:devtmpfsd | 0 | 32 | 49 |
| BUG_kmalloc-#(Tainted:G_B):Redzone_overwritten | 0 | 23 | 33 |
| INFO:Freed_in_kvfree_age=#cpu=#pid= | 0 | 23 | 33 |
| backtrace:compat_SyS_mount | 0 | 4 | |
| INFO:Allocated_in#age=#cpu=#pid= | 0 | 0 | 6 |
| INFO:Object#@offset=#fp=0x(null) | 0 | 0 | 6 |
| INFO:Allocated_in_do_select_age=#cpu=#pid= | 0 | 0 | 4 |
| INFO:Freed_in_zs_cpu_notifier_age=#cpu=#pid= | 0 | 0 | 3 |
| INFO:Slab#objects=#used=#fp=0x(null)flags= | 0 | 0 | 6 |
| INFO:Freed_in_cryptomgr_probe_age=#cpu=#pid= | 0 | 0 | 2 |
+-----------------------------------------------------------+------------+------------+------------+
[ 0.630144] x86: Booted up 1 node, 1 CPUs
[ 0.631585] smpboot: Total of 1 processors activated (5852.65 BogoMIPS)
[ 0.634530] =============================================================================
[ 0.637434] BUG kmalloc-4096 (Not tainted): Redzone overwritten
[ 0.639287] -----------------------------------------------------------------------------
[ 0.639287]
[ 0.643023] Disabling lock debugging due to kernel taint
[ 0.644653] INFO: 0xffff88000ee5c3f8-0xffff88000ee5c3ff. First byte 0x0 instead of 0xcc
[ 0.647383] INFO: Allocated in copy_mount_options+0x2e/0xa0 age=0 cpu=0 pid=11
[ 0.661654] INFO: Freed in __register_sysctl_paths+0x86/0x1b0 age=0 cpu=0 pid=1
[ 0.677123] INFO: Slab 0xffff88000f48c600 objects=7 used=5 fp=0xffff88000ee5c548 flags=0x280000004081
[ 0.680200] INFO: Object 0xffff88000ee5b3f8 @offset=13304 fp=0xffff88000ee5d600
[ 0.680200]
[ 0.683759] Redzone ffff88000ee5b3f0: cc cc cc cc cc cc cc cc ........
[ 0.686558] Object ffff88000ee5b3f8: 6d 6f 64 65 00 30 37 35 35 00 00 00 00 00 00 00 mode.0755.......
[ 0.689512] Object ffff88000ee5b408: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.692487] Object ffff88000ee5b418: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.695500] Object ffff88000ee5b428: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.698488] Object ffff88000ee5b438: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.701431] Object ffff88000ee5b448: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.704423] Object ffff88000ee5b458: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.707519] Object ffff88000ee5b468: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.710596] Object ffff88000ee5b478: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.713554] Object ffff88000ee5b488: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.716459] Object ffff88000ee5b498: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.719367] Object ffff88000ee5b4a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.722338] Object ffff88000ee5b4b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.725368] Object ffff88000ee5b4c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.728363] Object ffff88000ee5b4d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.731223] Object ffff88000ee5b4e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.734443] Object ffff88000ee5b4f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.737356] Object ffff88000ee5b508: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.740253] Object ffff88000ee5b518: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.743171] Object ffff88000ee5b528: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.746097] Object ffff88000ee5b538: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.749028] Object ffff88000ee5b548: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.751957] Object ffff88000ee5b558: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.754910] Object ffff88000ee5b568: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.757824] Object ffff88000ee5b578: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.760774] Object ffff88000ee5b588: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.763712] Object ffff88000ee5b598: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.766647] Object ffff88000ee5b5a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.769562] Object ffff88000ee5b5b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.772534] Object ffff88000ee5b5c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.775435] Object ffff88000ee5b5d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.778365] Object ffff88000ee5b5e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.781304] Object ffff88000ee5b5f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.784224] Object ffff88000ee5b608: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.787172] Object ffff88000ee5b618: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.790085] Object ffff88000ee5b628: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.793040] Object ffff88000ee5b638: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.812474] Object ffff88000ee5b648: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.815427] Object ffff88000ee5b658: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.818331] Object ffff88000ee5b668: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.821277] Object ffff88000ee5b678: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.824181] Object ffff88000ee5b688: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.827134] Object ffff88000ee5b698: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.830053] Object ffff88000ee5b6a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.833046] Object ffff88000ee5b6b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.835974] Object ffff88000ee5b6c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.838931] Object ffff88000ee5b6d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.841856] Object ffff88000ee5b6e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.844815] Object ffff88000ee5b6f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.847748] Object ffff88000ee5b708: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.850719] Object ffff88000ee5b718: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.853663] Object ffff88000ee5b728: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.856642] Object ffff88000ee5b738: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.859570] Object ffff88000ee5b748: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.862578] Object ffff88000ee5b758: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.865500] Object ffff88000ee5b768: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.868469] Object ffff88000ee5b778: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.871394] Object ffff88000ee5b788: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.874378] Object ffff88000ee5b798: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.877292] Object ffff88000ee5b7a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.880273] Object ffff88000ee5b7b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.883217] Object ffff88000ee5b7c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.886174] Object ffff88000ee5b7d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.889083] Object ffff88000ee5b7e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.892045] Object ffff88000ee5b7f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.894954] Object ffff88000ee5b808: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.897922] Object ffff88000ee5b818: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.900849] Object ffff88000ee5b828: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.903793] Object ffff88000ee5b838: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.906745] Object ffff88000ee5b848: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.909689] Object ffff88000ee5b858: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.912613] Object ffff88000ee5b868: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.915562] Object ffff88000ee5b878: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.918504] Object ffff88000ee5b888: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.921405] Object ffff88000ee5b898: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.924371] Object ffff88000ee5b8a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.927658] Object ffff88000ee5b8b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.930569] Object ffff88000ee5b8c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.933672] Object ffff88000ee5b8d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.936580] Object ffff88000ee5b8e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.939485] Object ffff88000ee5b8f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.942447] Object ffff88000ee5b908: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.945351] Object ffff88000ee5b918: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.948303] Object ffff88000ee5b928: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.951229] Object ffff88000ee5b938: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.964457] Object ffff88000ee5b948: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.967412] Object ffff88000ee5b958: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.970332] Object ffff88000ee5b968: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.975310] Object ffff88000ee5b978: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.978265] Object ffff88000ee5b988: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.984285] Object ffff88000ee5b998: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.987208] Object ffff88000ee5b9a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.990161] Object ffff88000ee5b9b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.993081] Object ffff88000ee5b9c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.996055] Object ffff88000ee5b9d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 0.998969] Object ffff88000ee5b9e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.001884] Object ffff88000ee5b9f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.004853] Object ffff88000ee5ba08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.012819] Object ffff88000ee5ba18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.015733] Object ffff88000ee5ba28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.018696] Object ffff88000ee5ba38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.021683] Object ffff88000ee5ba48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.024686] Object ffff88000ee5ba58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.027641] Object ffff88000ee5ba68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.030551] Object ffff88000ee5ba78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.033546] Object ffff88000ee5ba88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.036609] Object ffff88000ee5ba98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.039628] Object ffff88000ee5baa8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.042645] Object ffff88000ee5bab8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.045552] Object ffff88000ee5bac8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.048552] Object ffff88000ee5bad8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.051457] Object ffff88000ee5bae8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.054530] Object ffff88000ee5baf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.057517] Object ffff88000ee5bb08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.060483] Object ffff88000ee5bb18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.063399] Object ffff88000ee5bb28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.066360] Object ffff88000ee5bb38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.069276] Object ffff88000ee5bb48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.072252] Object ffff88000ee5bb58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.075177] Object ffff88000ee5bb68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.078092] Object ffff88000ee5bb78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.081047] Object ffff88000ee5bb88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.083998] Object ffff88000ee5bb98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.086942] Object ffff88000ee5bba8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.089880] Object ffff88000ee5bbb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.092818] Object ffff88000ee5bbc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.095761] Object ffff88000ee5bbd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.115502] Object ffff88000ee5bbe8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.118587] Object ffff88000ee5bbf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.121620] Object ffff88000ee5bc08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.124521] Object ffff88000ee5bc18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.127379] Object ffff88000ee5bc28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.130240] Object ffff88000ee5bc38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.133272] Object ffff88000ee5bc48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.136362] Object ffff88000ee5bc58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.139329] Object ffff88000ee5bc68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.142323] Object ffff88000ee5bc78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.145394] Object ffff88000ee5bc88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.148495] Object ffff88000ee5bc98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.151524] Object ffff88000ee5bca8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.154467] Object ffff88000ee5bcb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.157392] Object ffff88000ee5bcc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.160332] Object ffff88000ee5bcd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.163323] Object ffff88000ee5bce8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.166327] Object ffff88000ee5bcf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.169334] Object ffff88000ee5bd08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.177660] Object ffff88000ee5bd18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.180688] Object ffff88000ee5bd28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.183777] Object ffff88000ee5bd38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.186842] Object