ca90800a91 [ 3.251519] WARNING: CPU: 0 PID: 1 at mm/page_alloc.c:4061 __alloc_pages_nodemask
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
commit ca90800a91ba723d78ded634d037c1d2df8b54d6
Author: Kees Cook <keescook(a)chromium.org>
AuthorDate: Thu May 10 16:40:03 2018 -0700
Commit: Kees Cook <keescook(a)chromium.org>
CommitDate: Tue Jun 5 12:16:51 2018 -0700
test_overflow: Add memory allocation overflow tests
Make sure that the memory allocators are behaving as expected in the face
of overflows of multiplied arguments or when using the array_size()-family
helpers.
Example output of new tests (with the expected __alloc_pages_slowpath
and vmalloc warnings about refusing giant allocations removed):
[ 93.062076] test_overflow: kmalloc detected saturation
[ 93.062988] test_overflow: kmalloc_node detected saturation
[ 93.063818] test_overflow: kzalloc detected saturation
[ 93.064539] test_overflow: kzalloc_node detected saturation
[ 93.120386] test_overflow: kvmalloc detected saturation
[ 93.143458] test_overflow: kvmalloc_node detected saturation
[ 93.166861] test_overflow: kvzalloc detected saturation
[ 93.189924] test_overflow: kvzalloc_node detected saturation
[ 93.221671] test_overflow: vmalloc detected saturation
[ 93.246326] test_overflow: vmalloc_node detected saturation
[ 93.270260] test_overflow: vzalloc detected saturation
[ 93.293824] test_overflow: vzalloc_node detected saturation
[ 93.294597] test_overflow: devm_kmalloc detected saturation
[ 93.295383] test_overflow: devm_kzalloc detected saturation
[ 93.296217] test_overflow: all tests passed
Signed-off-by: Kees Cook <keescook(a)chromium.org>
610b15c50e overflow.h: Add allocation size calculation helpers
ca90800a91 test_overflow: Add memory allocation overflow tests
ec0c96714e Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
4110b42356 Add linux-next specific files for 20180810
+-----------------------------------------------------+------------+------------+------------+---------------+
| | 610b15c50e | ca90800a91 | ec0c96714e | next-20180810 |
+-----------------------------------------------------+------------+------------+------------+---------------+
| boot_successes | 72 | 0 | 0 | 0 |
| boot_failures | 1 | 49 | 18 | 20 |
| Mem-Info | 1 | 49 | 18 | 20 |
| WARNING:at_mm/page_alloc.c:#__alloc_pages_nodemask | 0 | 49 | 18 | 20 |
| EIP:__alloc_pages_nodemask | 0 | 49 | 18 | 20 |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 0 | 0 | 0 | 20 |
| EIP:note_page | 0 | 0 | 0 | 20 |
+-----------------------------------------------------+------------+------------+------------+---------------+
[ 3.249253] test_overflow: s8 : 19 tests
[ 3.249696] test_overflow: u16: 17 tests
[ 3.250151] test_overflow: s16: 17 tests
[ 3.250599] test_overflow: u32: 17 tests
[ 3.251039] test_overflow: s32: 17 tests
[ 3.251519] WARNING: CPU: 0 PID: 1 at mm/page_alloc.c:4061 __alloc_pages_nodemask+0x2e9/0xe12
[ 3.252625] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G T 4.17.0-rc4-00006-gca90800 #1151
[ 3.253474] EIP: __alloc_pages_nodemask+0x2e9/0xe12
[ 3.253474] EFLAGS: 00210246 CPU: 0
[ 3.253474] EAX: 00200140 EBX: 00000000 ECX: 00000000 EDX: 00000001
[ 3.253474] ESI: 7a7af300 EDI: 014040c0 EBP: 7fc4fde4 ESP: 7fc4fd38
[ 3.253474] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[ 3.253474] CR0: 80050033 CR2: 00000000 CR3: 02a90000 CR4: 000006d0
[ 3.253474] Call Trace:
[ 3.253474] ? sched_clock_cpu+0x11c/0x155
[ 3.253474] ? _raw_spin_unlock+0x2c/0x45
[ 3.253474] ? free_one_page+0x28b/0x423
[ 3.253474] ? kmalloc_order+0x20/0x2f
[ 3.253474] ? kmalloc_order_trace+0x1b/0xe0
[ 3.253474] ? __kmalloc+0x180/0x227
[ 3.253474] ? kfree+0x1d3/0x1f6
[ 3.253474] ? test_kmalloc+0xe6/0x137
[ 3.253474] ? test_module_init+0x2297/0x30e3
[ 3.253474] ? preempt_count_sub+0xa/0x67
[ 3.253474] ? preempt_count_sub+0x44/0x67
[ 3.253474] ? _raw_spin_unlock_irqrestore+0x41/0x6a
[ 3.253474] ? add_device_randomness+0xb1/0x208
