[rmqueue_bulk_cluster] ebd0e11259: general_protection_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: ebd0e112590c85dde90e2951589203280c5b00a0 ("rmqueue_bulk_cluster: maintain number")
git://bee.sh.intel.com/git/aaron/linux.git rfc_zone_lock_v2
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -cpu Haswell,+smep,+smap -smp 2 -m 1G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+---------------------------------------------------------------------------------------+------------+------------+
| | d9d187d8c9 | ebd0e11259 |
+---------------------------------------------------------------------------------------+------------+------------+
| boot_successes | 24 | 4 |
| boot_failures | 0 | 20 |
| BUG:kernel_hang_in_test_stage | 0 | 7 |
| general_protection_fault:#[##] | 0 | 8 |
| RIP:get_page_from_freelist | 0 | 8 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 8 |
| invoked_oom-killer:gfp_mask=0x | 0 | 5 |
| Mem-Info | 0 | 5 |
| Out_of_memory:Kill_process | 0 | 5 |
| page_allocation_failure:order:#,mode:#(GFP_KERNEL|__GFP_COMP),nodemask=(null) | 0 | 5 |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 0 | 3 |
| INFO:rcu_preempt_detected_stalls_on_CPUs/tasks | 0 | 1 |
| RIP:free_pcppages_bulk | 0 | 1 |
| page_allocation_failure:order:#,mode:#(GFP_KERNEL_ACCOUNT|__GFP_ZERO),nodemask=(null) | 0 | 1 |
+---------------------------------------------------------------------------------------+------------+------------+
Starting udev Coldplug all Devices...
Starting Load/Save Random Seed...
Starting Preprocess NFS configuration...
[ 380.391756] kasan: CONFIG_KASAN_INLINE enabled
[ 380.392529] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 380.393717] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 380.394717] CPU: 0 PID: 297 Comm: systemd-journal Not tainted 4.15.0-rc4-00004-gebd0e11 #1
[ 380.396062] RIP: 0010:get_page_from_freelist+0x967/0x19fa
[ 380.396945] RSP: 0018:ffff88000899ec90 EFLAGS: 00010002
[ 380.397800] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: 1ffff10001133d7f
[ 380.398964] RDX: 1ffff10001132900 RSI: ffff8800372124e0 RDI: ffffea00000314c0
[ 380.400131] RBP: ffff8800371e95b8 R08: 0000000000000001 R09: 0000000000000001
[ 380.401306] R10: 0000000000000001 R11: ffff88000899f71f R12: ffffea00000314b8
[ 380.402469] R13: 0000000000000000 R14: ffff880037199160 R15: ffff880037199000
[ 380.403628] FS: 00007f84f1e3f880(0000) GS:ffff88002d000000(0000) knlGS:0000000000000000
[ 380.404937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 380.405882] CR2: 00005633a9d4cdb8 CR3: 000000002837a001 CR4: 00000000000606f0
[ 380.407040] Call Trace:
[ 380.407478] ? stack_access_ok+0x2b/0x8a
[ 380.408146] ? __isolate_free_page+0x230/0x230
[ 380.408907] ? stack_access_ok+0x2b/0x8a
[ 380.409573] ? deref_stack_reg+0x7c/0xfd
[ 380.410234] ? __read_once_size_nocheck+0x7/0x7
[ 380.411152] ? __save_stack_trace+0x70/0xdd
[ 380.411856] ? stack_access_ok+0x2b/0x8a
[ 380.412512] ? stack_access_ok+0x2b/0x8a
[ 380.413167] ? deref_stack_reg+0x7c/0xfd
[ 380.413822] ? __read_once_size_nocheck+0x7/0x7
[ 380.414720] ? __save_stack_trace+0x70/0xdd
[ 380.415433] ? __save_stack_trace+0x70/0xdd
[ 380.416141] ? look_up_lock_class+0x1fb/0x437
[ 380.416927] ? hlock_class+0x107/0x107
[ 380.417531] ? stack_access_ok+0x2b/0x8a
[ 380.418110] ? deref_stack_reg+0x7c/0xfd
[ 380.418783] ? stack_access_ok+0x2b/0x8a
[ 380.419463] ? stack_access_ok+0x2b/0x8a
[ 380.420133] ? deref_stack_reg+0x7c/0xfd
[ 380.420785] ? __read_once_size_nocheck+0x7/0x7
[ 380.421685] ? __save_stack_trace+0x70/0xdd
[ 380.422381] ? __save_stack_trace+0x70/0xdd
[ 380.423073] ? look_up_lock_class+0x1fb/0x437
[ 380.423788] __alloc_pages_nodemask+0x47d/0x570
[ 380.424535] ? __alloc_pages_slowpath+0x13f9/0x13f9
[ 380.425337] ? stack_access_ok+0x2b/0x8a
[ 380.425990] cache_grow_begin+0x88/0x3c7
[ 380.426643] ____cache_alloc+0x182/0x237
[ 380.427296] kmem_cache_alloc+0x71/0x110
[ 380.427952] __d_alloc+0xab/0x8a6
[ 380.428506] ? d_set_d_op+0x334/0x334
[ 380.429118] ? register_lock_class+0x181/0xb36
[ 380.429855] ? look_up_lock_class+0x1fb/0x437
[ 380.430571] ? pvclock_read_flags+0xaf/0xaf
[ 380.431264] ? __read_once_size_nocheck+0x7/0x7
[ 380.432187] ? stack_access_ok+0x2b/0x8a
[ 380.432860] ? stack_access_ok+0x2b/0x8a
[ 380.433513] d_alloc+0x45/0x142
[ 380.434053] d_alloc_parallel+0x107/0x907
[ 380.434722] ? pvclock_read_flags+0xaf/0xaf
[ 380.435393] ? d_rehash+0x2b/0x2b
[ 380.435953] ? kvm_clock_read+0x21/0x30
[ 380.436578] ? kvm_sched_clock_read+0x5/0xd
[ 380.437267] ? check_chain_key+0x19b/0x25a
[ 380.437943] ? find_held_lock+0x2d/0xf0
[ 380.438570] ? lock_acquired+0x515/0x550
[ 380.439215] ? lookup_slow+0x14a/0x316
[ 380.439835] ? lock_contended+0x582/0x582
[ 380.440508] ? lock_acquire+0xe3/0x150
[ 380.441129] ? __up_read+0x14/0x14
[ 380.441691] lookup_slow+0x1a1/0x316
[ 380.442286] ? d_lookup_done+0x6a/0x6a
[ 380.442910] ? lockref_get_not_dead+0x60/0x68
[ 380.443620] ? unlazy_walk+0x2fd/0x308
[ 380.444245] ? lookup_fast+0x968/0x9ac
[ 380.444868] ? unlazy_walk+0x2fd/0x308
[ 380.445483] ? step_into+0x627/0x639
[ 380.446080] walk_component+0x1b7/0x407
[ 380.446711] ? handle_dots+0x84d/0x84d
[ 380.447335] ? pvclock_read_flags+0xaf/0xaf
[ 380.448027] ? security_inode_permission+0xc0/0xcc
[ 380.448807] ? __inode_permission+0x2ef/0x2fd
[ 380.449522] link_path_walk+0x86b/0xd22
[ 380.450170] ? walk_component+0x407/0x407
[ 380.450828] ? set_root+0x12d/0x227
[ 380.451412] ? nd_jump_root+0x2bd/0x2cd
[ 380.452056] ? unwind_get_return_address_ptr+0x95/0x95
[ 380.452902] path_openat+0x551/0x1508
[ 380.453510] ? pvclock_read_flags+0xaf/0xaf
[ 380.454203] ? alloc_fdtable+0x21d/0x21d
[ 380.454857] ? vfs_tmpfile+0x1f9/0x1f9
[ 380.455493] ? kvm_clock_read+0x21/0x30