ffff88000ee5bd48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.189854] Object ffff88000ee5bd58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.192883] Object ffff88000ee5bd68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.195888] Object ffff88000ee5bd78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.198898] Object ffff88000ee5bd88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.201927] Object ffff88000ee5bd98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.204941] Object ffff88000ee5bda8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.207945] Object ffff88000ee5bdb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.210956] Object ffff88000ee5bdc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.213980] Object ffff88000ee5bdd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.217058] Object ffff88000ee5bde8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.220089] Object ffff88000ee5bdf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.223118] Object ffff88000ee5be08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.226121] Object ffff88000ee5be18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.229136] Object ffff88000ee5be28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.232192] Object ffff88000ee5be38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.235210] Object ffff88000ee5be48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.238220] Object ffff88000ee5be58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.241243] Object ffff88000ee5be68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.244268] Object ffff88000ee5be78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.247288] Object ffff88000ee5be88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.250298] Object ffff88000ee5be98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.253315] Object ffff88000ee5bea8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.257725] Object ffff88000ee5beb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.260737] Object ffff88000ee5bec8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.263757] Object ffff88000ee5bed8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.266764] Object ffff88000ee5bee8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.269773] Object ffff88000ee5bef8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.272792] Object ffff88000ee5bf08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.275801] Object ffff88000ee5bf18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.278812] Object ffff88000ee5bf28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.281818] Object ffff88000ee5bf38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.284806] Object ffff88000ee5bf48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.287812] Object ffff88000ee5bf58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.290865] Object ffff88000ee5bf68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.293979] Object ffff88000ee5bf78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.297098] Object ffff88000ee5bf88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 1.302031] Object ffff88000ee5bf98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
git bisect start ed65a9b989eebd576ad2bcfa7a46d9a502116449 af8c34ce6ae32addda3788d54a7e340cad22516b --
git bisect good b433186d4ebcbe9c85c595c56571a45a0e8b0a98 # 07:27 22+ 6 Merge 'linux-review/Benjamin-Coddington/pnfs-blocklayout-put-deviceid-node-after-releasing-bl_ext_lock/20160611-051226' into devel-catchup-201606110637
git bisect bad 74330a1d09ed3c8531cc7aef133de5c555867586 # 07:36 0- 20 Merge 'linux-review/Luis-R-Rodriguez/scripts-coccicheck-add-paramap-and-indexing-options/20160611-044623' into devel-catchup-201606110637
git bisect bad dc1500fc5d25e24bf0937627c7400f724a7ce7a5 # 07:41 0- 26 Merge 'luto/x86/uaccess' into devel-catchup-201606110637
git bisect good 6ca6e6e4f0bfd534e7586d953eebe77eae03b7de # 07:47 22+ 16 Merge 'linux-review/Heinrich-Schuchardt/selinuxfs-fix-type-mismatch/20160611-051623' into devel-catchup-201606110637
git bisect good 87b68ffea54a2ec788000bffd50a5624dee9c221 # 07:53 22+ 0 Merge 'linux-review/David-Howells/rxrpc-Limit-the-listening-backlog/20160611-053504' into devel-catchup-201606110637
git bisect bad 6a999f8f4d866c54982e5d8b0b8084f4ec8660fa # 07:58 0- 24 x86/uaccess: Give uaccess faults their own handler
git bisect bad 325bca518d477325102e898213c348ec620b0487 # 08:05 0- 22 fs: Improve and simplify copy_mount_options
git bisect good f89dec72e98b34b3be66bb1ef1be62974c0f8483 # 08:12 22+ 24 uvc_v4l2: Simplify compat ioctl implementation
# first bad commit: [325bca518d477325102e898213c348ec620b0487] fs: Improve and simplify copy_mount_options
git bisect good f89dec72e98b34b3be66bb1ef1be62974c0f8483 # 08:13 60+ 84 uvc_v4l2: Simplify compat ioctl implementation
# extra tests with CONFIG_DEBUG_INFO_REDUCED
git bisect bad 325bca518d477325102e898213c348ec620b0487 # 08:22 0- 4 fs: Improve and simplify copy_mount_options
# extra tests on HEAD of linux-devel/devel-catchup-201606110637
git bisect bad ed65a9b989eebd576ad2bcfa7a46d9a502116449 # 08:23 0- 49 0day head guard for 'devel-catchup-201606110637'
# extra tests on tree/branch luto/x86/uaccess
git bisect bad 4805ee99b0ac1282d09545e294e218a575208b72 # 08:25 0- 8 [DEBUG] force CONFIG_DEBUG_UACCESS
# extra tests on tree/branch linus/master
git bisect good 3d0f0b6a5520878305589411b8d434fe088e4f21 # 08:36 63+ 39 Merge branch 'for-linus-4.7' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs
# extra tests on tree/branch linux-next/master
git bisect good 8f6027f7e808ed7c1fd8c8d37fc7a5076c683c4f # 08:39 66+ 45 Add linux-next specific files for 20160609
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
initrd=yocto-minimal-x86_64.cgz
wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu Haswell,+smep,+smap
-kernel $kernel
-initrd $initrd
-m 256
-smp 1
-device e1000,netdev=net0
-netdev user,id=net0
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
systemd.log_level=err
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 8 months
[block] 5f1c7c9dad: BUG: unable to handle kernel NULL pointer dereference at 00000000000004f8
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
git://git.infradead.org/users/hch/block.git req_op
commit 5f1c7c9dade4024822e60db44f70fde6ebe92df7
Author: Christoph Hellwig <hch(a)lst.de>
AuthorDate: Thu Jun 9 14:16:03 2016 +0200
Commit: Christoph Hellwig <hch(a)lst.de>
CommitDate: Thu Jun 9 15:08:31 2016 +0200
block: replace req->cmd_type and the op type with req->op
+--------------------------------------------------------------------------+------------+------------+------------+
| | c502e01d03 | 5f1c7c9dad | d1b3cde99d |
+--------------------------------------------------------------------------+------------+------------+------------+
| boot_successes | 66 | 0 | 0 |
| boot_failures | 0 | 23 | 13 |
| BUG:unable_to_handle_kernel | 0 | 22 | 13 |
| Oops | 0 | 23 | 13 |
| RIP:blk_account_io_completion | 0 | 21 | 13 |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 23 | 13 |
| backtrace:do_sys_open | 0 | 3 | |
| backtrace:SyS_open | 0 | 3 | |
| WARNING:at_block/blk-exec.c:#blk_execute_rq_nowait | 0 | 13 | 12 |
| backtrace:vfs_read | 0 | 18 | 12 |
| backtrace:SyS_read | 0 | 18 | 12 |
| backtrace:do_group_exit | 0 | 1 | |
| backtrace:SyS_exit_group | 0 | 1 | |
| backtrace:do_unlinkat | 0 | 1 | |
| backtrace:SyS_unlink | 0 | 1 | |
| backtrace:user_path_at_empty | 0 | 2 | 2 |
| backtrace:SyS_readlinkat | 0 | 2 | 2 |
| backtrace:SyS_readlink | 0 | 2 | 2 |
| RIP:#:[<#>]s_bi[n</mfofdpfrofbef'f'ff813e2580>]blk_account_io_completion | 0 | 1 | |
| backtrace:__sys_sendmsg | 0 | 1 | |
| backtrace:SyS_sendmsg | 0 | 1 | |
| backtrace:path_init | 0 | 1 | |
| backtrace:sock_create | 0 | 0 | 1 |
| backtrace:SyS_socket | 0 | 0 | 1 |
| backtrace:do_munmap | 0 | 0 | 2 |
| backtrace:SyS_munmap | 0 | 0 | 2 |
| backtrace:vfs_stat | 0 | 0 | 2 |
| backtrace:SyS_newstat | 0 | 0 | 2 |
+--------------------------------------------------------------------------+------------+------------+------------+
udevd[259]: failed to execute '/sbin/modprobe' '/sbin/modprobe -bv acpi:LNXSYBUS:': No such file or directory
udevd[261]: failed to execute '/sbin/modprobe' '/sbin/modprobe -bv acpi:LNXSYBUS:': No such file or directory
udevd[262]: failed to execute '/sbin/modprobe' '/sbin/modprobe -bv ide:m-cdrom': No such file or directory
[ 11.174434] BUG: unable to handle kernel NULL pointer dereference at 00000000000004f8
[ 11.175798] IP: [<ffffffff813e2580>] blk_account_io_completion+0x71/0xe8
[ 11.176910] PGD 0
[ 11.177219] ------------[ cut here ]------------
[ 11.177224] WARNING: CPU: 0 PID: 244 at block/blk-exec.c:58 blk_execute_rq_nowait+0x68/0x108
[ 11.177227] CPU: 0 PID: 244 Comm: udevd Tainted: G W 4.7.0-rc2-00069-g5f1c7c9 #8
[ 11.177228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1 04/01/2014
[ 11.177229] 0000000000000000 ffff88000a1d3b20 ffffffff813fa82f 0000000000000000
[ 11.177232] ffffffff8224f7da ffff88000a1d3b60 ffffffff810796d4 0000003a0a1d3c48
[ 11.177236] ffff880012040000 ffff880012020cf8 0000000000000002 0000000000000000
[ 11.177238] Call Trace:
[ 11.177242] [<ffffffff813fa82f>] dump_stack+0x61/0x7e
[ 11.177245] [<ffffffff810796d4>] __warn+0xb3/0xce
[ 11.177247] [<ffffffff8107979c>] warn_slowpath_null+0x18/0x1a
[ 11.177249] [<ffffffff813e7516>] blk_execute_rq_nowait+0x68/0x108
[ 11.177251] [<ffffffff813e748e>] ? blk_rq_map_kern+0x121/0x121
[ 11.177253] [<ffffffff813e7676>] blk_execute_rq+0xc0/0x108
[ 11.177257] [<ffffffff815b2dff>] virtblk_serial_show+0x8d/0xc9
[ 11.177259] [<ffffffff81593fe6>] dev_attr_show+0x20/0x44
[ 11.177261] [<ffffffff811b41d6>] sysfs_kf_seq_show+0x7a/0xca
[ 11.177263] [<ffffffff811b2e1d>] kernfs_seq_show+0x21/0x23
[ 11.177265] [<ffffffff8117a41b>] seq_read+0x174/0x349
[ 11.177267] [<ffffffff811b35f4>] kernfs_fop_read+0x37/0x168
[ 11.177269] [<ffffffff8115b366>] __vfs_read+0x21/0xeb
[ 11.177271] [<ffffffff81163dde>] ? putname+0x44/0x47
[ 11.177273] [<ffffffff81412857>] ? debug_check_no_obj_freed+0x12/0x14
[ 11.177276] [<ffffffff81148a8b>] ? kmem_cache_free+0x145/0x1c8
[ 11.177278] [<ffffffff8115b4d1>] vfs_read+0xa1/0x10f
[ 11.177279] [<ffffffff8115b89a>] SyS_read+0x4c/0x89
[ 11.177282] [<ffffffff81d0e976>] entry_SYSCALL_64_fastpath+0x1e/0xad
[ 11.177283] ---[ end trace d46d56a1b7009c59 ]---
git bisect start d1b3cde99d4434330e0e50159690c6f50e971d94 af8c34ce6ae32addda3788d54a7e340cad22516b --
git bisect bad 0e78022404e1ddcc4d03bd217449086033053dd2 # 02:44 2- 20 Merge 'linux-review/Kamal-Mostafa/Patch-MIPS-lib-Mark-intrinsics-notrace-has-been-added-to-the-4-2-y-ckt-tree/20160609-225100' into devel-catchup-201606092309
git bisect bad 2c7a96acf16691c07935a6acfeda4744538ecb53 # 02:50 0- 23 Merge 'linux-review/Kamal-Mostafa/Patch-MIPS-KVM-Fix-timer-IRQ-race-when-freezing-timer-has-been-added-to-the-4-2-y-ckt-tree/20160609-223834' into devel-catchup-201606092309
git bisect bad 108215e866d3cf602b0c268cb5549aef95dd1427 # 02:56 0- 6 Merge 'linux-review/Andrea-Merello/Add-DRM-driver-for-OpenCores-VGA-LCD-display/20160609-215802' into devel-catchup-201606092309
git bisect good 435a7a783cecc2a62cd70981c06bace98425d26c # 03:01 23+ 0 0day base guard for 'devel-catchup-201606092309'
git bisect bad ffd803ea3cf8cf1d72a95d6ac42cea284ca54d46 # 03:06 0- 27 Merge 'hch-block/req_op' into devel-catchup-201606092309
git bisect good 8fe0d473f5477e9916d3ac581a226acfe83142be # 03:11 22+ 0 block: convert merge/insert code to check for REQ_OPs.
git bisect good c45741d9e3f6ecb73c0dd7ead63abff2cc337c23 # 03:20 21+ 0 Merge branch 'for-4.8/core' into for-next
git bisect good 7e6984260fa491dca086cf8a342488c4f93536fc # 03:33 23+ 0 Merge branch 'for-4.8/core' into for-next
git bisect good 8cc62b37f584445556c8743d2e56dd4863c02f4d # 03:44 23+ 0 mg_disk: fix enum REQ_OP_ kbuild error
git bisect good c502e01d03fbc71e9cf2654c6ed61f2d75a68db8 # 03:54 23+ 0 block: add a separate operation type for secure erase
git bisect bad 5f1c7c9dade4024822e60db44f70fde6ebe92df7 # 03:56 1- 21 block: replace req->cmd_type and the op type with req->op
# first bad commit: [5f1c7c9dade4024822e60db44f70fde6ebe92df7] block: replace req->cmd_type and the op type with req->op
git bisect good c502e01d03fbc71e9cf2654c6ed61f2d75a68db8 # 03:59 66+ 0 block: add a separate operation type for secure erase
# extra tests on HEAD of linux-devel/devel-catchup-201606092309
git bisect bad d1b3cde99d4434330e0e50159690c6f50e971d94 # 03:59 0- 13 0day head guard for 'devel-catchup-201606092309'
# extra tests on tree/branch hch-block/req_op
git bisect bad 5f1c7c9dade4024822e60db44f70fde6ebe92df7 # 04:01 0- 23 block: replace req->cmd_type and the op type with req->op
# extra tests with first bad commit reverted
git bisect good d26046e3f0b5878bd143ddffa2336d84dfa310ed # 04:38 69+ 0 Revert "block: replace req->cmd_type and the op type with req->op"
# extra tests on tree/branch linus/master
git bisect good c8ae067f2635be0f8c7e5db1bb74b757d623e05b # 04:45 68+ 0 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
# extra tests on tree/branch linux-next/master
git bisect good 8f6027f7e808ed7c1fd8c8d37fc7a5076c683c4f # 05:10 69+ 0 Add linux-next specific files for 20160609
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
initrd=quantal-core-x86_64.cgz
wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu kvm64
-kernel $kernel
-initrd $initrd
-m 300
-smp 2
-device e1000,netdev=net0
-netdev user,id=net0
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
systemd.log_level=err
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 8 months
[TTY] 7411df6b66: WARNING: CPU: 0 PID: 1 at drivers/tty/serial/serial_core.c:98 uart_install+0xd4/0xe0
by kernel test robot
FYI, we noticed the following commit:
https://git.kernel.org/pub/scm/linux/kernel/git/jirislaby/linux.git devel
commit 7411df6b66594f6eaeac23fe0174aad4aa71d6f9 ("TTY: serial_core, add ->install")
on test machine: vm-vp-quantal-x86_64: 2 threads qemu-system-x86_64 -enable-kvm with 360M memory
caused below changes:
+----------------+------------+------------+
| | 16b6770edb | 7411df6b66 |
+----------------+------------+------------+
| boot_successes | 0 | 0 |
+----------------+------------+------------+
WARNING: 'debug_locks && !lock_is_held(&(&state->port.mutex)->dep_map)' is true!