[ 3.253474] ? test_kzalloc+0x137/0x137
[ 3.253474] ? do_one_initcall+0x10d/0x392
[ 3.253474] ? do_early_param+0xf7/0xf7
[ 3.253474] ? kernel_init_freeable+0x2a1/0x42b
[ 3.253474] ? rest_init+0x10d/0x10d
[ 3.253474] ? kernel_init+0x10/0xf3
[ 3.253474] ? schedule_tail_wrapper+0x9/0xc
[ 3.253474] ? ret_from_fork+0x19/0x24
[ 3.253474] Code: 0c 8b 33 85 f6 75 e2 64 ff 0d c8 76 93 7a 74 05 e9 3a fe ff ff e8 42 ae ec ff e9 30 fe ff ff f7 c7 00 02 00 00 0f 85 11 fe ff ff <0f> 0b e9 0a fe ff ff 64 8b 15 cc 76 93 7a 83 ba 58 0a 00 00 63
[ 3.253474] ---[ end trace 48b5392a6d84e6d7 ]---
[ 3.269794] test_overflow: kmalloc detected saturation
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start e4f6a44c4aeca9eda153302abb0c14d053914f72 v4.17 --
git bisect bad ec65e266ae548ea560c7f109c3d9749abcc877b5 # 04:54 B 0 1 78 31 staging:rtl8192u: typedef struct tx_fwinfo_819x_usb remove typedef
git bisect bad e62b4e21d1edf1cbe6d79e4c05fdbd56190a57aa # 05:13 B 0 2 46 30 staging: rtl8192u: Truncate block comments to 80 character length - Style
git bisect bad ab0b2e59323cd3972e5f011fbbf3868a4ec360dd # 05:27 B 0 1 17 2 Merge tag 'upstream-4.18-rc1' of git://git.infradead.org/linux-ubifs
git bisect good af6c5d5e01ad9f2c9ca38cccaae6b5d67ddd241f # 06:26 G 10 0 0 0 Merge branch 'for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq
git bisect bad 68abbe729567cef128b2c2141f2ed2567f3b8372 # 06:26 B 0 50 115 0 Merge branch 'akpm' (patches from Andrew)
git bisect bad da315f6e03988a7127680bbc26e1028991b899b8 # 06:26 B 0 45 93 0 Merge tag 'fuse-update-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse
git bisect good 0eb0061381b2bac082cc26d573fc48fe99db3922 # 07:25 G 10 0 0 0 Merge tag 'for-linus-4.18' of git://github.com/cminyard/linux-ipmi
git bisect good 8b5c6a3a49d9ebc7dc288870b9c56c4f946035d8 # 08:20 G 10 0 0 0 Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
git bisect bad 285767604576148fc1be7fcd112e4a90eb0d6ad2 # 08:20 B 0 59 133 0 Merge tag 'overflow-v4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
git bisect good 5eb6eed7e0fe880dc8de8da203cc888716bbf196 # 09:38 G 10 0 0 0 Merge tag 'trace-v4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace
git bisect bad ca90800a91ba723d78ded634d037c1d2df8b54d6 # 12:17 B 0 1 86 38 test_overflow: Add memory allocation overflow tests
git bisect good 6d3344324b5ae49fc8cb599a2c687e5607ba6e9f # 12:17 G 11 0 0 0 test_overflow: macrofy some more, do more tests for free
git bisect good 610b15c50e86eb1e4b77274fabcaea29ac72d6a8 # 12:17 G 19 0 0 3 overflow.h: Add allocation size calculation helpers
# first bad commit: [ca90800a91ba723d78ded634d037c1d2df8b54d6] test_overflow: Add memory allocation overflow tests
git bisect good 610b15c50e86eb1e4b77274fabcaea29ac72d6a8 # 13:08 G 30 0 0 4 overflow.h: Add allocation size calculation helpers
# extra tests on HEAD of chao-linux/erofs-dev
git bisect bad dfc9ffb5362ab48bdb5dec53f1e726965d7eb115 # 13:08 B 0 17 38 0 staging: erofs: fix race when the managed cache is enabled
# extra tests on tree/branch linus/master
git bisect bad ec0c96714e7ddeda4eccaa077f5646a0fd6e371f # 13:09 B 0 18 51 0 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
# extra tests on tree/branch linux-next/master
git bisect bad 4110b42356f3f8e237659eb85b0ec1f479044cdf # 13:14 B 0 16 30 0 Add linux-next specific files for 20180810
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 2
- 1
315706049c [ 0.000000] WARNING: CPU: 0 PID: 0 at arch/x86/mm/pageattr.c:1211 __cpa_process_fault
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86/pti
commit 315706049c343794ad0d3e5b6f6b60b900457b11
Merge: 706d51681d636 c40a56a7818cf
Author: Thomas Gleixner <tglx(a)linutronix.de>
AuthorDate: Mon Aug 6 20:56:34 2018 +0200
Commit: Thomas Gleixner <tglx(a)linutronix.de>
CommitDate: Mon Aug 6 20:56:34 2018 +0200
Merge branch 'x86/pti-urgent' into x86/pti
Integrate the PTI Global bit fixes which conflict with the 32bit PTI
support.
Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de>
706d51681d x86/speculation: Support Enhanced IBRS on future CPUs
c40a56a781 x86/mm/init: Remove freed kernel image areas from alias mapping
315706049c Merge branch 'x86/pti-urgent' into x86/pti
d878efce73 x86/mm/pti: Move user W+X check into pti_finalize()
4c3f4f924b Merge branch 'x86/pti'
4110b42356 Add linux-next specific files for 20180810
+--------------------------------------------------------------------------------------+------------+------------+------------+------------+------------+---------------+
| | 706d51681d | c40a56a781 | 315706049c | d878efce73 | 4c3f4f924b | next-20180810 |
+--------------------------------------------------------------------------------------+------------+------------+------------+------------+------------+---------------+
| boot_successes | 0 | 914 | 602 | 317 | 152 | 61 |
| boot_failures | 1828 | 0 | 10 | 3 | 1 | 1 |
| BUG:kernel_hang_in_early-boot_stage,last_printk:Probing_EDD(edd=off_to_disable)...ok | 1828 | | | | | |
| WARNING:at_arch/x86/mm/pageattr.c:#__cpa_process_fault | 0 | 0 | 9 | 3 | 1 | 1 |
| EIP:__cpa_process_fault | 0 | 0 | 9 | 3 | 1 | 1 |
| Mem-Info | 0 | 0 | 1 | | | |
+--------------------------------------------------------------------------------------+------------+------------+------------+------------+------------+---------------+
[ 0.000000] ** **
[ 0.000000] ** WARNING! WARNING! WARNING! WARNING! WARNING! WARNING! **
[ 0.000000] ************************************************************
[ 0.000000] ------------[ cut here ]------------
[ 0.000000] CPA: called for zero pte. vaddr = 4ffe0000 cpa->vaddr = 4ffe0000
[ 0.000000] WARNING: CPU: 0 PID: 0 at arch/x86/mm/pageattr.c:1211 __cpa_process_fault+0x21e/0x232
[ 0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 4.18.0-rc8-00056-g3157060 #210
[ 0.000000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.000000] EIP: __cpa_process_fault+0x21e/0x232
[ 0.000000] Code: ff 3f 76 17 8d 82 00 00 00 c0 c7 46 10 01 00 00 00 c1 e8 0c 89 46 18 31 db eb 19 8b 06 ff 30 57 68 1e 87 97 4e e8 61 f3 00 00 <0f> 0b bb f2 ff ff ff 83 c4 0c 8d 65 f4 89 d8 5b 5e 5f 5d c3 55 89
[ 0.000000] EAX: 00000040 EBX: 00000001 ECX: 00000000 EDX: 00000002
[ 0.000000] ESI: 4eafbef8 EDI: 4ffe0000 EBP: 4eafbe6c ESP: 4eafbe38
[ 0.000000] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00210016
[ 0.000000] CR0: 80050033 CR2: ffda3000 CR3: 0ee2c000 CR4: 00040690
[ 0.000000] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 0.000000] DR6: fffe0ff0 DR7: 00000400
[ 0.000000] Call Trace:
[ 0.000000] ? lookup_address_in_pgd+0x5a/0x65
[ 0.000000] ? lookup_address+0x1c/0x1f
[ 0.000000] ? __change_page_attr_set_clr+0xc0/0x5c4
[ 0.000000] ? lock_release+0x1bd/0x1c5
[ 0.000000] ? mutex_unlock+0xb/0xd
[ 0.000000] ? vm_unmap_aliases+0xc8/0xcf
[ 0.000000] ? 0x4da00000
[ 0.000000] ? change_page_attr_set_clr+0xfb/0x286
[ 0.000000] ? change_page_attr_clear+0x1d/0x22
[ 0.000000] ? set_memory_nonglobal+0x16/0x18
[ 0.000000] ? pti_set_kernel_image_nonglobal+0x22/0x24
[ 0.000000] ? pti_init+0xcc/0xe5
[ 0.000000] ? start_kernel+0x1fc/0x392
[ 0.000000] ? i386_start_kernel+0x92/0x96
[ 0.000000] ? startup_32_smp+0x15f/0x164
[ 0.000000] ---[ end trace 93e6ec2f47003b9d ]---
[ 0.001000] Preemptible hierarchical RCU implementation.
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start f977fd57f15ba623502eb34ecb865f0294afbabe 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect bad a9e7cdbb19eb6a9f0f2fed84955ff3ea65af01b1 # 15:13 B 38 1 0 2 Merge 'linux-review/Aditya-Prayoga/gpio-mvebu-Add-support-for-multiple-PWM-lines/20180807-030310' into devel-spot-201808071209
git bisect good 8d4ccdb1e6680366948f18853af3bba4c8265e01 # 20:28 G 300 0 0 16 Merge 'linux-review/Codrin-Ciubotariu/ARM-dts-at91-sama5d2-Add-nodes-for-I2S/20180807-061616' into devel-spot-201808071209
git bisect good 73473367ce2bfd7d3201a760987fa56a64a584ee # 04:03 G 300 0 0 10 Merge 'tip/master' into devel-spot-201808071209
git bisect bad 76f6d8e5e5fa5bc33d50fe44aff199635343924a # 09:41 B 191 1 0 13 Merge 'linux-review/Flavio-Suligoi/can-sja1000-plx_pci-add-support-for-ASEM-CAN-raw-device/20180807-034318' into devel-spot-201808071209
git bisect bad da4fdd1d5114aa70558e75363e0ab59d5ba193e5 # 11:54 B 45 1 0 10 Merge 'tip/x86/pti' into devel-spot-201808071209