[ 380.456138] ? kvm_sched_clock_read+0x5/0xd
[ 380.456834] ? paravirt_sched_clock+0x5/0x8
[ 380.457528] ? find_held_lock+0x2d/0xf0
[ 380.458174] ? do_raw_spin_trylock+0x15d/0x15d
[ 380.458897] ? lock_downgrade+0x538/0x538
[ 380.459565] ? __alloc_fd+0xaa/0x501
[ 380.460191] ? _raw_spin_unlock+0x1f/0x2f
[ 380.460885] ? __alloc_fd+0x4b9/0x501
[ 380.461510] do_filp_open+0xde/0x173
[ 380.462122] ? path_openat+0x1508/0x1508
[ 380.462785] ? mpi_free+0xec/0xec
[ 380.463360] ? __alloc_fd+0x501/0x501
[ 380.463987] ? do_sys_open+0xd7/0x20e
[ 380.464574] do_sys_open+0xd7/0x20e
[ 380.467045] ? filp_clone_open+0xdc/0xdc
[ 380.467693] ? lockdep_sys_exit_thunk+0x16/0x18
[ 380.468445] entry_SYSCALL_64_fastpath+0x1e/0x86
[ 380.469204] RIP: 0033:0x7f84f1104e40
[ 380.469793] RSP: 002b:00007fff5b69c748 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 380.471018] RAX: ffffffffffffffda RBX: 000055576cd0b4b0 RCX: 00007f84f1104e40
[ 380.472173] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fff5b69c830
[ 380.473331] RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000001
[ 380.474489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 380.475650] R13: 000055576cd0a300 R14: 0000000000000028 R15: 00007fff5b69c800
[ 380.476797] Code: 7c 24 08 49 8d 45 20 48 89 44 24 70 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 e6 d6 09 00 49 8d 45 20 4d 8b 74 24 08 48 c1 e8 03 <80> 3c 18 00 74 09 49 8d 7d 20 e8 ca d6 09 00 4c 89 f2 49 8b 45
[ 380.480021] RIP: get_page_from_freelist+0x967/0x19fa RSP: ffff88000899ec90
[ 380.481124] ---[ end trace 0b1d9359cad7562a ]---
[ 380.481882] Kernel panic - not syncing: Fatal exception
[ 381.564837] Shutting down cpus with NMI
[ 381.566607] Kernel Offset: disabled
Elapsed time: 390
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
900bb53bfa ("struct page: add field for vm_struct"): WARNING: CPU: 0 PID: 1 at mm/vmalloc.c:301 vmalloc_to_page
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/0day-ci/linux/commits/Igor-Stoppa/genalloc-track-begin...
commit 900bb53bfab0b1f86b3acdf3e3136c2ced550df8
Author: Igor Stoppa <igor.stoppa(a)huawei.com>
AuthorDate: Sun Feb 11 05:19:17 2018 +0200
Commit: 0day robot <fengguang.wu(a)intel.com>
CommitDate: Mon Feb 12 19:28:43 2018 +0800
struct page: add field for vm_struct
When a page is used for virtual memory, it is often necessary to obtian
a handler to the corresponding vm_struct, which refers to the virtually
continuous area generated when invoking vmalloc.
The struct page has a "mapping" field, which can be re-used, to store a
pointer to the parent area. This will avoid more expensive searches.
As example, the function find_vm_area is reimplemented, to take advantage
of the newly introduced field.
Signed-off-by: Igor Stoppa <igor.stoppa(a)huawei.com>
82506a7aaa genalloc: selftest
900bb53bfa struct page: add field for vm_struct
09185363f6 Documentation for Pmalloc
+-------------------------------------------------------+------------+------------+------------+
| | 82506a7aaa | 900bb53bfa | 09185363f6 |
+-------------------------------------------------------+------------+------------+------------+
| boot_successes | 52 | 0 | 0 |
| boot_failures | 0 | 15 | 41 |
| WARNING:at_mm/vmalloc.c:#vmalloc_to_page | 0 | 15 | 41 |
| EIP:vmalloc_to_page | 0 | 15 | 41 |
| Mem-Info | 0 | 0 | 1 |
| WARNING:at_drivers/pci/pci-sysfs.c:#pci_mmap_resource | 0 | 0 | 3 |
| EIP:pci_mmap_resource | 0 | 0 | 3 |
+-------------------------------------------------------+------------+------------+------------+
[ 0.063788] prandom: 100 self tests passed
[ 0.065104] regulator-dummy: no parameters
[ 0.070878] NET: Registered protocol family 16
[ 0.073506] iounmap: bad address b429632b
[ 0.080019] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-10671-g900bb53 #1
[ 0.081395] Call Trace:
[ 0.090015] dump_stack+0x16/0x23
[ 0.090681] iounmap+0x1a7/0x1b0
[ 0.091322] acpi_os_map_cleanup+0x7a/0x90
[ 0.092174] acpi_os_unmap_iomem+0x94/0x130
[ 0.093062] ? cnb20le_res+0x2f3/0x2f3
[ 0.094045] acpi_os_unmap_memory+0xd/0x10
[ 0.094853] acpi_find_root_pointer+0x5d/0x1d3
[ 0.100024] ? cnb20le_res+0x2f3/0x2f3
[ 0.100953] acpi_os_get_root_pointer+0x49/0x54
[ 0.101847] ? cnb20le_res+0x2f3/0x2f3
[ 0.110024] broadcom_postcore_init+0x18/0x80
[ 0.120022] do_one_initcall+0x50/0x210
[ 0.120798] ? do_early_param+0xb2/0xb2
[ 0.121615] ? parse_args+0x213/0x410
[ 0.130017] ? kernel_init_freeable+0xc9/0x19f
[ 0.130998] kernel_init_freeable+0xe6/0x19f
[ 0.131793] ? rest_init+0x140/0x140
[ 0.132511] kernel_init+0x10/0x180
[ 0.133223] ? schedule_tail_wrapper+0x9/0xc
[ 0.134096] ret_from_fork+0x2e/0x38
[ 0.134879] iounmap: bad address 76696a26
[ 0.140020] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-10671-g900bb53 #1
[ 0.141409] Call Trace:
[ 0.141886] dump_stack+0x16/0x23
[ 0.142570] iounmap+0x1a7/0x1b0
[ 0.143271] acpi_os_map_cleanup+0x7a/0x90
[ 0.144137] acpi_os_unmap_iomem+0x94/0x130
[ 0.144967] ? acpi_tb_validate_rsdp+0x1b/0x95
[ 0.150014] acpi_os_unmap_memory+0xd/0x10
[ 0.150802] acpi_find_root_pointer+0xe5/0x1d3
[ 0.160026] ? cnb20le_res+0x2f3/0x2f3
[ 0.160966] acpi_os_get_root_pointer+0x49/0x54
[ 0.161854] ? cnb20le_res+0x2f3/0x2f3
[ 0.162770] broadcom_postcore_init+0x18/0x80
[ 0.170022] do_one_initcall+0x50/0x210
[ 0.180012] ? do_early_param+0xb2/0xb2
[ 0.180805] ? parse_args+0x213/0x410
[ 0.181568] ? kernel_init_freeable+0xc9/0x19f
[ 0.182472] kernel_init_freeable+0xe6/0x19f
[ 0.190023] ? rest_init+0x140/0x140
[ 0.190751] kernel_init+0x10/0x180
[ 0.191484] ? schedule_tail_wrapper+0x9/0xc
[ 0.192323] ret_from_fork+0x2e/0x38
[ 0.193158] iounmap: bad address c92f4c96
[ 0.193898] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-10671-g900bb53 #1