------------[ cut here ]------------
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1 at drivers/tty/serial/serial_core.c:98 uart_install+0xd4/0xe0
WARNING: CPU: 0 PID: 1 at drivers/tty/serial/serial_core.c:98 uart_install+0xd4/0xe0
CPU: 0 PID: 1 Comm: swapper Not tainted 4.7.0-rc2-next-20160609-00023-g7411df6 #1
CPU: 0 PID: 1 Comm: swapper Not tainted 4.7.0-rc2-next-20160609-00023-g7411df6 #1
power_supply test_battery: uevent
FYI, raw QEMU command line is:
qemu-system-x86_64 -enable-kvm -kernel /pkg/linux/x86_64-randconfig-s1-06091829/gcc-6/7411df6b66594f6eaeac23fe0174aad4aa71d6f9/vmlinuz-4.7.0-rc2-next-20160609-00023-g7411df6 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-vp-quantal-x86_64-49/bisect_boot-1-quantal-core-x86_64.cgz-x86_64-randconfig-s1-06091829-7411df6b66594f6eaeac23fe0174aad4aa71d6f9-20160610-12341-j3nm4r-0.yaml~ ARCH=x86_64 kconfig=x86_64-randconfig-s1-06091829 branch=linux-devel/devel-catchup-201606092006 commit=7411df6b66594f6eaeac23fe0174aad4aa71d6f9 BOOT_IMAGE=/pkg/linux/x86_64-randconfig-s1-06091829/gcc-6/7411df6b66594f6eaeac23fe0174aad4aa71d6f9/vmlinuz-4.7.0-rc2-next-20160609-00023-g7411df6 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-vp-quantal-x86_64/quantal-core-x86_64.cgz/x86_64-randconfig-s1-06091829/gcc-6/7411df6b66594f6eaeac23fe0174aad4aa71d6f9/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-vp-quantal-x86_64-49::dhcp drbd.minor_count=8' -initrd /fs/sdf1/initrd-vm-vp-quantal-x86_64-49 -m 360 -smp 2 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -pidfile /dev/shm/kboot/pid-vm-vp-quantal-x86_64-49 -serial file:/dev/shm/kboot/serial-vm-vp-quantal-x86_64-49 -daemonize -display none -monitor null
Thanks,
Kernel Test Robot
4 years, 8 months
Extending the 0-day system with syzkaller?
by David Drysdale
Hi Fengguang / LKP-folk,
Quick question -- how easy is it to add extra builds/tests/checks to
your marvellous 0-day kbuild system?
The reason I ask is that I've recently been exploring syzkaller [1],
which is a system call fuzzer written by some of my colleagues here at
Google (cc'ed). Although it's fairly new, it has uncovered a bunch of
kernel bugs already [2] so I wondered if it might be a good candidate
for inclusion in the 0-day checks at some point.
(As an aside, I'm in the process of writing an article about syzkaller
for LWN, which might also expose it to more folk.)
What do you think?
Thanks,
David
[1] https://github.com/google/syzkaller
[2] https://github.com/google/syzkaller/wiki/Found-Bugs
4 years, 8 months
[lkp] [locking/rwsem] 133e89ef5e: +12.6% improvement of vm-scalability.throughput
by kernel test robot
FYI, we noticed a +12.6% improvement of vm-scalability.throughput due to commit:
commit 133e89ef5ef338e1358b16246521ba17d935c396 ("locking/rwsem: Enable lockless waiter wakeup(s)")
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git locking/core
in testcase: vm-scalability
on test machine: lkp-bdw-ex2: 160 threads Broadwell-EX with 512G memory
with following parameters: cpufreq_governor=performance/runtime=300s/test=small-allocs-mt
Disclaimer:
Results have been estimated based on internal Intel analysis and are provided
for informational purposes only. Any difference in system hardware or software
design or configuration may affect actual performance.
Thanks,
Xiaolong
4 years, 8 months
[lkp] [locking/rwsem] e24d283289: vm-scalability.throughput -48.0% regression
by kernel test robot
FYI, we noticed vm-scalability.throughput -48.0% regression due to commit:
commit e24d283289a6a4cef9caceec31d389dfeeb21b48 ("locking/rwsem: Add reader-owned state to the owner field")
https://git.kernel.org/pub/scm/linux/kernel/git/peterz/queue.git locking/atomic
in testcase: vm-scalability
on test machine: lkp-hsx04: 144 threads Brickland Haswell-EX with 512G memory
with following parameters: cpufreq_governor=performance/runtime=300s/test=small-allocs
Details are as below:
-------------------------------------------------------------------------------------------------->
=========================================================================================
compiler/cpufreq_governor/kconfig/rootfs/runtime/tbox_group/test/testcase:
gcc-4.9/performance/x86_64-rhel/debian-x86_64-2015-02-07.cgz/300s/lkp-hsx04/small-allocs/vm-scalability
commit:
c37dd24e4c7ab010715a56b39c4c21302c96e8d7
e24d283289a6a4cef9caceec31d389dfeeb21b48
c37dd24e4c7ab010 e24d283289a6a4cef9caceec31
---------------- --------------------------
fail:runs %reproduction fail:runs
| | |
:4 25% 1:4 kmsg.Spurious_LAPIC_timer_interrupt_on_cpu
%stddev %change %stddev
\ | \
24139001 ± 0% -48.0% 12555858 ± 0% vm-scalability.throughput
299.32 ± 2% +29.7% 388.19 ± 0% vm-scalability.time.elapsed_time
299.32 ± 2% +29.7% 388.19 ± 0% vm-scalability.time.elapsed_time.max
6298 ± 4% +1999.6% 132237 ± 1% vm-scalability.time.involuntary_context_switches
1.074e+09 ± 0% -21.9% 8.391e+08 ± 0% vm-scalability.time.minor_page_faults
915.50 ± 1% +546.1% 5915 ± 0% vm-scalability.time.percent_of_cpu_this_job_got
1532 ± 2% +1339.2% 22061 ± 1% vm-scalability.time.system_time
1207 ± 0% -25.1% 903.83 ± 0% vm-scalability.time.user_time
55730114 ± 3% -72.4% 15365125 ± 3% vm-scalability.time.voluntary_context_switches
354.90 ± 2% +24.2% 440.93 ± 0% uptime.boot
47743 ± 2% -16.8% 39734 ± 1% uptime.idle
11033 ± 3% +16.6% 12866 ± 5% softirqs.NET_RX
465644 ± 8% +77.0% 824221 ± 4% softirqs.RCU
822386 ± 3% -34.4% 539306 ± 3% softirqs.SCHED
2832016 ± 3% +362.3% 13091690 ± 1% softirqs.TIMER
13892334 ± 1% -23.8% 10580102 ± 0% vmstat.memory.cache
8.25 ± 5% +624.2% 59.75 ± 5% vmstat.procs.r
371331 ± 1% -78.1% 81249 ± 3% vmstat.system.cs
14807 ± 2% +404.7% 74724 ± 0% vmstat.system.in
2340 ± 0% +10.0% 2574 ± 0% slabinfo.task_struct.active_objs
2373 ± 0% +10.0% 2611 ± 0% slabinfo.task_struct.num_objs
70183069 ± 1% -27.0% 51225575 ± 0% slabinfo.vm_area_struct.active_objs
1612599 ± 1% -27.8% 1164410 ± 0% slabinfo.vm_area_struct.active_slabs
70954363 ± 1% -27.8% 51234087 ± 0% slabinfo.vm_area_struct.num_objs
1612599 ± 1% -27.8% 1164410 ± 0% slabinfo.vm_area_struct.num_slabs
3.236e+09 ± 3% +103.1% 6.571e+09 ± 4% cpuidle.C1-HSW.time
52299979 ± 5% -85.0% 7820785 ± 2% cpuidle.C1-HSW.usage
1.494e+08 ± 5% +262.2% 5.412e+08 ± 1% cpuidle.C1E-HSW.time
50766 ± 27% +2917.0% 1531626 ± 4% cpuidle.C1E-HSW.usage
56165957 ± 28% +354.5% 2.553e+08 ± 4% cpuidle.C3-HSW.time
3.61e+10 ± 2% -31.1% 2.486e+10 ± 1% cpuidle.C6-HSW.time
2950756 ± 12% +98.9% 5870384 ± 5% cpuidle.C6-HSW.usage
3.25 ±173% +1e+06% 33965 ± 8% latency_stats.hits.call_rwsem_down_write_failed.vma_link.mmap_region.do_mmap.vm_mmap_pgoff.SyS_mmap_pgoff.SyS_mmap.do_syscall_64.return_from_SYSCALL_64
2106 ±173% +22894.8% 484444 ± 6% latency_stats.max.call_rwsem_down_write_failed.vma_link.mmap_region.do_mmap.vm_mmap_pgoff.SyS_mmap_pgoff.SyS_mmap.do_syscall_64.return_from_SYSCALL_64
16006 ± 16% +3278.4% 540764 ± 5% latency_stats.max.call_rwsem_down_write_failed.vma_link.mmap_region.do_mmap.vm_mmap_pgoff.SyS_mmap_pgoff.SyS_mmap.entry_SYSCALL_64_fastpath
0.00 ± -1% +Inf% 10171 ± 46% latency_stats.max.stop_two_cpus.migrate_swap.task_numa_migrate.numa_migrate_preferred.task_numa_fault.handle_pte_fault.handle_mm_fault.__do_page_fault.do_page_fault.page_fault
2110 ±173% +2.6e+06% 54674725 ± 5% latency_stats.sum.call_rwsem_down_write_failed.vma_link.mmap_region.do_mmap.vm_mmap_pgoff.SyS_mmap_pgoff.SyS_mmap.do_syscall_64.return_from_SYSCALL_64
0.00 ± -1% +Inf% 25016 ± 62% latency_stats.sum.stop_two_cpus.migrate_swap.task_numa_migrate.numa_migrate_preferred.task_numa_fault.handle_pte_fault.handle_mm_fault.__do_page_fault.do_page_fault.page_fault
0.00 ± -1% +Inf% 180087 ± 88% latency_stats.sum.wait_on_page_bit.__migration_entry_wait.migration_entry_wait.handle_pte_fault.handle_mm_fault.__do_page_fault.do_page_fault.page_fault
532977 ± 27% +118.0% 1162030 ± 3% numa-numastat.node0.local_node
532977 ± 27% +118.0% 1162030 ± 3% numa-numastat.node0.numa_hit
3764421 ± 7% -68.4% 1188656 ± 3% numa-numastat.node1.local_node
3764421 ± 7% -68.4% 1188656 ± 3% numa-numastat.node1.numa_hit
520550 ± 52% +120.9% 1149813 ± 6% numa-numastat.node2.local_node
520550 ± 52% +120.9% 1149813 ± 6% numa-numastat.node2.numa_hit
515312 ± 31% +119.8% 1132865 ± 3% numa-numastat.node3.local_node
515312 ± 31% +119.8% 1132865 ± 3% numa-numastat.node3.numa_hit
299.32 ± 2% +29.7% 388.19 ± 0% time.elapsed_time
299.32 ± 2% +29.7% 388.19 ± 0% time.elapsed_time.max
6298 ± 4% +1999.6% 132237 ± 1% time.involuntary_context_switches