git bisect good 8e347231345cf59bd656519971da1ebfa9dc3196 # 03:47 G 300 0 0 0 Merge 'linux-review/Michal-Zylowski/checkpatch-Check-for-space-after-else-keyword/20180807-041421' into devel-spot-201808071209
git bisect good 9f515cdb411ef34f1aaf4c40bb0c932cf6db5de1 # 11:49 G 302 0 0 39 x86/mm/init: Pass unconverted symbol addresses to free_init_pages()
git bisect good c40a56a7818cfe735fc93a69e1875f8bba834483 # 23:08 G 300 0 0 0 x86/mm/init: Remove freed kernel image areas from alias mapping
git bisect bad 315706049c343794ad0d3e5b6f6b60b900457b11 # 03:07 B 74 1 0 17 Merge branch 'x86/pti-urgent' into x86/pti
# first bad commit: [315706049c343794ad0d3e5b6f6b60b900457b11] Merge branch 'x86/pti-urgent' into x86/pti
git bisect good 706d51681d636a0c4a5ef53395ec3b803e45ed4d # 17:53 G 900 0 900 1818 x86/speculation: Support Enhanced IBRS on future CPUs
git bisect good c40a56a7818cfe735fc93a69e1875f8bba834483 # 15:02 G 901 0 0 0 x86/mm/init: Remove freed kernel image areas from alias mapping
# extra tests with debug options
git bisect bad 315706049c343794ad0d3e5b6f6b60b900457b11 # 17:28 B 27 1 0 0 Merge branch 'x86/pti-urgent' into x86/pti
# extra tests on HEAD of linux-devel/devel-spot-201808071209
git bisect bad f977fd57f15ba623502eb34ecb865f0294afbabe # 17:29 B 33 2 0 1 0day head guard for 'devel-spot-201808071209'
# extra tests on tree/branch tip/x86/pti
git bisect bad d878efce73fe86db34ddb2013260adf571a701a7 # 02:41 B 156 1 0 0 x86/mm/pti: Move user W+X check into pti_finalize()
# extra tests on tree/branch tip/master
git bisect bad 4c3f4f924ba99ee40b9cbd6fa128b2b9fe6c3b04 # 07:29 B 74 1 0 0 Merge branch 'x86/pti'
# extra tests on tree/branch linux-next/master
git bisect bad 4110b42356f3f8e237659eb85b0ec1f479044cdf # 12:05 B 50 1 0 0 Add linux-next specific files for 20180810
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
2f3ac6a8e1 [ 245.386834] INFO: task umount:890 blocked for more than 120 seconds.
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/0day-ci/linux/commits/Wei-Wang/mm-vmscan-adjust-shrink...
commit 2f3ac6a8e1ef1b90aee2793f87e7fe2b7f61e952
Author: Wei Wang <wei.w.wang(a)intel.com>
AuthorDate: Fri Aug 3 18:56:49 2018 +0800
Commit: 0day robot <lkp(a)intel.com>
CommitDate: Sat Aug 4 02:54:27 2018 +0800
mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
Some shrinkers may free more than the requested nr_to_scan of pages
in one invocation of scan_objects, and some may free less than that.
Currently shrinkers can either return the actual number of pages that
have been freed via the return value of scan_objects or track that
actual number in shrinkctl->nr_scanned. But do_shrink_slab works on an
assumption that the actual number is always tracked via
shrinkctl->nr_scanned, which is not true. Having checked the shrinkers
used in the kernel, they basically return the actual number of freed
pages via the return value of scan_objects, and most of them leave
shrinkctl->nr_scanned unchanged after scan_objects is called.
So this patch adjusts shrinkctl->nr_scanned to the actual freed number
after scan_objects is called.
Signed-off-by: Wei Wang <wei.w.wang(a)intel.com>
Cc: Michal Hocko <mhocko(a)kernel.org>
Cc: Andrew Morton <akpm(a)linux-foundation.org>
Cc: Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
Cc: Chris Wilson <chris(a)chris-wilson.co.uk>
Cc: Michael S. Tsirkin <mst(a)redhat.com>
0585df468e Merge tag 'media/v4.18-3' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
2f3ac6a8e1 mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
+--------------------------------------------------+------------+------------+
| | 0585df468e | 2f3ac6a8e1 |
+--------------------------------------------------+------------+------------+
| boot_successes | 610 | 208 |
| boot_failures | 2 | 20 |
| Mem-Info | 2 | 5 |
| INFO:task_blocked_for_more_than#seconds | 0 | 15 |
| Kernel_panic-not_syncing:hung_task:blocked_tasks | 0 | 15 |
| invoked_oom-killer:gfp_mask=0x | 0 | 3 |
+--------------------------------------------------+------------+------------+
Deactivating swap...
Unmounting local filesystems...
[ 98.855154] CE: hpet increased min_delta_ns to 128142 nsec
[ 124.213609] Writes: Total: 13042420 Max/Min: 0/0 Fail: 0
[ 185.656565] Writes: Total: 14000454 Max/Min: 0/0 Fail: 0
[ 245.386834] INFO: task umount:890 blocked for more than 120 seconds.