[ 0.195294] Call Trace:
[ 0.195799] dump_stack+0x16/0x23
[ 0.200024] iounmap+0x1a7/0x1b0
[ 0.200715] acpi_os_map_cleanup+0x7a/0x90
[ 0.201599] acpi_os_unmap_iomem+0x94/0x130
[ 0.202541] ? acpi_tb_validate_rsdp+0x4a/0x95
[ 0.203538] acpi_os_unmap_memory+0xd/0x10
[ 0.204415] acpi_find_root_pointer+0x17b/0x1d3
[ 0.205365] ? cnb20le_res+0x2f3/0x2f3
[ 0.206406] acpi_os_get_root_pointer+0x49/0x54
[ 0.210022] ? cnb20le_res+0x2f3/0x2f3
[ 0.211110] broadcom_postcore_init+0x18/0x80
[ 0.212024] do_one_initcall+0x50/0x210
[ 0.212830] ? do_early_param+0xb2/0xb2
[ 0.213686] ? parse_args+0x213/0x410
[ 0.220032] ? kernel_init_freeable+0xc9/0x19f
[ 0.220992] kernel_init_freeable+0xe6/0x19f
[ 0.221940] ? rest_init+0x140/0x140
[ 0.222808] kernel_init+0x10/0x180
[ 0.223645] ? schedule_tail_wrapper+0x9/0xc
[ 0.224621] ret_from_fork+0x2e/0x38
[ 0.230595] ACPI: bus type PCI registered
[ 0.235079] PCI: Using configuration type 1 for base access
[ 0.260838] cryptd: max_cpu_qlen set to 1000
[ 0.265788] ACPI: Added _OSI(Module Device)
[ 0.270019] ACPI: Added _OSI(Processor Device)
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 22a975c95dfd368f029dd9246a73d59452198553 7928b2cbe55b2a410a0f5c1f154610059c57b1b2 --
git bisect good d881e5de48a232bee9d193251e1a10183b363f13 # 22:36 G 10 0 0 0 Merge 'jpirko-mlxsw/net_queue' into devel-catchup-201802122041
git bisect bad fd93bc73581e232b89b4f23849ea3371341ef1c5 # 22:49 B 0 11 25 0 Merge 'bbrezillon-0day/nand/next' into devel-catchup-201802122041
git bisect bad 3e54374a15b9ec0490d6ad14a80e4d4de822987a # 23:01 B 0 2 16 0 Merge 'linux-review/Igor-Stoppa/genalloc-track-beginning-of-allocations/20180212-192839' into devel-catchup-201802122041
git bisect good 39d097571d8cbc28c0e2f94d306d90f4f6c30433 # 23:21 G 11 0 0 0 Merge 'jpirko-mlxsw/combined_queue' into devel-catchup-201802122041
git bisect bad 900bb53bfab0b1f86b3acdf3e3136c2ced550df8 # 23:34 B 0 5 19 0 struct page: add field for vm_struct
git bisect good 82506a7aaa451c05c7e864b3570db2bd1fcaedb2 # 23:47 G 11 0 0 0 genalloc: selftest
# first bad commit: [900bb53bfab0b1f86b3acdf3e3136c2ced550df8] struct page: add field for vm_struct
git bisect good 82506a7aaa451c05c7e864b3570db2bd1fcaedb2 # 23:51 G 31 0 0 0 genalloc: selftest
# extra tests with debug options
git bisect bad 900bb53bfab0b1f86b3acdf3e3136c2ced550df8 # 00:02 B 0 11 26 1 struct page: add field for vm_struct
# extra tests on HEAD of linux-devel/devel-catchup-201802122041
git bisect bad 22a975c95dfd368f029dd9246a73d59452198553 # 00:02 B 0 15 32 0 0day head guard for 'devel-catchup-201802122041'
# extra tests on tree/branch linux-review/Igor-Stoppa/genalloc-track-beginning-of-allocations/20180212-192839
git bisect bad 09185363f678f59642f0f96722e1d747eb5ea401 # 00:15 B 0 5 29 10 Documentation for Pmalloc
# extra tests with first bad commit reverted
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 6 months
[rtc] 1b1ed0bee0: WARNING:at_lib/kobject.c:#kobject_add_internal
by kernel test robot
FYI, we noticed the following commit (built with gcc-6):
commit: 1b1ed0bee04e82c8fb0f71b07b393dc5db8659f6 ("rtc: cmos: use generic nvmem")
https://github.com/alexandrebelloni/linux rtc-nvmem
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-i386 -enable-kvm -smp 2 -m 320M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------------------------+------------+------------+
| | 37669b426a | 1b1ed0bee0 |
+------------------------------------------------------------------+------------+------------+
| boot_successes | 8 | 0 |
| boot_failures | 0 | 8 |
| WARNING:at_lib/kobject.c:#kobject_add_internal | 0 | 6 |
| EIP:kobject_add_internal | 0 | 6 |
| invoked_oom-killer:gfp_mask=0x | 0 | 2 |
| Mem-Info | 0 | 2 |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 0 | 2 |
+------------------------------------------------------------------+------------+------------+
[ 18.491042] WARNING: CPU: 0 PID: 1 at lib/kobject.c:244 kobject_add_internal+0xdc/0x270
[ 18.491942] Modules linked in:
[ 18.491942] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-rc1-00050-g1b1ed0b #2
[ 18.491942] task: c0150040 task.stack: c0152000
[ 18.491942] EIP: kobject_add_internal+0xdc/0x270
[ 18.491942] EFLAGS: 00210292 CPU: 0
[ 18.491942] EAX: 00000044 EBX: c51a8810 ECX: c1033d40 EDX: 00000004
[ 18.491942] ESI: c01054e0 EDI: d0070c0c EBP: c0153d88 ESP: c0153d60
[ 18.491942] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[ 18.491942] CR0: 80050033 CR2: 00000000 CR3: 01aa6000 CR4: 000006b0
[ 18.491942] Call Trace:
[ 18.491942] kobject_add+0x32/0x70
[ 18.491942] device_add+0xc7/0x560
[ 18.491942] nvmem_register+0x12a/0x490
[ 18.491942] rtc_nvmem_register+0x43/0xf0
[ 18.491942] cmos_do_probe+0x1b7/0x450
[ 18.491942] ? rtc_wake_on+0x20/0x20
[ 18.491942] ? cmos_nvram_read+0x80/0x80
[ 18.491942] cmos_pnp_probe+0x63/0xb0
[ 18.491942] pnp_device_probe+0x4f/0xb0
[ 18.491942] driver_probe_device+0x258/0x2f0
[ 18.491942] __driver_attach+0x99/0xa0
[ 18.491942] ? driver_probe_device+0x2f0/0x2f0
[ 18.491942] bus_for_each_dev+0x4f/0x80
[ 18.491942] driver_attach+0x19/0x20
[ 18.491942] ? driver_probe_device+0x2f0/0x2f0
[ 18.491942] bus_add_driver+0xe2/0x1f0
[ 18.491942] ? rtc_dev_init+0x30/0x30
[ 18.491942] driver_register+0x56/0xd0
[ 18.491942] ? rtc_dev_init+0x30/0x30
[ 18.491942] pnp_register_driver+0x1b/0x20
[ 18.491942] cmos_init+0x13/0x65
[ 18.491942] do_one_initcall+0x34/0x15d
[ 18.491942] ? parse_args+0x140/0x360
[ 18.491942] ? kernel_init_freeable+0xc4/0x15b
[ 18.491942] kernel_init_freeable+0xe7/0x15b
[ 18.491942] ? rest_init+0xa0/0xa0
[ 18.491942] kernel_init+0xd/0xf0
[ 18.491942] ret_from_fork+0x19/0x24