1.074e+09 ± 0% -21.9% 8.391e+08 ± 0% time.minor_page_faults
915.50 ± 1% +546.1% 5915 ± 0% time.percent_of_cpu_this_job_got
1532 ± 2% +1339.2% 22061 ± 1% time.system_time
1207 ± 0% -25.1% 903.83 ± 0% time.user_time
55730114 ± 3% -72.4% 15365125 ± 3% time.voluntary_context_switches
86101 ± 2% +298.5% 343071 ± 0% meminfo.Active
71618 ± 2% +358.7% 328527 ± 0% meminfo.Active(anon)
792738 ± 0% +33.1% 1055133 ± 0% meminfo.Cached
535375 ± 13% +55.8% 834329 ± 4% meminfo.Committed_AS
18980 ± 1% +25.7% 23852 ± 0% meminfo.Mapped
5481932 ± 1% -27.1% 3996491 ± 0% meminfo.PageTables
13082002 ± 1% -27.6% 9476457 ± 0% meminfo.SUnreclaim
305087 ± 0% +86.0% 567502 ± 0% meminfo.Shmem
13153870 ± 1% -27.4% 9549827 ± 0% meminfo.Slab
6.36 ± 1% +546.4% 41.10 ± 1% turbostat.%Busy
183.50 ± 1% +548.0% 1189 ± 0% turbostat.Avg_MHz
21.78 ± 2% +116.4% 47.13 ± 0% turbostat.CPU%c1
0.12 ± 19% +239.6% 0.41 ± 11% turbostat.CPU%c3
71.74 ± 0% -84.2% 11.37 ± 4% turbostat.CPU%c6
41.75 ± 2% +25.1% 52.25 ± 3% turbostat.CoreTmp
47.18 ± 3% -96.8% 1.51 ± 39% turbostat.Pkg%pc2
45.75 ± 4% +20.2% 55.00 ± 4% turbostat.PkgTmp
256.81 ± 0% +76.3% 452.63 ± 0% turbostat.PkgWatt
221.02 ± 2% +10.9% 245.12 ± 0% turbostat.RAMWatt
789.50 ± 2% +106.9% 1633 ± 33% numa-vmstat.node0.nr_mapped
97513 ± 55% +166.2% 259578 ± 1% numa-vmstat.node0.nr_page_table_pages
240535 ± 52% +155.9% 615613 ± 1% numa-vmstat.node0.nr_slab_unreclaimable
496249 ± 25% +72.5% 856005 ± 4% numa-vmstat.node0.numa_hit
496249 ± 25% +72.5% 856005 ± 4% numa-vmstat.node0.numa_local
1085904 ± 6% -80.7% 209372 ± 0% numa-vmstat.node1.nr_page_table_pages
2571159 ± 6% -80.6% 498282 ± 0% numa-vmstat.node1.nr_slab_unreclaimable
2616970 ± 6% -67.3% 856044 ± 4% numa-vmstat.node1.numa_hit
2616969 ± 6% -67.3% 856043 ± 4% numa-vmstat.node1.numa_local
772.50 ± 0% +46.7% 1133 ± 18% numa-vmstat.node2.nr_mapped
85446 ± 57% +213.0% 267414 ± 1% numa-vmstat.node3.nr_page_table_pages
210910 ± 54% +200.5% 633780 ± 1% numa-vmstat.node3.nr_slab_unreclaimable
383969 ± 29% +91.9% 736890 ± 5% numa-vmstat.node3.numa_hit
383968 ± 29% +91.9% 736890 ± 5% numa-vmstat.node3.numa_local
3160 ± 2% +99.2% 6296 ± 36% numa-meminfo.node0.Mapped
2010620 ± 37% +112.0% 4263497 ± 3% numa-meminfo.node0.MemUsed
390044 ± 55% +166.2% 1038368 ± 1% numa-meminfo.node0.PageTables
962114 ± 52% +155.9% 2462482 ± 1% numa-meminfo.node0.SUnreclaim
978361 ± 52% +153.7% 2482081 ± 1% numa-meminfo.node0.Slab
15136220 ± 6% -78.1% 3311792 ± 3% numa-meminfo.node1.MemUsed
4343393 ± 6% -80.7% 837538 ± 0% numa-meminfo.node1.PageTables
10283945 ± 6% -80.6% 1993155 ± 0% numa-meminfo.node1.SUnreclaim
10305199 ± 6% -80.5% 2010656 ± 0% numa-meminfo.node1.Slab
3092 ± 0% +45.9% 4510 ± 19% numa-meminfo.node2.Mapped
1900064 ± 73% +118.1% 4143155 ± 5% numa-meminfo.node2.MemUsed
1712999 ± 38% +138.4% 4083839 ± 2% numa-meminfo.node3.MemUsed
341760 ± 57% +213.0% 1069692 ± 1% numa-meminfo.node3.PageTables
843596 ± 54% +200.5% 2535176 ± 1% numa-meminfo.node3.SUnreclaim
861861 ± 53% +196.3% 2553465 ± 1% numa-meminfo.node3.Slab
17897 ± 2% +358.9% 82133 ± 0% proc-vmstat.nr_active_anon
198273 ± 0% +33.1% 263885 ± 0% proc-vmstat.nr_file_pages
4744 ± 1% +25.7% 5966 ± 0% proc-vmstat.nr_mapped
1370309 ± 1% -27.1% 999157 ± 0% proc-vmstat.nr_page_table_pages
76247 ± 0% +86.1% 141863 ± 0% proc-vmstat.nr_shmem
3270282 ± 1% -27.6% 2369169 ± 0% proc-vmstat.nr_slab_unreclaimable
3768 ± 19% +438.8% 20303 ± 0% proc-vmstat.numa_hint_faults
1556 ± 19% +482.9% 9069 ± 3% proc-vmstat.numa_hint_faults_local
5326780 ± 0% -13.2% 4625815 ± 0% proc-vmstat.numa_hit
5326780 ± 0% -13.2% 4625814 ± 0% proc-vmstat.numa_local
999.50 ± 9% +73.4% 1733 ± 3% proc-vmstat.numa_pages_migrated
5252 ± 11% +308.7% 21467 ± 1% proc-vmstat.numa_pte_updates
14562 ± 0% +334.9% 63332 ± 0% proc-vmstat.pgactivate
10094 ± 30% +200.3% 30314 ± 3% proc-vmstat.pgalloc_dma32
7826803 ± 0% -15.9% 6584736 ± 0% proc-vmstat.pgalloc_normal
1.075e+09 ± 0% -21.8% 8.402e+08 ± 0% proc-vmstat.pgfault
6848954 ± 4% -12.1% 6017910 ± 5% proc-vmstat.pgfree
999.50 ± 9% +73.4% 1733 ± 3% proc-vmstat.pgmigrate_success
5.55 ± 2% -100.0% 0.00 ± -1% perf-profile.__account_scheduler_latency.enqueue_entity.enqueue_task_fair.activate_task.ttwu_do_activate
10.99 ± 2% -93.2% 0.74 ± 2% perf-profile.__do_page_fault.do_page_fault.page_fault
0.98 ± 4% -100.0% 0.00 ± -1% perf-profile.__fget.fget.sys_mmap_pgoff.sys_mmap.entry_SYSCALL_64_fastpath
2.49 ± 3% -100.0% 0.00 ± -1% perf-profile.__kernel_text_address.print_context_stack.dump_trace.save_stack_trace_tsk.__account_scheduler_latency
1.41 ± 4% -100.0% 0.00 ± -1% perf-profile.__schedule.schedule.rwsem_down_write_failed.call_rwsem_down_write_failed.down_write
1.08 ± 4% -100.0% 0.00 ± -1% perf-profile.__schedule.schedule.schedule_preempt_disabled.cpu_startup_entry.start_secondary
4.02 ± 3% -100.0% 0.00 ± -1% perf-profile.__vma_link_rb.vma_link.mmap_region.do_mmap.vm_mmap_pgoff
5.06 ± 1% -100.0% 0.00 ± -1% perf-profile._raw_spin_lock_irqsave.try_to_wake_up.wake_up_q.rwsem_wake.call_rwsem_wake
6.61 ± 2% -100.0% 0.00 ± -1% perf-profile.activate_task.ttwu_do_activate.try_to_wake_up.wake_up_q.rwsem_wake
3.50 ± 3% -100.0% 0.00 ± -1% perf-profile.arch_get_unmapped_area_topdown.get_unmapped_area.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff
3.72 ± 9% -70.7% 1.09 ± 3% perf-profile.call_cpuidle.cpu_startup_entry.start_secondary
21.76 ± 1% +330.8% 93.75 ± 0% perf-profile.call_rwsem_down_write_failed.down_write.vma_link.mmap_region.do_mmap
15.52 ± 1% -95.5% 0.70 ± 1% perf-profile.call_rwsem_wake.up_write.vma_link.mmap_region.do_mmap
8.42 ± 2% -85.2% 1.25 ± 3% perf-profile.cpu_startup_entry.start_secondary
3.67 ± 10% -70.3% 1.09 ± 3% perf-profile.cpuidle_enter.call_cpuidle.cpu_startup_entry.start_secondary
3.64 ± 10% -70.7% 1.07 ± 3% perf-profile.cpuidle_enter_state.cpuidle_enter.call_cpuidle.cpu_startup_entry.start_secondary
63.02 ± 1% +53.5% 96.71 ± 0% perf-profile.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff.sys_mmap.entry_SYSCALL_64_fastpath
11.46 ± 2% -93.2% 0.78 ± 2% perf-profile.do_page_fault.page_fault
22.30 ± 1% +320.8% 93.83 ± 0% perf-profile.down_write.vma_link.mmap_region.do_mmap.vm_mmap_pgoff
5.04 ± 2% -100.0% 0.00 ± -1% perf-profile.dump_trace.save_stack_trace_tsk.__account_scheduler_latency.enqueue_entity.enqueue_task_fair
6.34 ± 2% -100.0% 0.00 ± -1% perf-profile.enqueue_entity.enqueue_task_fair.activate_task.ttwu_do_activate.try_to_wake_up
6.44 ± 2% -100.0% 0.00 ± -1% perf-profile.enqueue_task_fair.activate_task.ttwu_do_activate.try_to_wake_up.wake_up_q
66.17 ± 0% +46.9% 97.23 ± 0% perf-profile.entry_SYSCALL_64_fastpath
0.98 ± 5% -100.0% 0.00 ± -1% perf-profile.fget.sys_mmap_pgoff.sys_mmap.entry_SYSCALL_64_fastpath
1.75 ± 3% -100.0% 0.00 ± -1% perf-profile.find_vma.__do_page_fault.do_page_fault.page_fault
3.70 ± 3% -100.0% 0.00 ± -1% perf-profile.get_unmapped_area.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff.sys_mmap
3.76 ± 3% -100.0% 0.00 ± -1% perf-profile.handle_mm_fault.__do_page_fault.do_page_fault.page_fault
1.05 ± 2% -100.0% 0.00 ± -1% perf-profile.handle_pte_fault.handle_mm_fault.__do_page_fault.do_page_fault.page_fault
3.55 ± 10% -70.1% 1.06 ± 3% perf-profile.intel_idle.cpuidle_enter_state.cpuidle_enter.call_cpuidle.cpu_startup_entry
58.78 ± 1% +64.2% 96.49 ± 0% perf-profile.mmap_region.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff.sys_mmap
9.24 ± 2% -97.3% 0.25 ±100% perf-profile.native_irq_return_iret
4.66 ± 2% -100.0% 0.00 ± -1% perf-profile.native_queued_spin_lock_slowpath._raw_spin_lock_irqsave.try_to_wake_up.wake_up_q.rwsem_wake
8.78 ± 0% +945.7% 91.81 ± 0% perf-profile.osq_lock.rwsem_down_write_failed.call_rwsem_down_write_failed.down_write.vma_link
11.64 ± 2% -93.3% 0.78 ± 2% perf-profile.page_fault
3.44 ± 4% -100.0% 0.00 ± -1% perf-profile.perf_event_aux.part.51.perf_event_mmap.mmap_region.do_mmap.vm_mmap_pgoff
0.99 ± 3% -100.0% 0.00 ± -1% perf-profile.perf_event_aux_ctx.perf_event_aux.part.51.perf_event_mmap.mmap_region.do_mmap
4.78 ± 3% -100.0% 0.00 ± -1% perf-profile.perf_event_mmap.mmap_region.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff
4.51 ± 3% -100.0% 0.00 ± -1% perf-profile.print_context_stack.dump_trace.save_stack_trace_tsk.__account_scheduler_latency.enqueue_entity
21.70 ± 1% +332.1% 93.75 ± 0% perf-profile.rwsem_down_write_failed.call_rwsem_down_write_failed.down_write.vma_link.mmap_region
9.58 ± 2% -86.6% 1.28 ± 1% perf-profile.rwsem_spin_on_owner.rwsem_down_write_failed.call_rwsem_down_write_failed.down_write.vma_link