[ 245.388442] Not tainted 4.18.0-rc7-00159-g2f3ac6a #1
[ 245.389785] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 245.396792] umount D 7024 890 886 0x00000000
[ 245.398174] Call Trace:
[ 245.398903] __schedule+0x6d9/0x706
[ 245.399847] ? preempt_latency_start+0x50/0x53
[ 245.403458] schedule+0x73/0xa4
[ 245.404346] __rwsem_down_write_failed_common+0x165/0x229
[ 245.405680] rwsem_down_write_failed+0x12/0x14
[ 245.410109] call_rwsem_down_write_failed+0x9/0xc
[ 245.411327] __down_write+0x17/0x19
[ 245.412261] down_write+0x38/0x40
[ 245.413172] ? unregister_shrinker+0x1b/0x40
[ 245.420126] unregister_shrinker+0x1b/0x40
[ 245.421220] deactivate_locked_super+0x22/0x5e
[ 245.422354] deactivate_super+0x2e/0x31
[ 245.426784] cleanup_mnt+0x7f/0x9b
[ 245.427734] __cleanup_mnt+0x10/0x12
[ 245.428690] task_work_run+0x63/0x82
[ 245.429651] prepare_exit_to_usermode+0xd8/0x113
[ 245.436795] syscall_return_slowpath+0x10e/0x116
[ 245.437991] ? do_int80_syscall_32+0x7e/0x92
[ 245.439087] do_int80_syscall_32+0x8b/0x92
[ 245.443471] entry_INT80_32+0x2f/0x2f
[ 245.444472] EIP: 0x47f4655d
[ 245.445264] Code: Bad RIP value.
[ 245.446160] EAX: 00000000 EBX: 080d32b8 ECX: 00000000 EDX: 080d3008
[ 245.450109] ESI: 080d3298 EDI: 080d32b8 EBP: 080d3298 ESP: bfd1bfec
[ 245.451629] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 007b EFLAGS: 00000282
[ 245.453238]
[ 245.453238] Showing all locks held in the system:
[ 245.460123] 1 lock held by khungtaskd/19:
[ 245.461200] #0: 78065a10 (rcu_read_lock){....}, at: debug_show_all_locks+0x1f/0xe5
[ 245.463121] 4 locks held by trinity-c3/708:
[ 245.470156] 2 locks held by umount/890:
[ 245.471202] #0: d94381cc (&type->s_umount_key#23){....}, at: deactivate_super+0x27/0x31
[ 245.473205] #1: 96e0a96c (shrinker_rwsem){....}, at: unregister_shrinker+0x1b/0x40
[ 245.480145]
[ 245.480694] =============================================
[ 245.480694]
[ 245.482426] Kernel panic - not syncing: hung_task: blocked tasks
[ 245.483919] CPU: 0 PID: 19 Comm: khungtaskd Not tainted 4.18.0-rc7-00159-g2f3ac6a #1
[ 245.485791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 245.487769] Call Trace:
[ 245.488486] dump_stack+0x16/0x18
[ 245.489371] panic+0x95/0x1c4
[ 245.490179] watchdog+0x33e/0x358
[ 245.491061] kthread+0x100/0x105
[ 245.491930] ? rcu_lock_acquire+0x21/0x21
[ 245.493155] ? queuing_blocked+0x68/0x68
[ 245.494157] ret_from_fork+0x2e/0x38
[ 245.495093] Kernel Offset: 0xb400000 from 0xc1000000 (relocation range: 0xc0000000-0xd33d1fff)
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start bcfcf5f6a630893298fdf92430540ddc29988e08 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect good 6995582fd703ed76ce43446b8779d0c4b3cd7ffd # 06:29 G 44 0 10 10 Merge 'linux-review/Colin-King/ocfs2-fix-spelling-mistake-ambigous-ambiguous/20180804-063102' into devel-hourly-2018081101
git bisect bad 9d17fdb971ebc2569502a7fd98c3551327e3828a # 06:44 B 37 2 3 3 Merge 'linux-review/Anson-Huang/ARM-dts-imx7ulp-update-pinfunc-header-file/20180731-130045' into devel-hourly-2018081101
git bisect bad 6ef5baef79802be58950f866fdaf2b1d81d55972 # 07:05 B 21 1 4 4 Merge 'linux-review/Gustavo-A-R-Silva/ftrace-Use-true-and-false-for-boolean-values/20180802-164310' into devel-hourly-2018081101
git bisect bad 27ba623eab20489095a3e984b467510acbe29959 # 07:38 B 33 1 6 6 Merge 'pci/pci/enumeration' into devel-hourly-2018081101
git bisect good 8697a70f6abe50ea675488d0b2673b967d09de77 # 08:56 G 230 0 38 38 Merge 'linux-review/Colin-King/iio-chemical-fix-spelling-mistake-failted-failed/20180804-052717' into devel-hourly-2018081101
git bisect good e7f30961bbac6c3404fe96598a3ea7de4a009d8f # 10:12 G 230 0 41 41 Merge 'linux-review/Jann-Horn/selinux-stricter-parsing-in-mls_context_to_sid/20180804-032446' into devel-hourly-2018081101
git bisect good 98a12df7ad4ec167861bd49de9a700b0539380e8 # 12:18 G 232 0 33 33 Merge 'linux-review/YueHaibing/ARM-dmabounce-remove-unnecessary-NULL-check-before-dma_pool_destroy/20180803-192651' into devel-hourly-2018081101
git bisect good b7989b3a874498a2b860355ebfdb959c13196f5c # 13:38 G 232 0 43 43 Merge 'linux-review/Sinan-Kaya/watchdog-Reduce-message-verbosity/20180803-183432' into devel-hourly-2018081101
git bisect good f2dd3f39e2fc828a01016173a851bbbbd49a1c02 # 15:05 G 230 0 31 31 Merge 'jpirko-mlxsw/combined_queue' into devel-hourly-2018081101