[ 18.491942] Code: 00 00 00 0f 84 6e 01 00 00 8b 45 ec 85 c0 0f 84 53 01 00 00 8b 00 50 ff 75 f0 ff 33 68 84 88 68 c1 68 b0 d0 7e c1 e8 b4 66 ac ff <0f> ff 83 c4 14 8b 45 f0 8d 65 f4 5b 5e 5f 5d c3 8d 74 26 00 8b
[ 18.491942] ---[ end trace 357a8c56074089b1 ]---
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[rtc] 0f3b7d4c5c: WARNING:at_lib/kobject.c:#kobject_add_internal
by kernel test robot
FYI, we noticed the following commit (built with gcc-6):
commit: 0f3b7d4c5ccd900c2e936b3abb1534b724d37fea ("rtc: cmos: use generic nvmem")
https://github.com/alexandrebelloni/linux rtc-nvmem
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-i386 -enable-kvm -smp 2 -m 320M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------------------------+------------+------------+
| | d3ef40e35a | 0f3b7d4c5c |
+------------------------------------------------------------------+------------+------------+
| boot_successes | 4 | 0 |
| boot_failures | 6 | 30 |
| invoked_oom-killer:gfp_mask=0x | 4 | 1 |
| Mem-Info | 4 | 1 |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 2 | |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 4 | 4 |
| EIP:note_page | 4 | 4 |
| Out_of_memory:Kill_process | 2 | 1 |
| WARNING:at_lib/kobject.c:#kobject_add_internal | 0 | 30 |
| EIP:kobject_add_internal | 0 | 30 |
+------------------------------------------------------------------+------------+------------+
[ 14.913561] WARNING: CPU: 0 PID: 1 at lib/kobject.c:244 kobject_add_internal+0xdc/0x270
[ 14.914463] Modules linked in:
[ 14.914463] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-rc1-00051-g0f3b7d4 #373
[ 14.914463] task: c0150040 task.stack: c0152000
[ 14.914463] EIP: kobject_add_internal+0xdc/0x270
[ 14.914463] EFLAGS: 00210292 CPU: 0
[ 14.914463] EAX: 00000044 EBX: c528e810 ECX: c1033d40 EDX: 00000004
[ 14.914463] ESI: c01054e0 EDI: d0070c0c EBP: c0153d88 ESP: c0153d60
[ 14.914463] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
[ 14.914463] CR0: 80050033 CR2: 00000000 CR3: 01aa4000 CR4: 000006b0
[ 14.914463] Call Trace:
[ 14.914463] kobject_add+0x32/0x70
[ 14.914463] device_add+0xc7/0x560
[ 14.914463] nvmem_register+0x12a/0x490
[ 14.914463] rtc_nvmem_register+0x43/0xf0
[ 14.914463] cmos_do_probe+0x1b7/0x450
[ 14.914463] ? rtc_wake_on+0x20/0x20
[ 14.914463] ? cmos_nvram_read+0x80/0x80
[ 14.914463] cmos_pnp_probe+0x63/0xb0
[ 14.914463] pnp_device_probe+0x4f/0xb0
[ 14.914463] driver_probe_device+0x258/0x2f0
[ 14.914463] __driver_attach+0x99/0xa0
[ 14.914463] ? driver_probe_device+0x2f0/0x2f0
[ 14.914463] bus_for_each_dev+0x4f/0x80
[ 14.914463] driver_attach+0x19/0x20
[ 14.914463] ? driver_probe_device+0x2f0/0x2f0
[ 14.914463] bus_add_driver+0xe2/0x1f0
[ 14.914463] ? rtc_dev_init+0x30/0x30
[ 14.914463] driver_register+0x56/0xd0
[ 14.914463] ? rtc_dev_init+0x30/0x30
[ 14.914463] pnp_register_driver+0x1b/0x20
[ 14.914463] cmos_init+0x13/0x65
[ 14.914463] do_one_initcall+0x34/0x15d
[ 14.914463] ? parse_args+0x140/0x360
[ 14.914463] ? kernel_init_freeable+0xc4/0x15b
[ 14.914463] kernel_init_freeable+0xe7/0x15b
[ 14.914463] ? rest_init+0xa0/0xa0
[ 14.914463] kernel_init+0xd/0xf0
[ 14.914463] ret_from_fork+0x19/0x24
[ 14.914463] Code: 00 00 00 0f 84 6e 01 00 00 8b 45 ec 85 c0 0f 84 53 01 00 00 8b 00 50 ff 75 f0 ff 33 68 84 88 68 c1 68 40 bf 7e c1 e8 94 66 ac ff <0f> ff 83 c4 14 8b 45 f0 8d 65 f4 5b 5e 5f 5d c3 8d 74 26 00 8b
[ 14.914463] ---[ end trace 8bf7e1cf13230f8f ]---
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[__free_one_page] 0737264c01: BUG:kernel_reboot-without-warning_in_early-boot_stage, last_printk:early_console_in_setup_code
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: 0737264c01e405d84eed798bb193b1035e66f852 ("__free_one_page: skip merge for order-0 page unless compaction is in progress")
git://bee.sh.intel.com/git/aaron/linux.git rfc_zone_lock_v2
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -m 512M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-----------------------------------------------------------------------------------------------+------------+------------+
| | 8b55c17e25 | 0737264c01 |
+-----------------------------------------------------------------------------------------------+------------+------------+
| boot_successes | 8 | 0 |
| boot_failures | 0 | 8 |
| BUG:kernel_reboot-without-warning_in_early-boot_stage,last_printk:early_console_in_setup_code | 0 | 8 |
+-----------------------------------------------------------------------------------------------+------------+------------+
early console in setup code
BUG: kernel reboot-without-warning in early-boot stage, last printk: early console in setup code
Linux version 4.15.0-rc4-00002-g0737264 #98
Command line: ip=::::vm-kbuild-yocto-x86_64-21::dhcp root=/dev/ram0 user=lkp job=/lkp/scheduled/vm-kbuild-yocto-x86_64-21/trinity-300s-yocto-minimal-x86_64-2016-04-22.cgz-0737264c01e405d84eed798bb193b1035e66f852-20180210-83066-6h6dg1-0.yaml ARCH=x86_64 kconfig=x86_64-acpi-redef branch=linux-devel/devel-spot-201802101937 commit=0737264c01e405d84eed798bb193b1035e66f852 BOOT_IMAGE=/pkg/linux/x86_64-acpi-redef/gcc-7/0737264c01e405d84eed798bb193b1035e66f852/vmlinuz-4.15.0-rc4-00002-g0737264 max_uptime=1500 RESULT_ROOT=/result/trinity/300s/vm-kbuild-yocto-x86_64/yocto-minimal-x86_64-2016-04-22.cgz/x86_64-acpi-redef/gcc-7/0737264c01e405d84eed798bb193b1035e66f852/0 LKP_SERVER=inn debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 net.ifnames=0 printk.devkmsg=on panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 drbd.minor_count=8 systemd.log_level=err ignore_loglevel console=tty0 earlyprintk=ttyS0,115200 console=ttyS0,115200 vga=normal rw drbd.minor_count=8 rcuperf.shutdown=0
Elapsed time: 10
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
b27a34c28a ("Merge .."): kernel BUG at mm/page_alloc.c:739!