15.49 ± 1% -95.5% 0.70 ± 1% perf-profile.rwsem_wake.call_rwsem_wake.up_write.vma_link.mmap_region
5.05 ± 2% -100.0% 0.00 ± -1% perf-profile.save_stack_trace_tsk.__account_scheduler_latency.enqueue_entity.enqueue_task_fair.activate_task
1.54 ± 3% -100.0% 0.00 ± -1% perf-profile.schedule.rwsem_down_write_failed.call_rwsem_down_write_failed.down_write.vma_link
1.14 ± 4% -100.0% 0.00 ± -1% perf-profile.schedule.schedule_preempt_disabled.cpu_startup_entry.start_secondary
1.17 ± 4% -100.0% 0.00 ± -1% perf-profile.schedule_preempt_disabled.cpu_startup_entry.start_secondary
8.47 ± 2% -85.2% 1.25 ± 3% perf-profile.start_secondary
65.31 ± 1% +48.4% 96.88 ± 0% perf-profile.sys_mmap.entry_SYSCALL_64_fastpath
65.12 ± 1% +48.8% 96.86 ± 0% perf-profile.sys_mmap_pgoff.sys_mmap.entry_SYSCALL_64_fastpath
0.98 ± 2% -100.0% 0.00 ± -1% perf-profile.tick_nohz_idle_enter.cpu_startup_entry.start_secondary
13.67 ± 1% -97.2% 0.38 ± 57% perf-profile.try_to_wake_up.wake_up_q.rwsem_wake.call_rwsem_wake.up_write
7.10 ± 2% -100.0% 0.00 ± -1% perf-profile.ttwu_do_activate.try_to_wake_up.wake_up_q.rwsem_wake.call_rwsem_wake
3.43 ± 3% -100.0% 0.00 ± -1% perf-profile.unmapped_area_topdown.arch_get_unmapped_area_topdown.get_unmapped_area.do_mmap.vm_mmap_pgoff
16.84 ± 1% -94.4% 0.94 ± 1% perf-profile.up_write.vma_link.mmap_region.do_mmap.vm_mmap_pgoff
64.03 ± 1% +51.1% 96.78 ± 0% perf-profile.vm_mmap_pgoff.sys_mmap_pgoff.sys_mmap.entry_SYSCALL_64_fastpath
2.58 ± 4% -100.0% 0.00 ± -1% perf-profile.vma_compute_subtree_gap.__vma_link_rb.vma_link.mmap_region.do_mmap
6.72 ± 2% -88.9% 0.74 ± 1% perf-profile.vma_interval_tree_insert.vma_link.mmap_region.do_mmap.vm_mmap_pgoff
51.39 ± 1% +86.7% 95.97 ± 0% perf-profile.vma_link.mmap_region.do_mmap.vm_mmap_pgoff.sys_mmap_pgoff
1.64 ± 2% -100.0% 0.00 ± -1% perf-profile.vmacache_find.__do_page_fault.do_page_fault.page_fault
14.27 ± 1% -96.3% 0.52 ± 2% perf-profile.wake_up_q.rwsem_wake.call_rwsem_wake.up_write.vma_link
10463 ± 7% +636.3% 77037 ± 0% sched_debug.cfs_rq:/.exec_clock.avg
65159 ± 4% +116.0% 140713 ± 0% sched_debug.cfs_rq:/.exec_clock.max
8.59 ± 10% +1.2e+05% 10590 ± 8% sched_debug.cfs_rq:/.exec_clock.min
20889 ± 5% +144.4% 51052 ± 0% sched_debug.cfs_rq:/.exec_clock.stddev
75624 ± 7% +376.4% 360297 ± 9% sched_debug.cfs_rq:/.load.avg
259528 ± 3% +70.1% 441549 ± 1% sched_debug.cfs_rq:/.load.stddev
35.36 ± 8% +888.0% 349.36 ± 4% sched_debug.cfs_rq:/.load_avg.avg
472.18 ± 4% +97.7% 933.61 ± 1% sched_debug.cfs_rq:/.load_avg.max
93.62 ± 4% +296.7% 371.44 ± 2% sched_debug.cfs_rq:/.load_avg.stddev
11149 ± 7% +644.1% 82960 ± 0% sched_debug.cfs_rq:/.min_vruntime.avg
77111 ± 4% +115.4% 166103 ± 1% sched_debug.cfs_rq:/.min_vruntime.max
33.03 ± 16% +34364.2% 11384 ± 8% sched_debug.cfs_rq:/.min_vruntime.min
21855 ± 4% +153.1% 55322 ± 0% sched_debug.cfs_rq:/.min_vruntime.stddev
0.07 ± 8% +393.4% 0.37 ± 9% sched_debug.cfs_rq:/.nr_running.avg
0.25 ± 3% +77.4% 0.45 ± 1% sched_debug.cfs_rq:/.nr_running.stddev
0.87 ± 76% -67.0% 0.29 ± 0% sched_debug.cfs_rq:/.nr_spread_over.max
20.55 ± 10% +1341.8% 296.33 ± 10% sched_debug.cfs_rq:/.runnable_load_avg.avg
424.18 ± 4% +117.3% 921.61 ± 0% sched_debug.cfs_rq:/.runnable_load_avg.max
73.46 ± 6% +406.9% 372.33 ± 2% sched_debug.cfs_rq:/.runnable_load_avg.stddev
-14545 ±-25% +454.1% -80596 ± -6% sched_debug.cfs_rq:/.spread0.avg
51417 ± 5% -95.0% 2552 ±170% sched_debug.cfs_rq:/.spread0.max
-25662 ±-13% +493.0% -152174 ± -3% sched_debug.cfs_rq:/.spread0.min
21855 ± 4% +153.1% 55325 ± 0% sched_debug.cfs_rq:/.spread0.stddev
62.95 ± 4% +494.4% 374.18 ± 5% sched_debug.cfs_rq:/.util_avg.avg
635.11 ± 1% +55.0% 984.68 ± 0% sched_debug.cfs_rq:/.util_avg.max
158.75 ± 5% +148.5% 394.44 ± 2% sched_debug.cfs_rq:/.util_avg.stddev
875095 ± 0% -34.2% 575548 ± 1% sched_debug.cpu.avg_idle.avg
296076 ± 2% +18.4% 350683 ± 1% sched_debug.cpu.avg_idle.stddev
191988 ± 7% +22.1% 234365 ± 1% sched_debug.cpu.clock.avg
191997 ± 7% +22.1% 234376 ± 1% sched_debug.cpu.clock.max
191977 ± 7% +22.1% 234354 ± 1% sched_debug.cpu.clock.min
191988 ± 7% +22.1% 234365 ± 1% sched_debug.cpu.clock_task.avg
191997 ± 7% +22.1% 234376 ± 1% sched_debug.cpu.clock_task.max
191977 ± 7% +22.1% 234354 ± 1% sched_debug.cpu.clock_task.min
11.88 ± 6% +2391.7% 296.00 ± 10% sched_debug.cpu.cpu_load[0].avg
408.09 ± 5% +125.8% 921.50 ± 0% sched_debug.cpu.cpu_load[0].max
57.65 ± 2% +545.5% 372.11 ± 2% sched_debug.cpu.cpu_load[0].stddev
32.74 ± 8% +902.0% 328.06 ± 6% sched_debug.cpu.cpu_load[1].avg
463.61 ± 4% +99.0% 922.61 ± 0% sched_debug.cpu.cpu_load[1].max
93.84 ± 3% +304.2% 379.25 ± 1% sched_debug.cpu.cpu_load[1].stddev
30.12 ± 7% +979.8% 325.29 ± 6% sched_debug.cpu.cpu_load[2].avg
438.04 ± 6% +109.1% 915.75 ± 0% sched_debug.cpu.cpu_load[2].max
85.26 ± 2% +338.6% 373.90 ± 1% sched_debug.cpu.cpu_load[2].stddev
28.44 ± 7% +1036.6% 323.20 ± 6% sched_debug.cpu.cpu_load[3].avg
420.74 ± 6% +116.4% 910.68 ± 0% sched_debug.cpu.cpu_load[3].max
80.28 ± 2% +361.9% 370.82 ± 2% sched_debug.cpu.cpu_load[3].stddev
27.23 ± 7% +1077.1% 320.55 ± 6% sched_debug.cpu.cpu_load[4].avg
396.61 ± 6% +127.1% 900.50 ± 0% sched_debug.cpu.cpu_load[4].max
76.94 ± 2% +376.8% 366.82 ± 2% sched_debug.cpu.cpu_load[4].stddev
235.69 ± 5% +357.1% 1077 ± 8% sched_debug.cpu.curr->pid.avg
6956 ± 6% +20.0% 8348 ± 0% sched_debug.cpu.curr->pid.max
903.29 ± 1% +56.0% 1408 ± 1% sched_debug.cpu.curr->pid.stddev
77256 ± 7% +366.1% 360075 ± 9% sched_debug.cpu.load.avg
263553 ± 2% +67.3% 441053 ± 1% sched_debug.cpu.load.stddev
0.00 ± 8% +101.6% 0.00 ± 0% sched_debug.cpu.next_balance.stddev
58266 ± 8% +102.1% 117782 ± 0% sched_debug.cpu.nr_load_updates.avg
133378 ± 2% +26.1% 168128 ± 0% sched_debug.cpu.nr_load_updates.max
21971 ± 14% +189.1% 63516 ± 1% sched_debug.cpu.nr_load_updates.min
28738 ± 5% +40.5% 40386 ± 0% sched_debug.cpu.nr_load_updates.stddev
0.08 ± 6% +391.2% 0.37 ± 9% sched_debug.cpu.nr_running.avg
1.00 ± 0% +50.0% 1.50 ± 10% sched_debug.cpu.nr_running.max
0.26 ± 2% +78.4% 0.46 ± 2% sched_debug.cpu.nr_running.stddev
345325 ± 11% -65.8% 118270 ± 4% sched_debug.cpu.nr_switches.avg
2118306 ± 4% -86.1% 294560 ± 5% sched_debug.cpu.nr_switches.max
399.08 ± 7% +13742.8% 55244 ± 6% sched_debug.cpu.nr_switches.min
671281 ± 4% -95.3% 31593 ± 8% sched_debug.cpu.nr_switches.stddev
0.73 ± 3% -31.0% 0.50 ± 6% sched_debug.cpu.nr_uninterruptible.avg
-66.07 ± -9% +41.7% -93.64 ±-12% sched_debug.cpu.nr_uninterruptible.min
354406 ± 12% -65.6% 121960 ± 4% sched_debug.cpu.sched_count.avg
2174091 ± 5% -85.4% 317654 ± 4% sched_debug.cpu.sched_count.max
171.33 ± 18% +32844.9% 56445 ± 6% sched_debug.cpu.sched_count.min
687726 ± 4% -95.0% 34670 ± 6% sched_debug.cpu.sched_count.stddev
172257 ± 11% -66.3% 58126 ± 4% sched_debug.cpu.sched_goidle.avg
1057582 ± 4% -86.3% 144970 ± 5% sched_debug.cpu.sched_goidle.max
75.65 ± 15% +35674.3% 27063 ± 6% sched_debug.cpu.sched_goidle.min
335348 ± 4% -95.3% 15620 ± 8% sched_debug.cpu.sched_goidle.stddev
184659 ± 12% -66.2% 62420 ± 4% sched_debug.cpu.ttwu_count.avg
1085187 ± 5% -89.2% 117333 ± 5% sched_debug.cpu.ttwu_count.max
76.58 ± 24% +14314.3% 11037 ± 9% sched_debug.cpu.ttwu_count.min
357336 ± 4% -88.7% 40436 ± 5% sched_debug.cpu.ttwu_count.stddev
177.87 ± 11% +347.9% 796.69 ± 2% sched_debug.cpu.ttwu_local.avg
955.39 ± 26% +144.0% 2331 ± 15% sched_debug.cpu.ttwu_local.max
47.56 ± 23% +762.7% 410.29 ± 7% sched_debug.cpu.ttwu_local.min
127.40 ± 16% +172.7% 347.37 ± 9% sched_debug.cpu.ttwu_local.stddev
191979 ± 7% +22.1% 234354 ± 1% sched_debug.cpu_clk
189651 ± 7% +22.3% 231918 ± 1% sched_debug.ktime
191979 ± 7% +22.1% 234354 ± 1% sched_debug.sched_clk
vm-scalability.throughput
2.6e+07 *+------------------------------------*----------*----------------+
| *.*.*.* .*.*.*.*.*.*.*.**.*.*.*.*.* **.*.*. + *.*.*.* |
2.4e+07 ++ * * *.*.*.*.*
| |
2.2e+07 ++ |
| |
2e+07 ++ |
| |
1.8e+07 ++ |
| |
1.6e+07 ++ |
| |
1.4e+07 ++ |
O O O O OO O O O O O O O OO O O O O O O OO |
1.2e+07 ++----------------------------------------------------------------+
[*] bisect-good sample
[O] bisect-bad sample
To reproduce:
git clone git://git.kernel.org/pub/scm/linux/kernel/git/wfg/lkp-tests.git
cd lkp-tests
bin/lkp install job.yaml # job file is attached in this email
bin/lkp run job.yaml
Disclaimer:
Results have been estimated based on internal Intel analysis and are provided
for informational purposes only. Any difference in system hardware or software
design or configuration may affect actual performance.