git bisect bad ab2840334479048bb692564404c3f0410f87c0f0 # 15:21 B 20 1 1 1 Merge 'linux-review/Wei-Wang/mm-vmscan-adjust-shrinkctl-nr_scanned-after-invoking-scan_objects/20180804-025426' into devel-hourly-2018081101
git bisect bad 2f3ac6a8e1ef1b90aee2793f87e7fe2b7f61e952 # 16:44 B 29 1 5 5 mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
# first bad commit: [2f3ac6a8e1ef1b90aee2793f87e7fe2b7f61e952] mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
git bisect good 0585df468e8f4481b78256a2bf09449290bfcbf3 # 21:40 G 691 0 97 97 Merge tag 'media/v4.18-3' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
# extra tests with debug options
git bisect bad 2f3ac6a8e1ef1b90aee2793f87e7fe2b7f61e952 # 22:01 B 50 1 6 6 mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
# extra tests on HEAD of linux-devel/devel-hourly-2018081101
git bisect bad bcfcf5f6a630893298fdf92430540ddc29988e08 # 22:06 B 20 3 0 0 0day head guard for 'devel-hourly-2018081101'
# extra tests on tree/branch linux-review/Wei-Wang/mm-vmscan-adjust-shrinkctl-nr_scanned-after-invoking-scan_objects/20180804-025426
git bisect bad 2f3ac6a8e1ef1b90aee2793f87e7fe2b7f61e952 # 22:18 B 200 15 0 25 mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects
# extra tests with first bad commit reverted
git bisect bad cdaf4f5d375ad0d4eebfd5a7ce423c385ce56326 # 23:41 B 259 1 46 46 Revert "mm/vmscan: adjust shrinkctl->nr_scanned after invoking scan_objects"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
2fe89a7e1e ("FROMLIST: BACKPORT: x86/tsc: use .."): WARNING: CPU: 0 PID: 0 at arch/x86/kernel/tsc.c:1315 determine_cpu_tsc_frequencies
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://chromium.googlesource.com/chromiumos/third_party/kernel chromeos-4.14
commit 2fe89a7e1ea7a36cc6839f7d46ae809cf4d1297a
Author: Pavel Tatashin <pasha.tatashin(a)oracle.com>
AuthorDate: Thu Jul 19 16:07:39 2018 -0400
Commit: chrome-bot <chrome-bot(a)chromium.org>
CommitDate: Thu Aug 2 13:52:50 2018 -0700
FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu
Early in boot enable tsc_calibrate_cpu_early and switch to
tsc_calibrate_cpu() only later. Do this unconditionally, because it is
unknown what methods other cpus will use to calibrate once they are
onlined.
If by the time tsc_init() is called tsc frequency is still unknown do only
pit_hpet_ptimer_calibrate_cpu to calibrate, as this function contails the
only methods that had not been called earlier in boot.
This patch is taken from the series accepted here:
https://lkml.org/lkml/2018/7/19/878
BUG=b:112103715
TEST=Verified that no hang is observed on yorp for 5000+ warm reboots.
Change-Id: I2ace2c76a08d3cb820198e10eecb012a14cc1826
Signed-off-by: Pavel Tatashin <pasha.tatashin(a)oracle.com>
Signed-off-by: Furquan Shaikh <furquan(a)chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/1159345
Commit-Ready: Wenkai Du <wenkai.du(a)intel.com>
Tested-by: Wenkai Du <wenkai.du(a)intel.com>
Reviewed-by: Aaron Durbin <adurbin(a)chromium.org>
Reviewed-by: Justin TerAvest <teravest(a)chromium.org>
107fce4b9a FROMLIST: BACKPORT: x86/tsc: split native_calibrate_cpu() into early and late parts
2fe89a7e1e FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu
624413e537 Merge commit '50fb5b89a8985d28ba1c04fff028de1822cde77f' into patch_branch
+-----------------------------------------------------------------+------------+------------+------------+
| | 107fce4b9a | 2fe89a7e1e | 624413e537 |
+-----------------------------------------------------------------+------------+------------+------------+
| boot_successes | 60 | 17 | 3 |
| boot_failures | 0 | 17 | 14 |
| WARNING:at_arch/x86/kernel/tsc.c:#determine_cpu_tsc_frequencies | 0 | 17 | 14 |
| EIP:determine_cpu_tsc_frequencies | 0 | 17 | 14 |
+-----------------------------------------------------------------+------------+------------+------------+
[ 0.004000] ----------------------------------------------------
[ 0.004000] allocated 393216 bytes of page_ext
[ 0.004000] ODEBUG: selftest passed
[ 0.004000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns
[ 0.004000] hpet clockevent registered
[ 0.004038] WARNING: CPU: 0 PID: 0 at arch/x86/kernel/tsc.c:1315 determine_cpu_tsc_frequencies+0x8c/0x129
[ 0.005770] Modules linked in:
[ 0.006288] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.58-06454-g2fe89a7 #24
[ 0.007497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.008000] task: 421e4a40 task.stack: 421dc000