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
git://internal_merge_and_test_tree devel-hourly-2018020904
commit b27a34c28aad3d9f2378612369a8d82e2fb518df
Merge: 2ec9e78f6d15e 1b73fe146bd01
Author: 0day robot <fengguang.wu(a)intel.com>
AuthorDate: Fri Feb 9 08:35:26 2018 +0800
Commit: 0day robot <fengguang.wu(a)intel.com>
CommitDate: Fri Feb 9 08:35:26 2018 +0800
Merge 'linux-review/Aaron-Lu/__free_one_page-skip-merge-for-order-0-page-unless-compaction-is-in-progress/20180207-150802' into devel-hourly-2018020904
2ec9e78f6d Merge 'linux-review/Andy-Yeh/media-dw9807-Add-dw9807-vcm-driver/20180128-193839' into devel-hourly-2018020904
1b73fe146b rmqueue_bulk: avoid touching page structures under zone->lock
b27a34c28a Merge 'linux-review/Aaron-Lu/__free_one_page-skip-merge-for-order-0-page-unless-compaction-is-in-progress/20180207-150802' into devel-hourly-2018020904
4039767e13 0day head guard for 'devel-hourly-2018020904'
+-------------------------------------------------------+------------+------------+------------+--------------+
| | 2ec9e78f6d | 1b73fe146b | b27a34c28a | v4.15_020904 |
+-------------------------------------------------------+------------+------------+------------+--------------+
| boot_successes | 2 | 4 | 0 | 0 |
| boot_failures | 45 | 41 | 15 | 49 |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 45 | 41 | | |
| EIP:note_page | 45 | 41 | | |
| WARNING:at_drivers/pci/pci-sysfs.c:#pci_mmap_resource | 1 | | | |
| EIP:pci_mmap_resource | 1 | | | |
| kernel_BUG_at_mm/page_alloc.c | 0 | 0 | 15 | 49 |
| invalid_opcode:#[##] | 0 | 0 | 15 | 49 |
| EIP:get_page_from_freelist | 0 | 0 | 15 | 49 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 0 | 15 | 49 |
+-------------------------------------------------------+------------+------------+------------+--------------+
[ 2.143336] Duration of test: 119316343 ns
[ 2.161258] test if its possible to exceed max_size 8192: no, ok
[ 2.162502] Average test time: 123002455
[ 2.163165] Testing concurrent rhashtable access from 10 threads
[ 2.164424] ------------[ cut here ]------------
[ 2.165166] kernel BUG at mm/page_alloc.c:739!
[ 2.166187] invalid opcode: 0000 [#1] DEBUG_PAGEALLOC PTI
[ 2.167077] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-wt-ath-11434-gb27a34c #1
[ 2.168336] EIP: get_page_from_freelist+0x990/0xfc0
[ 2.169144] EFLAGS: 00210086 CPU: 0
[ 2.169723] EAX: d1f8f014 EBX: 00000000 ECX: d23c92a0 EDX: d1f8eff4
[ 2.170060] ESI: d1f8ee24 EDI: d1f8f014 EBP: d1899e1c ESP: d1899da8
[ 2.170060] DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068
[ 2.170060] CR0: 80050033 CR2: 00000000 CR3: 02220000 CR4: 000406b0
[ 2.170060] Call Trace:
[ 2.170060] ? __might_sleep+0x2d/0x80
[ 2.170060] __alloc_pages_nodemask+0x11c/0x2a0
[ 2.170060] ? __vmalloc_node+0x40/0x50
[ 2.170060] __vmalloc_node_range+0x106/0x210
[ 2.170060] __vmalloc_node+0x40/0x50
[ 2.170060] ? test_rht_init+0x55f/0x72e
[ 2.170060] vzalloc+0x21/0x30
[ 2.170060] ? test_rht_init+0x55f/0x72e
[ 2.170060] test_rht_init+0x55f/0x72e
[ 2.170060] ? ___siphash_aligned+0x13/0x13
[ 2.170060] ? test_rhltable+0x7a9/0x7a9
[ 2.170060] do_one_initcall+0x89/0x12c
[ 2.170060] ? set_debug_rodata+0xf/0xf
[ 2.170060] ? kernel_init_freeable+0xcd/0x160
[ 2.170060] ? up_write+0x16/0x30
[ 2.170060] kernel_init_freeable+0xed/0x160
[ 2.170060] ? rest_init+0xc0/0xc0
[ 2.170060] kernel_init+0x8/0xe0
[ 2.170060] ret_from_fork+0x2e/0x40
[ 2.170060] Code: 0c 57 31 c9 8b 55 d0 ff d6 8b 33 58 85 f6 75 eb ff 0d 00 c4 ef c1 e9 6c f9 ff ff 8b 45 d0 ba 30 9f da c1 e8 23 2c 02 00 0f 0b 90 <0f> 0b 89 f3 89 fe 89 da 89 f0 e8 d1 d3 ff ff 85 c0 0f 85 10 05
[ 2.170060] EIP: get_page_from_freelist+0x990/0xfc0 SS:ESP: 0068:d1899da8
[ 2.170060] ---[ end trace b5ef90db624a27f2 ]---
[ 2.170060] Kernel panic - not syncing: Fatal exception
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 4039767e138f9903e70d4049f2d3e1818d9f93df d8a5b80568a9cb66810e75b182018e9edb68e8ff --
git bisect good 587aebf54f28cd1fb61e57259f5b074bc7c3fd20 # 11:29 G 10 0 10 10 Merge 'mips-sfr/mips-next-test' into devel-hourly-2018020904
git bisect good 87ffdbb7eaabdb201ea6d3255529f4c2c79c65da # 11:42 G 10 0 10 20 Merge 'ragnatech/rcar-vin-mc' into devel-hourly-2018020904
git bisect bad 1540ee2edd6c48e21f48dc1a49ba9a782a6df8a8 # 11:50 B 0 9 22 0 Merge 'linux-review/Bart-Van-Assche/scsi_debug-Simplify-request-tag-decoding/20180129-050846' into devel-hourly-2018020904
git bisect good a20b81d0931408088581122cede2f3747736a380 # 12:03 G 11 0 11 11 Merge 'm68k/m68k-v4.15' into devel-hourly-2018020904
git bisect bad 70b8f0912a1783e6193aa0bb2fff51e95d920a8f # 12:16 B 0 9 22 0 Merge 'linux-review/Thiago-Jung-Bauermann/Testcases-for-protection-keys-feature-in-powerpc-next/20180127-054858' into devel-hourly-2018020904
git bisect good ff0bf714e02c908e656b48c54ae25ef2730533c8 # 12:25 G 10 0 10 10 Merge 'linux-review/Shannon-Booth/staging-auxdisplay-add-missing-MODULE_LICENSE/20180203-143341' into devel-hourly-2018020904
git bisect good 2ec9e78f6d15e3407c02df7cd46b57a2d92e05f5 # 01:15 G 11 0 11 13 Merge 'linux-review/Andy-Yeh/media-dw9807-Add-dw9807-vcm-driver/20180128-193839' into devel-hourly-2018020904