Thanks,
Xiaolong
4 years, 8 months
[lkp] [x86/KASLR] 2e1e7c3abd: -- System halted
by kernel test robot
FYI, we noticed the following commit:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git kaslr/highmem-relocs
commit 2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b ("x86/KASLR: Add physical address randomization >4G")
on test machine: vm-vp-quantal-x86_64: 2 threads qemu-system-x86_64 -enable-kvm with 360M memory
caused below changes:
+------------------------------------------------------------------+------------+------------+
| | cb3a00eb69 | 2e1e7c3abd |
+------------------------------------------------------------------+------------+------------+
| boot_successes | 0 | 0 |
| boot_failures | 8 | 10 |
| BUG:kernel_test_hang | 2 | 2 |
| backtrace:__ubsan_handle_type_mismatch | 8 | 2 |
| backtrace:early_init_intel | 8 | 2 |
| backtrace:early_cpu_init | 8 | 2 |
| backtrace:check_mpx_erratum | 8 | 2 |
| backtrace:fpu__init_cpu_xstate | 8 | 2 |
| backtrace:fpu__init_cpu | 8 | 2 |
| backtrace:fpu__init_system | 8 | 2 |
| backtrace:fpu__init_system_xstate | 8 | 2 |
| backtrace:vmware_platform | 8 | 2 |
| backtrace:init_hypervisor_platform | 8 | 2 |
| backtrace:ms_hyperv_platform | 8 | 2 |
| backtrace:kvm_detect | 8 | 2 |
| backtrace:mtrr_bp_init | 8 | 2 |
| backtrace:prepare_set | 8 | 2 |
| backtrace:mtrr_bp_pat_init | 8 | 2 |
| backtrace:pat_init | 8 | 2 |
| backtrace:post_set | 8 | 2 |
| backtrace:init_mem_mapping | 8 | 2 |
| backtrace:acpi_initialize_tables | 8 | |
| backtrace:acpi_table_init | 8 | |
| backtrace:acpi_boot_table_init | 8 | |
| backtrace:acpi_tb_init_table_descriptor | 8 | |
| backtrace:acpi_table_parse | 8 | 2 |
| backtrace:early_acpi_boot_init | 8 | 2 |
| backtrace:alloc_usemap_and_memmap | 8 | 2 |
| backtrace:sparse_init | 8 | 2 |
| backtrace:paging_init | 8 | 2 |
| backtrace:acpi_boot_init | 8 | 2 |
| backtrace:create_boot_cache | 8 | 2 |
| backtrace:kmem_cache_init | 8 | 2 |
| backtrace:arch_ioremap_pud_supported | 8 | 2 |
| backtrace:ioremap_huge_init | 8 | 2 |
| backtrace:arch_ioremap_pmd_supported | 8 | 2 |
| backtrace:tsc_init | 8 | 2 |
| backtrace:x86_late_time_init | 8 | 2 |
| backtrace:unsynchronized_tsc | 8 | 2 |
| backtrace:acpi_initialize_subsystem | 8 | 2 |
| backtrace:acpi_early_init | 8 | 2 |
| backtrace:init_intel | 8 | 2 |
| backtrace:x86_init_rdrand | 8 | 2 |
| backtrace:mce_available | 8 | 2 |
| backtrace:mcheck_cpu_init | 8 | 2 |
| backtrace:intel_pmu_init | 8 | 2 |
| backtrace:init_hw_perf_events | 8 | 2 |
| backtrace:kernel_init_freeable | 8 | 2 |
| backtrace:set_real_mode_permissions | 8 | 2 |
| backtrace:__alloc_workqueue_key | 8 | 2 |
| backtrace:init_workqueues | 8 | 2 |
| backtrace:APIC_init_uniprocessor | 8 | 2 |
| backtrace:up_late_init | 8 | 2 |
| backtrace:apic_bsp_setup | 8 | 2 |
| backtrace:cpuset_init_smp | 8 | 2 |
| backtrace:do_mount | 8 | 2 |
| backtrace:SyS_mount | 8 | 2 |
| backtrace:devtmpfsd | 8 | 2 |
| backtrace:init_lapic_sysfs | 8 | 2 |
| backtrace:calibrate_xor_blocks | 8 | 2 |
| backtrace:bts_init | 8 | 2 |
| backtrace:pt_init | 8 | 2 |
| backtrace:mtrr_if_init | 8 | 2 |
| backtrace:default_bdi_init | 8 | 2 |
| backtrace:raid#_select_algo | 8 | 2 |
| backtrace:acpi_load_tables | 8 | 2 |
| backtrace:acpi_init | 8 | 2 |
| backtrace:acpi_initialize_objects | 8 | 2 |
| backtrace:acpi_early_processor_osc | 8 | 2 |
| backtrace:acpi_get_table | 8 | |
| backtrace:acpi_table_attr_init | 8 | |
| backtrace:acpi_sysfs_init | 8 | |
| backtrace:acpi_get_cpuid | 8 | 2 |
| backtrace:early_init_pdc | 8 | 2 |
| backtrace:acpi_early_processor_set_pdc | 8 | 2 |
| backtrace:acpi_processor_set_pdc | 8 | 2 |
| backtrace:acpi_bus_scan | 8 | 2 |
| backtrace:acpi_scan_init | 8 | 2 |
| backtrace:register_netdev | 8 | 2 |
| backtrace:loopback_net_init | 8 | 2 |
| backtrace:ops_init | 8 | 2 |
| backtrace:register_pernet_device | 8 | 2 |
| backtrace:net_dev_init | 8 | 2 |
| backtrace:hpet_msi_capability_lookup | 8 | 2 |
| backtrace:hpet_late_init | 8 | 2 |
| backtrace:hpet_work | 8 | |
| backtrace:tick_switch_to_oneshot | 8 | |
| backtrace:tick_init_highres | 8 | |
| backtrace:printk | 6 | |
| backtrace:dquot_init | 6 | |
| backtrace:acpi_get_devices | 8 | 2 |
| backtrace:pnpacpi_init | 8 | 2 |
| backtrace:populate_rootfs | 8 | 2 |
| backtrace:vfs_symlink | 8 | 2 |
| backtrace:SyS_symlinkat | 8 | 2 |
| backtrace:SyS_symlink | 8 | 2 |
| backtrace:do_sys_open | 2 | 2 |
| backtrace:SyS_open | 2 | 2 |
| backtrace:amd_ibs_init | 2 | 2 |
| backtrace:msr_init | 2 | 2 |
| backtrace:test_aperfmperf | 2 | 2 |
| backtrace:test_ptsc | 2 | 2 |
| backtrace:test_irperf | 2 | 2 |
| backtrace:intel_uncore_init | 2 | 2 |
| backtrace:cstate_pmu_init | 2 | 2 |
| backtrace:init_tsc_clocksource | 2 | 2 |
| backtrace:cryptomgr_test | 2 | 2 |
| backtrace:chacha20_simd_mod_init | 2 | 2 |
| backtrace:sha256_ssse3_mod_init | 2 | 2 |
| backtrace:avx_usable | 2 | |
| backtrace:sha512_ssse3_mod_init | 2 | 2 |
| backtrace:camellia_aesni_init | 2 | 2 |
| backtrace:tsc_refine_calibration_work | 2 | 2 |
| backtrace:__pci_register_driver | 2 | 2 |
| backtrace:virtio_pci_driver_init | 2 | 2 |
| backtrace:__parport_register_driver | 2 | 2 |
| backtrace:ppdev_init | 2 | 2 |
| backtrace:do_group_exit | 2 | 2 |
| backtrace:SyS_exit_group | 2 | 2 |
| backtrace:driver_register | 2 | 2 |
| backtrace:ide_cdrom_init | 2 | 2 |
| backtrace:sdebug_add_adapter | 2 | 2 |
| backtrace:scsi_debug_init | 2 | 2 |
| backtrace:print_ICs | 2 | 2 |
| backtrace:deferred_probe_initcall | 2 | 2 |
| backtrace:ip_auto_config | 2 | 2 |
| backtrace:sock_sendmsg | 2 | 2 |
| backtrace:SyS_sendto | 2 | 2 |
| backtrace:vfs_write | 2 | 2 |
| backtrace:SyS_write | 2 | 2 |
| backtrace:css_free_work_fn | 2 | 2 |
| backtrace:pwq_dec_nr_in_flight | 2 | 2 |
| backtrace:vfs_read | 2 | 2 |
| backtrace:SyS_read | 2 | 2 |
| invoked_oom-killer:gfp_mask=0x | 6 | |
| warn_alloc_failed+0x | 6 | |
| Mem-Info | 6 | |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 6 | |
| backtrace:init_cache_modes | 6 | |
| backtrace:pat_disable | 6 | |
| backtrace:vfs_lstat | 1 | |
| backtrace:SyS_newlstat | 1 | |
| backtrace:clocksource_done_booting | 2 | |
| backtrace:filename_create | 2 | |
| backtrace:setup_xstate_comp | 0 | 2 |
| backtrace:avx2_usable | 0 | 2 |
| backtrace:aesni_init | 0 | 2 |
| backtrace:do_munmap | 0 | 1 |
| backtrace:SyS_munmap | 0 | 1 |
| System_halted | 0 | 8 |
| BUG:kernel_boot_hang | 0 | 8 |
+------------------------------------------------------------------+------------+------------+
Compressed data violation
-- System halted
Elapsed time: 440
BUG: kernel boot hang
Linux version 4.7.0-rc1-00126-g2e1e7c3 #1
Command line: root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-vp-quantal-x86_64-25/bisect_boot-1-quantal-core-x86_64.cgz-x86_64-randconfig-v0-06040910-2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b-20160605-130167-h3dynt-0.yaml ARCH=x86_64 kconfig=x86_64-randconfig-v0-06040910 branch=linux-devel/devel-spot-201606040735 commit=2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b BOOT_IMAGE=/pkg/linux/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/vmlinuz-4.7.0-rc1-00126-g2e1e7c3 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-vp-quantal-x86_64/quantal-core-x86_64.cgz/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-vp-quantal-x86_64-25::dhcp drbd.minor_count=8
qemu-system-x86_64 -enable-kvm -kernel /pkg/linux/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/vmlinuz-4.7.0-rc1-00126-g2e1e7c3 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-vp-quantal-x86_64-25/bisect_boot-1-quantal-core-x86_64.cgz-x86_64-randconfig-v0-06040910-2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b-20160605-130167-h3dynt-0.yaml ARCH=x86_64 kconfig=x86_64-randconfig-v0-06040910 branch=linux-devel/devel-spot-201606040735 commit=2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b BOOT_IMAGE=/pkg/linux/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/vmlinuz-4.7.0-rc1-00126-g2e1e7c3 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-vp-quantal-x86_64/quantal-core-x86_64.cgz/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-vp-quantal-x86_64-25::dhcp drbd.minor_count=8' -initrd /fs/sdc1/initrd-vm-vp-quantal-x86_64-25 -m 360 -smp 2 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -pidfile /dev/shm/kboot/pid-vm-vp-quantal-x86_64-25 -serial file:/dev/shm/kboot/serial-vm-vp-quantal-x86_64-25 -daemonize -display none -monitor null
FYI, raw QEMU command line is:
qemu-system-x86_64 -enable-kvm -kernel /pkg/linux/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/vmlinuz-4.7.0-rc1-00126-g2e1e7c3 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-vp-quantal-x86_64-25/bisect_boot-1-quantal-core-x86_64.cgz-x86_64-randconfig-v0-06040910-2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b-20160605-130167-h3dynt-0.yaml ARCH=x86_64 kconfig=x86_64-randconfig-v0-06040910 branch=linux-devel/devel-spot-201606040735 commit=2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b BOOT_IMAGE=/pkg/linux/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/vmlinuz-4.7.0-rc1-00126-g2e1e7c3 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-vp-quantal-x86_64/quantal-core-x86_64.cgz/x86_64-randconfig-v0-06040910/gcc-6/2e1e7c3abd33d77bb8f05e57c07ac91e8436ab9b/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-vp-quantal-x86_64-25::dhcp drbd.minor_count=8' -initrd /fs/sdc1/initrd-vm-vp-quantal-x86_64-25 -m 360 -smp 2 -device e1000,netdev=net0 -netdev user,id=net0 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -pidfile /dev/shm/kboot/pid-vm-vp-quantal-x86_64-25 -serial file:/dev/shm/kboot/serial-vm-vp-quantal-x86_64-25 -daemonize -display none -monitor null
Thanks,
Xiaolong
4 years, 8 months
[x86/mm] c92efeaa76: BUG: unable to handle kernel paging request at fffff5df00000004
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git kaslr/memory
commit c92efeaa76bb548b9f1c302b8d9748bfdfd42f16
Author: Thomas Garnier <thgarnie(a)google.com>
AuthorDate: Thu May 12 12:28:19 2016 -0700
Commit: Kees Cook <keescook(a)chromium.org>
CommitDate: Fri Jun 3 09:04:34 2016 -0700
x86/mm: Implement ASLR for kernel memory sections (x86_64)
Randomizes the virtual address space of kernel memory sections (physical
memory mapping, vmalloc & vmemmap) for x86_64. This security feature
mitigates exploits relying on predictable kernel addresses. These
addresses can be used to disclose the kernel modules base addresses
or corrupt specific structures to elevate privileges bypassing the
current implementation of KASLR. This feature can be enabled with the
CONFIG_RANDOMIZE_MEMORY option.