[ 0.008000] EIP: determine_cpu_tsc_frequencies+0x8c/0x129
[ 0.008000] EFLAGS: 00210202 CPU: 0
[ 0.008000] EAX: 422ca828 EBX: 41046bf0 ECX: 00000000 EDX: 00000000
[ 0.008000] ESI: 00000001 EDI: 00000000 EBP: 01000000 ESP: 421ddf70
[ 0.008000] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[ 0.008000] CR0: 80050033 CR2: ffffffff CR3: 025c6000 CR4: 00000690
[ 0.008000] Call Trace:
[ 0.008000] ? tsc_init+0x36/0x258
[ 0.008000] ? start_kernel+0x3c4/0x432
[ 0.008000] ? startup_32_smp+0x164/0x170
[ 0.008000] Code: 53 36 42 eb 43 31 c0 81 fb e0 d0 01 41 0f 95 c0 89 c6 31 c9 89 f2 b8 28 a8 2c 42 6a 00 e8 3f cb d9 fe 81 fb e0 d0 01 41 5a 74 02 <0f> 0b 31 c9 89 f2 b8 10 a8 2c 42 6a 00 e8 24 cb d9 fe e8 8f 59
[ 0.008000] ---[ end trace 2daadab45d5a0f10 ]---
[ 0.012026] tsc: PIT calibration matches HPET. 1 loops
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 8386674b00dde19eedfaf552260736cc9a50a1b6 110b02247162229b46907dff985850e2d1be7a96 --
git bisect good e7aac49d4508bd5f7a6a3a3bf72e272a92bd78d0 # 12:32 G 13 0 0 0 Revert "ANDROID: fuse: Freeze client on suspend when request sent to userspace"
git bisect bad 75d996422d0661c3eae7ae9779c81f78d2a65e56 # 12:39 B 0 1 21 4 UPSTREAM: drm/msm: dsi: Handle dual-channel for 6G as well
git bisect bad 99a01e1834c3860c5eae5e5eefd228f372a40c9d # 12:55 B 0 1 18 1 UPSTREAM: drm/msm/dsi: replace version checks with helper functions
git bisect bad 2fe89a7e1ea7a36cc6839f7d46ae809cf4d1297a # 13:09 B 0 3 23 2 FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu
git bisect good 750e2fad55c61311e880a74216dfe6ac3b55990e # 13:54 G 12 0 0 0 CHROMIUM: config: re-normalize config
git bisect good 2deb752d534df809dd5abf7461b76bdb54d6c8a7 # 14:08 G 12 0 0 0 FROMGIT: ASoC: AMD: Fix build warning
git bisect good e472863fa54639ddbded13d4eb80b8f87a58f8d4 # 14:23 G 13 0 0 0 FROMGIT: media: venus: keep resolution when adjusting format
git bisect good ca3fd31d2640c7a9a8f89b53cdaa216f705cac9c # 03:27 G 12 0 0 0 FROMLIST: BACKPORT: x86/tsc: calibrate tsc only once
git bisect good 107fce4b9ace700733f1c1f5247da514024348ec # 04:05 G 12 0 0 0 FROMLIST: BACKPORT: x86/tsc: split native_calibrate_cpu() into early and late parts
# first bad commit: [2fe89a7e1ea7a36cc6839f7d46ae809cf4d1297a] FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu
git bisect good 107fce4b9ace700733f1c1f5247da514024348ec # 04:31 G 36 0 0 0 FROMLIST: BACKPORT: x86/tsc: split native_calibrate_cpu() into early and late parts
# extra tests with debug options
git bisect bad 2fe89a7e1ea7a36cc6839f7d46ae809cf4d1297a # 04:42 B 0 11 26 0 FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu
# extra tests on HEAD of internal-chrome-os/chromeos-4.14
git bisect bad 8386674b00dde19eedfaf552260736cc9a50a1b6 # 04:42 B 2 10 0 0 Merge commit '8e9ccd319a54ba0e1184fd19cfd0d2bb38094b97' into patch_branch
# extra tests on tree/branch chrome-os/chromeos-4.14
# extra tests with first bad commit reverted
git bisect good 7a2a6ec0067f890b0d8160aafdfafee8efbc6f4c # 04:39 G 12 0 0 0 Revert "FROMLIST: BACKPORT: x86/tsc: use tsc_calibrate_cpu_early and pit_hpet_ptimer_calibrate_cpu"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
3354b54f9f ("media: vivid: shut up warnings due to a .."): BUG: unable to handle kernel paging request at ffffc90000393131
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master
commit 3354b54f9f7037a1122d3b6009aa9d39829d6843
Author: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
AuthorDate: Tue Aug 7 07:29:12 2018 -0400
Commit: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
CommitDate: Wed Aug 8 10:57:14 2018 -0400
media: vivid: shut up warnings due to a non-trivial logic
The vivid driver uses a complex logic to save one kalloc/kfree
allocation. That non-trivial way of allocating data causes
smatch to warn:
drivers/media/platform/vivid/vivid-core.c:869 vivid_create_instance() warn: potentially one past the end of array 'dev->query_dv_timings_qmenu[dev->query_dv_timings_size]'
drivers/media/platform/vivid/vivid-core.c:869 vivid_create_instance() warn: potentially one past the end of array 'dev->query_dv_timings_qmenu[dev->query_dv_timings_size]'
I also needed to read the code several times in order to understand
what it was desired there. It turns that the logic was right,
although confusing to read.
As it is doing allocations on a non-standard way, let's add some
documentation while shutting up the false positive.