git bisect bad b8ef6cc5f5ae31a4b8276fd492d2b6f5b83af8ea # 01:26 B 0 10 27 4 Merge 'mel/sched-bias-searches-v1r10' into devel-hourly-2018020904
git bisect bad b27a34c28aad3d9f2378612369a8d82e2fb518df # 01:35 B 0 5 18 0 Merge 'linux-review/Aaron-Lu/__free_one_page-skip-merge-for-order-0-page-unless-compaction-is-in-progress/20180207-150802' into devel-hourly-2018020904
git bisect good 1b73fe146bd01f57fd619d54761ac7f6efac5594 # 01:59 G 11 0 11 11 rmqueue_bulk: avoid touching page structures under zone->lock
# first bad commit: [b27a34c28aad3d9f2378612369a8d82e2fb518df] Merge 'linux-review/Aaron-Lu/__free_one_page-skip-merge-for-order-0-page-unless-compaction-is-in-progress/20180207-150802' into devel-hourly-2018020904
git bisect good 2ec9e78f6d15e3407c02df7cd46b57a2d92e05f5 # 13:13 G 30 0 30 44 Merge 'linux-review/Andy-Yeh/media-dw9807-Add-dw9807-vcm-driver/20180128-193839' into devel-hourly-2018020904
git bisect good 1b73fe146bd01f57fd619d54761ac7f6efac5594 # 13:17 G 30 0 30 41 rmqueue_bulk: avoid touching page structures under zone->lock
# extra tests with debug options
git bisect bad b27a34c28aad3d9f2378612369a8d82e2fb518df # 13:28 B 0 11 28 4 Merge 'linux-review/Aaron-Lu/__free_one_page-skip-merge-for-order-0-page-unless-compaction-is-in-progress/20180207-150802' into devel-hourly-2018020904
# extra tests on HEAD of linux-devel/devel-hourly-2018020904
git bisect bad 4039767e138f9903e70d4049f2d3e1818d9f93df # 13:29 B 0 49 65 0 0day head guard for 'devel-hourly-2018020904'
# extra tests on tree/branch linux-devel/devel-hourly-2018020904
git bisect bad 4039767e138f9903e70d4049f2d3e1818d9f93df # 14:18 B 0 49 65 0 0day head guard for 'devel-hourly-2018020904'
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 6 months
90ea9f1b60: BUG:using__this_cpu_add()in_preemptible[#]code:kworker/u5
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: 90ea9f1b60c679049619a79d9fc1557bc41c4973 ("Make the xprtiod workqueue unbounded.")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master
in testcase: fwq
with following parameters:
nr_task: 100%
samples: 100000ss
iterations: 18x
on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 4G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+-----------------------------------------------------------+------------+------------+
| | 2275cde4cc | 90ea9f1b60 |
+-----------------------------------------------------------+------------+------------+
| boot_successes | 6 | 4 |
| boot_failures | 18 | 22 |
| invoked_oom-killer:gfp_mask=0x | 18 | 18 |
| Mem-Info | 18 | 18 |
| Out_of_memory:Kill_process | 18 | 18 |
| BUG:using__this_cpu_add()in_preemptible[#]code:kworker/u5 | 0 | 17 |
| RIP:__clear_user | 0 | 1 |
+-----------------------------------------------------------+------------+------------+
[ 31.962289] BUG: using __this_cpu_add() in preemptible [00000000] code: kworker/u5:0/31
[ 31.967319] caller is xs_udp_data_receive_workfn+0x194/0x270
[ 31.973166] CPU: 1 PID: 31 Comm: kworker/u5:0 Not tainted 4.15.0-rc8-00076-g90ea9f1 #2
[ 31.976585] Workqueue: xprtiod xs_udp_data_receive_workfn
[ 31.978951] Call Trace:
[ 31.980060] dump_stack+0x85/0xc1
[ 31.981513] check_preemption_disabled+0xce/0xe0
[ 31.983556] xs_udp_data_receive_workfn+0x194/0x270
[ 31.985694] process_one_work+0x318/0x620
[ 31.987451] worker_thread+0x20a/0x390
[ 31.989108] ? process_one_work+0x620/0x620
[ 31.990941] kthread+0x120/0x130
[ 31.992368] ? __kthread_bind_mask+0x60/0x60
[ 31.994231] ret_from_fork+0x24/0x30
[ 31.997649] BUG: using __this_cpu_add() in preemptible [00000000] code: kworker/u5:0/31
[ 32.001258] caller is xs_udp_data_receive_workfn+0x194/0x270
[ 32.002451] CPU: 1 PID: 31 Comm: kworker/u5:0 Not tainted 4.15.0-rc8-00076-g90ea9f1 #2
[ 32.004083] Workqueue: xprtiod xs_udp_data_receive_workfn
[ 32.006377] Call Trace:
[ 32.007480] dump_stack+0x85/0xc1
[ 32.008944] check_preemption_disabled+0xce/0xe0
[ 32.010961] xs_udp_data_receive_workfn+0x194/0x270
[ 32.013103] process_one_work+0x318/0x620
[ 32.014917] worker_thread+0x20a/0x390
[ 32.016557] ? process_one_work+0x620/0x620
[ 32.018390] kthread+0x120/0x130
[ 32.019830] ? __kthread_bind_mask+0x60/0x60
[ 32.021501] ret_from_fork+0x24/0x30
[ 32.079255] run-job /lkp/scheduled/vm-lkp-nex04-4G-4/fwq-100%-100000ss-18x-debian-x86_64-2016-08-31.cgz-90ea9f1b60c679049619a79d9fc1557bc41c4973-20180209-29266-1lryx4f-0.yaml
[ 32.079267]
[ 32.150075] /usr/bin/curl -sSf http://inn:80/~lkp/cgi-bin/lkp-jobfile-append-var?job_file=/lkp/scheduled... -o /dev/null
[ 32.150087]
[ 32.368198] skip microcode check for virtual machine
[ 32.368209]
[ 33.419647] 2018-02-09 21:32:40 ./t_fwq -n 100000 -w 18 -t 2
[ 33.419657]
Elapsed time: 40
#!/bin/bash
# To reproduce,
# 1) save job-script and this script (both are attached in 0day report email)
# 2) run this script with your compiled kernel and optional env $INSTALL_MOD_PATH
kernel=$1
initrds=(
/osimage/debian/debian-x86_64-2016-08-31.cgz
/lkp/lkp/lkp-x86_64.cgz
/osimage/deps/debian-x86_64-2016-08-31.cgz/lkp_2017-12-14.cgz
/osimage/deps/debian-x86_64-2016-08-31.cgz/rsync-rootfs_2016-11-15.cgz
/osimage/deps/debian-x86_64-2016-08-31.cgz/run-ipconfig_2016-11-15.cgz
/osimage/pkg/debian-x86_64-2016-08-31.cgz/fwq-x86_64-fb459a1_2017-08-19.cgz