The physical memory mapping holds most allocations from boot and heap
allocators. Knowing the base address and physical memory size, an
attacker can deduce the PDE virtual address for the vDSO memory page.
This attack was demonstrated at CanSecWest 2016, in the "Getting
Physical Extreme Abuse of Intel Based Paged Systems"
https://goo.gl/ANpWdV (see second part of the presentation). The
exploits used against Linux worked successfully against 4.6+ but fail
with KASLR memory enabled (https://goo.gl/iTtXMJ). Similar research
was done at Google leading to this patch proposal. Variants exists to
overwrite /proc or /sys objects ACLs leading to elevation of privileges.
These variants were tested against 4.6+.
The vmalloc memory section contains the allocation made through the
vmalloc API. The allocations are done sequentially to prevent
fragmentation and each allocation address can easily be deduced
especially from boot.
The vmemmap section holds a representation of the physical
memory (through a struct page array). An attacker could use this section
to disclose the kernel memory layout (walking the page linked list).
The order of each memory section is not changed. The feature looks at
the available space for the sections based on different configuration
options and randomizes the base and space between each. The size of the
physical memory mapping is the available physical memory. No performance
impact was detected while testing the feature.
Entropy is generated using the KASLR early boot functions now shared in
the lib directory (originally written by Kees Cook). Randomization is
done on PGD & PUD page table levels to increase possible addresses. The
physical memory mapping code was adapted to support PUD level virtual
addresses. This implementation on the best configuration provides 30,000
possible virtual addresses in average for each memory section. An
additional low memory page is used to ensure each CPU can start with a
PGD aligned virtual address (for realmode).
x86/dump_pagetable was updated to correctly display each section.
The page offset used by the compressed kernel was changed to the static
value, since it is not yet randomized during this boot stage.
Updated documentation on x86_64 memory layout accordingly.
Performance data:
Kernbench shows almost no difference (-+ less than 1%):
Before:
Average Optimal load -j 12 Run (std deviation):
Elapsed Time 102.63 (1.2695)
User Time 1034.89 (1.18115)
System Time 87.056 (0.456416)
Percent CPU 1092.9 (13.892)
Context Switches 199805 (3455.33)
Sleeps 97907.8 (900.636)
After:
Average Optimal load -j 12 Run (std deviation):
Elapsed Time 102.489 (1.10636)
User Time 1034.86 (1.36053)
System Time 87.764 (0.49345)
Percent CPU 1095 (12.7715)
Context Switches 199036 (4298.1)
Sleeps 97681.6 (1031.11)
Hackbench shows 0% difference on average (hackbench 90
repeated 10 times):
attemp,before,after
1,0.076,0.069
2,0.072,0.069
3,0.066,0.066
4,0.066,0.068
5,0.066,0.067
6,0.066,0.069
7,0.067,0.066
8,0.063,0.067
9,0.067,0.065
10,0.068,0.071
average,0.0677,0.0677
Signed-off-by: Thomas Garnier <thgarnie(a)google.com>
Signed-off-by: Kees Cook <keescook(a)chromium.org>
+--------------------------------------------------------------+------------+------------+-----------------+
| | dfac57cb38 | c92efeaa76 | v4.7-rc1_060505 |
+--------------------------------------------------------------+------------+------------+-----------------+
| boot_successes | 59 | 0 | 0 |
| boot_failures | 47 | 27 | 13 |
| BUG:kernel_boot_crashed | 19 | 4 | 1 |
| BUG:kernel_boot_hang | 1 | 1 | |
| INFO:rcu_sched_self-detected_stall_on_CPU | 22 | | |
| INFO:rcu_sched_detected_stalls_on_CPUs/tasks | 25 | | |
| backtrace:mark_rodata_ro | 22 | | |
| BUG:KASAN:slab-out-of-bounds_in_apparmor_setprocattr_at_addr | 2 | | |
| Out_of_memory:Kill_process | 1 | | |
| BUG:unable_to_handle_kernel | 0 | 22 | 12 |
| Oops | 0 | 22 | 12 |
| RIP:reserve_bootmem_region | 0 | 11 | 4 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 22 | 12 |
| backtrace:free_all_bootmem | 0 | 11 | 4 |
| backtrace:mem_init | 0 | 11 | 4 |
| RIP:check_memory_region | 0 | 11 | 8 |
| backtrace:kmem_cache_create | 0 | 11 | 8 |
| backtrace:vfs_caches_init | 0 | 11 | |
| bit_relocation_outside_of_kernel | 0 | 1 | |
| System_halted | 0 | 1 | |
| backtrace:nsproxy_cache_init | 0 | 0 | 8 |
| backtrace:proc_caches_init | 0 | 0 | 8 |
+--------------------------------------------------------------+------------+------------+-----------------+
[ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
[ 0.000000] BUG: unable to handle kernel paging request at fffff5df00000004
[ 0.000000] IP: [<ffffffffaae319ff>] reserve_bootmem_region+0x84/0xce
[ 0.000000] PGD 0
[ 0.000000] Oops: 0000 [#1] SMP KASAN
[ 0.000000] Modules linked in:
[ 0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 4.7.0-rc1-00130-gc92efea #1
[ 0.000000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1 04/01/2014
[ 0.000000] task: ffffffffaaa11e00 ti: ffffffffaaa00000 task.ti: ffffffffaaa00000
[ 0.000000] RIP: 0010:[<ffffffffaae319ff>] [<ffffffffaae319ff>] reserve_bootmem_region+0x84/0xce
[ 0.000000] RSP: 0000:ffffffffaaa07d98 EFLAGS: 00010802
[ 0.000000] RAX: fffffbfff554bd10 RBX: 0000000000000000 RCX: 1ffff9df00000004
[ 0.000000] RDX: 1ffff21b2a2a5600 RSI: 0000000000000010 RDI: ffffffffaaf3db80
[ 0.000000] RBP: ffffffffaaa07dd0 R08: ffffffffaaa07d48 R09: ffffffffaadcd5f6
[ 0.000000] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 0.000000] R13: dffffc0000000000 R14: ffffcef800000000 R15: ffffcef800000020
[ 0.000000] FS: 0000000000000000(0000) GS:ffff90d94dc00000(0000) knlGS:0000000000000000
[ 0.000000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.000000] CR2: fffff5df00000004 CR3: 0000000007a0a000 CR4: 00000000000006b0
[ 0.000000] Stack:
[ 0.000000] fffffbfff554bd10 0000000000000010 ffffffffaaa07ec8 ffff90d95151fd01
[ 0.000000] ffffffffaaa07e08 ffffffffaaa07e48 ffffffffaaa07e88 ffffffffaaa07ef0
[ 0.000000] ffffffffaade10ea 1ffffffff5540fbd 0000000041b58ab3 ffffffffaa7aba45
[ 0.000000] Call Trace:
[ 0.000000] [<ffffffffaade10ea>] free_all_bootmem+0xea/0x223
[ 0.000000] [<ffffffffaade1000>] ? reset_all_zones_managed_pages+0x58/0x58
[ 0.000000] [<ffffffffaadba8ec>] ? find_dependents_of+0x9a/0x9a
[ 0.000000] [<ffffffffaadcd56e>] ? pci_swiotlb_detect_override+0x57/0x57
[ 0.000000] [<ffffffffaadcd5f6>] ? pci_xen_swiotlb_detect+0x8/0x8
[ 0.000000] [<ffffffffaadcd63a>] ? pci_swiotlb_init+0x44/0x44
[ 0.000000] [<ffffffffaadbab31>] ? check_iommu_entries+0xd6/0x133
[ 0.000000] [<ffffffffaadcea2c>] mem_init+0x13/0x57
[ 0.000000] [<ffffffffaada546c>] start_kernel+0x270/0x603
[ 0.000000] [<ffffffffaada51fc>] ? thread_info_cache_init+0xb/0xb
[ 0.000000] [<ffffffffaae35879>] ? memblock_reserve+0x59/0x5e
[ 0.000000] [<ffffffffaada4120>] ? early_idt_handler_array+0x120/0x120
[ 0.000000] [<ffffffffaada429a>] x86_64_start_reservations+0x29/0x2b
[ 0.000000] [<ffffffffaada4384>] x86_64_start_kernel+0xe8/0xf5
[ 0.000000] Code: 5e 48 8b 45 c8 80 38 00 74 0c 48 c7 c7 80 e8 a5 aa e8 28 5b 6a fe 4d 89 e6 4c 03 35 8c ce c2 ff 4d 8d 7e 20 4c 89 f9 48 c1 e9 03 <42> 80 3c 29 00 74 08 4c 89 ff e8 7b 5b 6a fe 49 8d 7e 28 4d 89
[ 0.000000] RIP [<ffffffffaae319ff>] reserve_bootmem_region+0x84/0xce
[ 0.000000] RSP <ffffffffaaa07d98>
[ 0.000000] CR2: fffff5df00000004
[ 0.000000] ---[ end trace ad3a89ca250b9c80 ]---
[ 0.000000] Kernel panic - not syncing: Fatal exception
git bisect start 77480cfa52e7b51bab1a4f4711a4f52ad99f9b6a v4.6 --
git bisect good c174c6f15352dced3f47c92101feaea8729b4f59 # 11:41 22+ 22 Merge 'linux-review/Yingjoe-Chen/checkpatch-add-Kconfig-default-n-test/20160604-131412' into devel-hourly-2016060505
git bisect bad fa883244e2ef4a2026dcd27670b333758468c2e6 # 11:52 3- 22 Merge 'linux-review/Andrew-F-Davis/hwmon-tmp401-Add-support-for-TI-TMP461/20160601-003137' into devel-hourly-2016060505
git bisect good a4336b47e94878b4701ebd24c85375fc5bdddaf6 # 12:02 23+ 23 Merge 'linux-review/Guenter-Roeck/iwlwifi-Remove-unused-array-iwlagn_loose_lookup/20160604-054457' into devel-hourly-2016060505
git bisect good 4efcffad022a9de72253bdd494c6764c1191251f # 12:12 22+ 23 Merge 'linux-review/Andy-Shevchenko/lib-uuid-add-a-test-module/20160530-224317' into devel-hourly-2016060505
git bisect good cff8d2a4b6022c9cf2b651c592b5d44a530f2046 # 12:32 23+ 23 Merge 'random/dev' into devel-hourly-2016060505
git bisect bad 2346f731a5463a047c840830c941891fc84758ff # 12:45 3- 23 Merge 'linux-review/Florian-Fainelli/mtd-brcmnand-Add-v7-2-controller-support/20160601-013844' into devel-hourly-2016060505
git bisect good 99195d5b1f89060b4a4cea4a7034f7d3c087a6ac # 12:51 22+ 22 Merge 'linux-review/Dan-Carpenter/usb-f_fs-off-by-one-bug-in-_ffs_func_bind/20160528-125152' into devel-hourly-2016060505
git bisect good 7a5acb2e3273ba1823435e945b56a886290c1a34 # 13:05 23+ 23 Merge 'linux-review/Wei-Fang/scsi-fix-race-between-simultaneous-decrements-of-host_failed/20160602-163811' into devel-hourly-2016060505
git bisect bad 0132202bbdd7ae165c184d98e1490e8c422b5a67 # 13:15 2- 22 Merge 'linux-review/dinguyen-opensource-altera-com/usb-dwc2-Add-reset-control-to-dwc2/20160604-000810' into devel-hourly-2016060505
git bisect bad bfd7adf8fae005d026d9838641ec172607838b7d # 13:33 4- 22 Merge 'kees/kaslr/memory' into devel-hourly-2016060505
git bisect good a866e834997437307204efdc4f11a89d5dc39a89 # 13:46 24+ 4 x86/KASLR: Allow randomization below load address
git bisect good dfac57cb382d0e85382a4e530b1b913bdbf6cebb # 13:57 24+ 7 x86/mm: PUD VA support for physical mapping (x86_64)
git bisect bad 8479658a975566b290854d83bc8b99411e024602 # 14:09 8- 23 x86/mm: Memory hotplug support for KASLR memory randomization
git bisect bad c92efeaa76bb548b9f1c302b8d9748bfdfd42f16 # 14:21 4- 26 x86/mm: Implement ASLR for kernel memory sections (x86_64)
# first bad commit: [c92efeaa76bb548b9f1c302b8d9748bfdfd42f16] x86/mm: Implement ASLR for kernel memory sections (x86_64)
git bisect good dfac57cb382d0e85382a4e530b1b913bdbf6cebb # 14:27 81+ 46 x86/mm: PUD VA support for physical mapping (x86_64)
# extra tests with CONFIG_DEBUG_INFO_REDUCED
git bisect bad c92efeaa76bb548b9f1c302b8d9748bfdfd42f16 # 14:32 4- 22 x86/mm: Implement ASLR for kernel memory sections (x86_64)
# extra tests on HEAD of linux-devel/devel-hourly-2016060505
git bisect bad 77480cfa52e7b51bab1a4f4711a4f52ad99f9b6a # 14:32 0- 13 0day head guard for 'devel-hourly-2016060505'
# extra tests on tree/branch kees/kaslr/memory
git bisect bad 8479658a975566b290854d83bc8b99411e024602 # 14:33 0- 24 x86/mm: Memory hotplug support for KASLR memory randomization
# extra tests on tree/branch linus/master
git bisect good 049ec1b5a76d34a6980cccdb7c0baeb4eed7a993 # 14:43 81+ 22 Merge tag 'drm-fixes-for-v4.7-rc2' of git://people.freedesktop.org/~airlied/linux
# extra tests on tree/branch linux-next/master
git bisect good 64289ca05e2da843120e9ebf726dd336194996ae # 14:55 79+ 33 Add linux-next specific files for 20160603
This script may reproduce the error.