)
HTTP_PREFIX=https://github.com/0day-ci/lkp-qemu/raw/master
wget --timestamping "${initrds[@]/#/$HTTP_PREFIX}"
{
cat "${initrds[@]//*\//}"
[[ $INSTALL_MOD_PATH ]] && (
cd "$INSTALL_MOD_PATH"
find lib | cpio -o -H newc --quiet | gzip
)
echo job-script | cpio -o -H newc --quiet | gzip
} > initrd.img
qemu-img create -f qcow2 disk-vm-lkp-nex04-4G-4-0 256G
qemu-img create -f qcow2 disk-vm-lkp-nex04-4G-4-1 256G
kvm=(
qemu-system-x86_64
-enable-kvm
-cpu host
-kernel $kernel
-initrd initrd.img
-m 4096
-smp 2
-device e1000,netdev=net0
-netdev user,id=net0,hostfwd=tcp::23233-:22
-boot order=nc
-no-reboot
-watchdog i6300esb
-watchdog-action debug
-rtc base=localtime
-drive file=disk-vm-lkp-nex04-4G-4-0,media=disk,if=virtio
-drive file=disk-vm-lkp-nex04-4G-4-1,media=disk,if=virtio
-serial stdio
-display none
-monitor null
)
append=(
ip=::::vm-lkp-nex04-4G-4::dhcp
root=/dev/ram0
user=lkp
job=/job-script
ARCH=x86_64
kconfig=x86_64-randconfig-b0-02091144
branch=linux-next/master
commit=90ea9f1b60c679049619a79d9fc1557bc41c4973
BOOT_IMAGE=/pkg/linux/x86_64-randconfig-b0-02091144/gcc-7/90ea9f1b60c679049619a79d9fc1557bc41c4973/vmlinuz-4.15.0-rc8-00076-g90ea9f1
max_uptime=3600
RESULT_ROOT=/result/fwq/100%-100000ss-18x/vm-lkp-nex04-4G/debian-x86_64-2016-08-31.cgz/x86_64-randconfig-b0-02091144/gcc-7/90ea9f1b60c679049619a79d9fc1557bc41c4973/0
result_service=tmpfs
debug
apic=debug
sysrq_always_enabled
rcupdate.rcu_cpu_stall_timeout=100
net.ifnames=0
printk.devkmsg=on
panic=-1
softlockup_panic=1
nmi_watchdog=panic
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[PATCH 4.9 30/92] x86/asm: Fix inline asm call constraints for GCC 4.4
by Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know.
------------------
From: Josh Poimboeuf <jpoimboe(a)redhat.com>
commit 520a13c530aeb5f63e011d668c42db1af19ed349 upstream.
The kernel test bot (run by Xiaolong Ye) reported that the following commit:
f5caf621ee35 ("x86/asm: Fix inline asm call constraints for Clang")
is causing double faults in a kernel compiled with GCC 4.4.
Linus subsequently diagnosed the crash pattern and the buggy commit and found that
the issue is with this code:
register unsigned int __asm_call_sp asm("esp");
#define ASM_CALL_CONSTRAINT "+r" (__asm_call_sp)
Even on a 64-bit kernel, it's using ESP instead of RSP. That causes GCC
to produce the following bogus code:
ffffffff8147461d: 89 e0 mov %esp,%eax
ffffffff8147461f: 4c 89 f7 mov %r14,%rdi
ffffffff81474622: 4c 89 fe mov %r15,%rsi
ffffffff81474625: ba 20 00 00 00 mov $0x20,%edx
ffffffff8147462a: 89 c4 mov %eax,%esp
ffffffff8147462c: e8 bf 52 05 00 callq ffffffff814c98f0 <copy_user_generic_unrolled>
Despite the absurdity of it backing up and restoring the stack pointer
for no reason, the bug is actually the fact that it's only backing up
and restoring the lower 32 bits of the stack pointer. The upper 32 bits
are getting cleared out, corrupting the stack pointer.
So change the '__asm_call_sp' register variable to be associated with
the actual full-size stack pointer.
This also requires changing the __ASM_SEL() macro to be based on the
actual compiled arch size, rather than the CONFIG value, because
CONFIG_X86_64 compiles some files with '-m32' (e.g., realmode and vdso).
Otherwise Clang fails to build the kernel because it complains about the
use of a 64-bit register (RSP) in a 32-bit file.
Reported-and-Bisected-and-Tested-by: kernel test robot <xiaolong.ye(a)intel.com>
Diagnosed-by: Linus Torvalds <torvalds(a)linux-foundation.org>
Signed-off-by: Josh Poimboeuf <jpoimboe(a)redhat.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Andrey Ryabinin <aryabinin(a)virtuozzo.com>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: Arnd Bergmann <arnd(a)arndb.de>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: LKP <lkp(a)01.org>
Cc: Linus Torvalds <torvalds(a)linux-foundation.org>
Cc: Matthias Kaehlcke <mka(a)chromium.org>
Cc: Miguel Bernal Marin <miguel.bernal.marin(a)linux.intel.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Thomas Gleixner <tglx(a)linutronix.de>
Fixes: f5caf621ee35 ("x86/asm: Fix inline asm call constraints for Clang")
Link: http://lkml.kernel.org/r/20170928215826.6sdpmwtkiydiytim@treble
Signed-off-by: Ingo Molnar <mingo(a)kernel.org>
Cc: Matthias Kaehlcke <mka(a)chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
---
arch/x86/include/asm/asm.h | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
--- a/arch/x86/include/asm/asm.h
+++ b/arch/x86/include/asm/asm.h
@@ -11,10 +11,12 @@
# define __ASM_FORM_COMMA(x) " " #x ","
#endif
-#ifdef CONFIG_X86_32
+#ifndef __x86_64__
+/* 32 bit */
# define __ASM_SEL(a,b) __ASM_FORM(a)
# define __ASM_SEL_RAW(a,b) __ASM_FORM_RAW(a)
#else
+/* 64 bit */
# define __ASM_SEL(a,b) __ASM_FORM(b)
# define __ASM_SEL_RAW(a,b) __ASM_FORM_RAW(b)
#endif
4 years, 6 months
[drm] fc71681342: BUG:unable_to_handle_kernel
by kernel test robot
FYI, we noticed the following commit (built with gcc-4.9):
commit: fc7168134273b29c0bd2e2fcdf5fdc286154a042 ("drm: Multiple Null pointer dereference [null-pointer-deref] (CWE 476) problems:")
url: https://github.com/0day-ci/linux/commits/Joe-Moriarty/drm-Multiple-Null-p...
base: git://people.freedesktop.org/~airlied/linux.git drm-next
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -m 420M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------+------------+------------+
| | 24b8ef699e | fc71681342 |
+------------------------------------------+------------+------------+
| boot_successes | 8 | 0 |
| boot_failures | 0 | 16 |
| BUG:unable_to_handle_kernel | 0 | 16 |
| Oops:#[##] | 0 | 16 |
| EIP:drm_debugfs_create_files | 0 | 16 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 16 |
+------------------------------------------+------------+------------+
[ 21.192567] BUG: unable to handle kernel NULL pointer dereference at 00000014
[ 21.193562] IP: drm_debugfs_create_files+0x53/0x1b0
[ 21.194252] *pde = 00000000
[ 21.194669] Oops: 0000 [#1] PREEMPT SMP
[ 21.195193] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.15.0-rc8-01510-gfc71681 #145
[ 21.196288] EIP: drm_debugfs_create_files+0x53/0x1b0
[ 21.197035] EFLAGS: 00210206 CPU: 0
[ 21.197564] EAX: 00001000 EBX: 00000000 ECX: 7808a801 EDX: 8e362038
[ 21.198460] ESI: 904f9d88 EDI: 7adfa7e0 EBP: 782b9db0 ESP: 782b9d84
[ 21.199369] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[ 21.200085] CR0: 80050033 CR2: 00000014 CR3: 040de000 CR4: 000006d0
[ 21.200508] Call Trace:
[ 21.200508] ? drm_debugfs_init+0x89/0x2a0
[ 21.200508] ? pci_read+0x23/0x30
[ 21.200508] ? pci_read_config_byte+0x5d/0x70
[ 21.200508] ? drm_minor_register+0x6f/0x140
[ 21.200508] ? drm_dev_register+0x2e/0x2b0
[ 21.200508] ? drm_get_pci_dev+0x109/0x260
[ 21.200508] ? bochs_pci_probe+0xe0/0x130
[ 21.200508] ? pci_device_probe+0x10e/0x1d0
[ 21.200508] ? driver_probe_device+0x464/0x500
[ 21.200508] ? __driver_attach+0x179/0x180
[ 21.200508] ? driver_probe_device+0x500/0x500
[ 21.200508] ? bus_for_each_dev+0x58/0xb0
[ 21.200508] ? driver_attach+0x19/0x20
[ 21.200508] ? driver_probe_device+0x500/0x500
[ 21.200508] ? bus_add_driver+0x1a7/0x360
[ 21.200508] ? driver_register+0xb0/0x1a0
[ 21.200508] ? qxl_init+0x50/0x50
[ 21.200508] ? __pci_register_driver+0x50/0x60
[ 21.200508] ? bochs_init+0x44/0x46
[ 21.200508] ? do_one_initcall+0x9b/0x1a2
[ 21.200508] ? parse_args+0x1d0/0x2e0
[ 21.200508] ? kernel_init_freeable+0xce/0x1ab
[ 21.200508] ? kernel_init_freeable+0xeb/0x1ab
[ 21.200508] ? rest_init+0xb0/0xb0
[ 21.200508] ? kernel_init+0xe/0x1b0
[ 21.200508] ? rest_init+0xb0/0xb0
[ 21.200508] ? ret_from_fork+0x2b/0x40
[ 21.200508] Code: 89 c7 c7 45 f0 00 00 00 00 8b 45 08 83 c0 1c 89 45 e8 8b 45 08 83 c0 14 89 45 e4 eb 35 8d 74 26 00 8d bc 27 00 00 00 00 8b 5d d8 <8b> 53 14 8b 9a c0 00 00 00 21 c3 39 c3 74 1f ff 05 e8 29 c4 7b
[ 21.200508] EIP: drm_debugfs_create_files+0x53/0x1b0 SS:ESP: 0068:782b9d84
[ 21.200508] CR2: 0000000000000014
[ 21.200508] ---[ end trace 8c335b4abb722b1c ]---
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[tracing] 8e130b0d92: WARNING:at_kernel/rcu/tree.c:#rcu_irq_exit
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: 8e130b0d9284a0a01ca1d6ecf8f0896cfc28b112 ("tracing: Improve design of preemptirq tracepoints and its users")
url: https://github.com/0day-ci/linux/commits/Joel-Fernandes/tracing-Improve-d...
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -m 512M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+----------------------------------------------------+------------+------------+
| | e4c1091cb4 | 8e130b0d92 |
+----------------------------------------------------+------------+------------+
| boot_successes | 1 | 0 |
| boot_failures | 0 | 43 |
| WARNING:at_kernel/rcu/tree.c:#rcu_irq_exit | 0 | 43 |
| RIP:rcu_irq_exit | 0 | 43 |
| WARNING:at_kernel/rcu/tree.c:#rcu_irq_enter | 0 | 43 |
| RIP:rcu_irq_enter | 0 | 43 |
| WARNING:at_kernel/rcu/tree.c:#rcu_eqs_enter_common | 0 | 43 |
| RIP:rcu_eqs_enter_common | 0 | 43 |
+----------------------------------------------------+------------+------------+
[ 0.001000] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree.c:892 rcu_irq_exit+0x4d/0x19a
[ 0.001000] Modules linked in:
[ 0.001000] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.15.0-rc7-00430-g8e130b0 #35
[ 0.001000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.001000] RIP: 0010:rcu_irq_exit+0x4d/0x19a
[ 0.001000] RSP: 0000:ffffffff92803e18 EFLAGS: 00010082
[ 0.001000] RAX: 000000000000001d RBX: 0000000000000082 RCX: 70a3d70a3d70a3e0
[ 0.001000] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000046
[ 0.001000] RBP: ffffffff910fa412 R08: 00000000c5610c9a R09: 0000000000000004
[ 0.001000] R10: 0000000000000001 R11: ffffffff93dc0469 R12: 0000000000000000
[ 0.001000] R13: ffffffff93dc0880 R14: 0000000000000002 R15: 0000000000000048
[ 0.001000] FS: 0000000000000000(0000) GS:ffff8bfa5f600000(0000) knlGS:0000000000000000
[ 0.001000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.001000] CR2: 00000000ffffffff CR3: 0000000009824000 CR4: 00000000000006b0
[ 0.001000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.001000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.001000] Call Trace:
[ 0.001000] ? vprintk_emit+0x26c/0x29c
[ 0.001000] rcu_irq_exit_irqson+0x21/0x48
[ 0.001000] trace_hardirqs_on+0xc2/0xd0
[ 0.001000] vprintk_emit+0x26c/0x29c
[ 0.001000] printk+0x43/0x4b
[ 0.001000] lockdep_init+0x36/0xcf
[ 0.001000] start_kernel+0x2fd/0x416
[ 0.001000] secondary_startup_64+0xa5/0xb0
[ 0.001000] Code: 08 00 00 00 75 27 83 b8 88 08 00 00 00 74 1e 80 3d ef 68 8c 01 00 75 15 48 c7 c7 a9 e3 5e 92 c6 05 df 68 8c 01 01 e8 31 9d f8 ff <0f> ff 48 c7 c5 a0 9d 1d 00 65 48 03 2d 70 cf ef 6e 83 7d 08 00
[ 0.001000] ---[ end trace 2507864299958132 ]---
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months