----------------------------------------------------------------------------
#!/bin/bash
kernel=$1
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu kvm64
-kernel $kernel
-m 300
-smp 2
-device e1000,netdev=net0
-netdev user,id=net0
-boot order=nc
-no-reboot
-watchdog i6300esb
-rtc base=localtime
-serial stdio
-display none
-monitor null
)
append=(
hung_task_panic=1
earlyprintk=ttyS0,115200
systemd.log_level=err
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
panic=-1
softlockup_panic=1
nmi_watchdog=panic
oops=panic
load_ramdisk=2
prompt_ramdisk=0
console=ttyS0,115200
console=tty0
vga=normal
root=/dev/ram0
rw
drbd.minor_count=8
)
"${kvm[@]}" --append "${append[*]}"
----------------------------------------------------------------------------
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 8 months
[x86/uaccess] 69ba758fea: BUG: uaccess fault at 0xffff880036b18000 with KERNEL_DS
by kernel test robot
FYI, we noticed the following commit:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git x86/uaccess
commit 69ba758fea06cfb812c4f8aed268e7220a18c5ec ("x86/uaccess: OOPS or warn on a fault with KERNEL_DS and !pagefault_disabled()")
on test machine: vm-kbuild-1G: 2 threads qemu-system-x86_64 -enable-kvm -cpu Haswell,+smep,+smap with 1G memory
caused below changes:
+----------------+------------+------------+
| | 912b531949 | 69ba758fea |
+----------------+------------+------------+
| boot_successes | 2 | 0 |
+----------------+------------+------------+
[ 0.583483] apic 0 pin 23 not connected
[ 0.584358] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.586124] TSC deadline timer enabled
[ 0.598914] BUG: uaccess fault at 0xffff880036b18000 with KERNEL_DS
[ 0.600685] BUG: unable to handle kernel paging request at ffff880036b18000
[ 0.602690] IP: [<ffffffff811546fa>] copy_mount_options+0x124/0x19c
[ 0.604489] PGD 18b6067 PUD 18b7067 PMD 3874c067 PTE 8000000036b18060
[ 0.606397] Oops: 0000 [#1] DEBUG_PAGEALLOC
[ 0.624298] Modules linked in:
[ 0.625183] CPU: 0 PID: 8 Comm: kdevtmpfs Not tainted 4.7.0-rc1-00129-g69ba758 #1
[ 0.627233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1 04/01/2014
[ 0.635177] task: ffff880036b00540 ti: ffff880036b14000 task.ti: ffff880036b14000
[ 0.637276] task.addr_limit: 0xffffffffffffffff
[ 0.638661] RIP: 0010:[<ffffffff811546fa>] [<ffffffff811546fa>] copy_mount_options+0x124/0x19c
[ 0.641069] RSP: 0000:ffff880036b17df0 EFLAGS: 00010206
[ 0.642538] RAX: 0000000000000000 RBX: 0000000000000e7e RCX: 0000000000000000
[ 0.659516] RDX: ffff880036a85182 RSI: 0000000000000000 RDI: ffffffff816bc6b8
[ 0.661378] RBP: ffff880036b17e30 R08: 0000000000001000 R09: 00003ffffffff000
[ 0.663340] R10: ffff880036b17cc8 R11: 0000000000000001 R12: ffff880036b18000
[ 0.665285] R13: 0000000000001000 R14: 0000000036b17e01 R15: ffff880036a85000
[ 0.678571] FS: 0000000000000000(0000) GS:ffffffff8162d000(0000) knlGS:0000000000000000
[ 0.680849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.682434] CR2: ffff880036b18000 CR3: 000000000160c000 CR4: 00000000000406b0
[ 0.684448] Stack:
[ 0.685033] 0000000000000000 ffff880036b18e7e ffffffffffffffff ffffffff8152b089
[ 0.687205] ffff880036afda40 ffff880036afd000 ffff880036b17e7e 0000000000008000
[ 0.698344] ffff880036b17e68 ffffffff811554fd ffff880036ab7ee4 ffff880036ab7ee4
[ 0.705908] Call Trace:
[ 0.706581] [<ffffffff811554fd>] SyS_mount+0x8f/0xf6
[ 0.707798] [<ffffffff81263850>] ? handle_create+0x207/0x207
[ 0.714078] [<ffffffff812638ae>] devtmpfsd+0x5e/0x152
[ 0.715360] [<ffffffff81263850>] ? handle_create+0x207/0x207
[ 0.716861] [<ffffffff810590c8>] kthread+0xee/0xf6
[ 0.718131] [<ffffffff81355f7f>] ret_from_fork+0x1f/0x40
[ 0.723098] [<ffffffff81058fda>] ? kthread_worker_fn+0x1d7/0x1d7
[ 0.737345] Code: ff 41 83 f6 01 41 0f b6 f6 ba 01 00 00 00 48 c7 c7 b8 c6 6b 81 e8 d0 a6 f5 ff 45 84 f6 74 34 4c 89 fa 31 c9 eb 28 0f 1f 00 89 c8 <41> 8a 34 24 0f 1f 00 85 c0 74 0b 89 d9 31 c0 48 89 d7 f3 aa eb
[ 0.743648] RIP [<ffffffff811546fa>] copy_mount_options+0x124/0x19c
[ 0.745401] RSP <ffff880036b17df0>
[ 0.746394] CR2: ffff880036b18000
[ 0.747273] ---[ end trace 5b586953c01d161b ]---
[ 0.754807] Kernel panic - not syncing: Fatal exception
FYI, raw QEMU command line is:
qemu-system-x86_64 -enable-kvm -cpu Haswell,+smep,+smap -kernel /pkg/linux/x86_64-randconfig-s4-06040525/gcc-6/69ba758fea06cfb812c4f8aed268e7220a18c5ec/vmlinuz-4.7.0-rc1-00129-g69ba758 -append 'root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-kbuild-1G-2/bisect_boot-1-debian-x86_64-2015-02-07.cgz-x86_64-randconfig-s4-06040525-69ba758fea06cfb812c4f8aed268e7220a18c5ec-20160604-38251-olqjqa-0.yaml ARCH=x86_64 kconfig=x86_64-randconfig-s4-06040525 branch=linux-devel/devel-hourly-2016060401 commit=69ba758fea06cfb812c4f8aed268e7220a18c5ec BOOT_IMAGE=/pkg/linux/x86_64-randconfig-s4-06040525/gcc-6/69ba758fea06cfb812c4f8aed268e7220a18c5ec/vmlinuz-4.7.0-rc1-00129-g69ba758 max_uptime=600 RESULT_ROOT=/result/boot/1/vm-kbuild-1G/debian-x86_64-2015-02-07.cgz/x86_64-randconfig-s4-06040525/gcc-6/69ba758fea06cfb812c4f8aed268e7220a18c5ec/0 LKP_SERVER=inn earlyprintk=ttyS0,115200 systemd.log_level=err debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 console=ttyS0,115200 console=tty0 vga=normal rw ip=::::vm-kbuild-1G-2::dhcp' -initrd /fs/sdd1/initrd-vm-kbuild-1G-2 -m 1024 -smp 2 -device e1000,netdev=net0 -netdev user,id=net0,hostfwd=tcp::23001-:22 -boot order=nc -no-reboot -watchdog i6300esb -rtc base=localtime -device virtio-scsi-pci,id=scsi0 -drive file=/fs/sdd1/disk0-vm-kbuild-1G-2,if=none,id=hd0,media=disk,aio=native,cache=none -device scsi-hd,bus=scsi0.0,drive=hd0,scsi-id=1,lun=0 -drive file=/fs/sdd1/disk1-vm-kbuild-1G-2,if=none,id=hd1,media=disk,aio=native,cache=none -device scsi-hd,bus=scsi0.0,drive=hd1,scsi-id=1,lun=1 -drive file=/fs/sdd1/disk2-vm-kbuild-1G-2,if=none,id=hd2,media=disk,aio=native,cache=none -device scsi-hd,bus=scsi0.0,drive=hd2,scsi-id=1,lun=2 -drive file=/fs/sdd1/disk3-vm-kbuild-1G-2,if=none,id=hd3,media=disk,aio=native,cache=none -device scsi-hd,bus=scsi0.0,drive=hd3,scsi-id=1,lun=3 -drive file=/fs/sdd1/disk4-vm-kbuild-1G-2,if=none,id=hd4,media=disk,aio=native,cache=none -device scsi-hd,bus=scsi0.0,drive=hd4,scsi-id=1,lun=4 -pidfile /dev/shm/kboot/pid-vm-kbuild-1G-2 -serial file:/dev/shm/kboot/serial-vm-kbuild-1G-2 -daemonize -display none -monitor null
Thanks,
Kernel Test Robot
4 years, 8 months