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
845b978a87 media: rtl28xxu: be sure that it won't go past the array size
3354b54f9f media: vivid: shut up warnings due to a non-trivial logic
4110b42356 Add linux-next specific files for 20180810
+------------------------------------------+------------+------------+---------------+
| | 845b978a87 | 3354b54f9f | next-20180810 |
+------------------------------------------+------------+------------+---------------+
| boot_successes | 71 | 0 | 0 |
| boot_failures | 0 | 19 | 19 |
| BUG:unable_to_handle_kernel | 0 | 17 | 19 |
| Oops:#[##] | 0 | 17 | 19 |
| RIP:vivid_probe | 0 | 17 | 19 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 17 | 19 |
| BUG:kernel_hang_in_test_stage | 0 | 2 | |
+------------------------------------------+------------+------------+---------------+
[ 248.812686] serial_ir serial_ir.0: use 'setserial /dev/ttySX uart none'
[ 248.817736] serial_ir serial_ir.0: or compile the serial port driver as module and
[ 248.823158] serial_ir serial_ir.0: make sure this module is loaded first
[ 248.828672] serial_ir: probe of serial_ir.0 failed with error -16
[ 248.834846] vivid-000: using single planar format API
[ 248.847809] BUG: unable to handle kernel paging request at ffffc90000393131
[ 248.848015] PGD 1a043067 P4D 1a043067 PUD 1a044067 PMD 19423067 PTE 0
[ 248.848015] Oops: 0002 [#1] DEBUG_PAGEALLOC KASAN
[ 248.848015] CPU: 0 PID: 1 Comm: swapper Not tainted 4.18.0-rc2-00394-g3354b54 #1
[ 248.848015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 248.848015] RIP: 0010:vivid_probe+0x1834/0x38f0
[ 248.848015] Code: 49 8b 9f 30 52 00 00 be 00 01 00 00 48 89 df e8 02 80 b1 fe 48 8b 05 6b d8 5c 01 48 8d 7b 08 48 c7 c6 a0 66 76 95 48 83 e7 f8 <48> 89 03 48 8b 05 4a d9 5c 01 48 89 83 f8 00 00 00 48 29 fb 8d 8b
[ 248.848015] RSP: 0000:ffff88001a097a90 EFLAGS: 00010282
[ 248.848015] RAX: 00ffffffffffff00 RBX: ffffc90000393131 RCX: ffffffff94198e2e
[ 248.848015] RDX: 0000000000000001 RSI: ffffffff957666a0 RDI: ffffc90000393138
[ 248.848015] RBP: 0000000000000000 R08: fffff52000072647 R09: fffff52000072647
[ 248.848015] R10: 0000000000000000 R11: fffff52000072646 R12: ffff880017ac0248
[ 248.848015] R13: 0000000000000000 R14: 0000000000000000 R15: ffff880017ac0240
[ 248.848015] FS: 0000000000000000(0000) GS:ffffffff9607b000(0000) knlGS:0000000000000000
[ 248.848015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 248.848015] CR2: ffffc90000393131 CR3: 000000000d825001 CR4: 00000000001606f0
[ 248.848015] Call Trace:
[ 248.848015] ? vivid_dev_release+0xc0/0xc0
[ 248.848015] ? acpi_dev_pm_attach+0x27/0xd0
[ 248.848015] platform_drv_probe+0x4b/0xb0
[ 248.848015] driver_probe_device+0x33c/0x470
[ 248.848015] __driver_attach+0x12e/0x130
[ 248.848015] ? driver_probe_device+0x470/0x470
[ 248.848015] bus_for_each_dev+0xf4/0x150
[ 248.848015] ? lock_downgrade+0x2e0/0x2e0
[ 248.848015] ? bus_remove_file+0x70/0x70
[ 248.848015] bus_add_driver+0x271/0x300
[ 248.848015] ? set_debug_rodata+0xc/0xc
[ 248.848015] driver_register+0xca/0x1b0
[ 248.848015] ? saa7146_vv_init_module+0x3/0x3
[ 248.848015] vivid_init+0x1f/0x39
[ 248.848015] do_one_initcall+0xc0/0x1c1
[ 248.848015] ? start_kernel+0x4fd/0x4fd
[ 248.848015] ? lock_downgrade+0x2e0/0x2e0
[ 248.848015] kernel_init_freeable+0x19c/0x236
[ 248.848015] ? rest_init+0xe0/0xe0
[ 248.848015] kernel_init+0xa/0x120
[ 248.848015] ? rest_init+0xe0/0xe0
[ 248.848015] ret_from_fork+0x1f/0x30
[ 248.848015] CR2: ffffc90000393131
[ 248.848015] ---[ end trace f4cdabe70826edee ]---
[ 248.848015] RIP: 0010:vivid_probe+0x1834/0x38f0
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 1c2f2531cf8b25cd291c356e734d1db2f290ba8a 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect good 36241ec9b56bd446bd742b57b657620d68aaa33a # 19:40 G 10 0 0 0 Merge remote-tracking branch 'hwmon-staging/hwmon-next'
git bisect bad 9380f4dcadc21d0af1bed88d66eab0afa44b387c # 19:56 B 0 1 15 0 Merge remote-tracking branch 'vfio/next'
git bisect bad 4b4bd9befef4b2f4867c00168ada4223d68d3f86 # 20:18 B 0 1 15 0 Merge remote-tracking branch 'sunxi-drm/sunxi-drm/for-next'
git bisect bad 438e21624bf224a4be6d2f1dc7f1edb4a95716d0 # 20:37 B 0 1 15 0 Merge remote-tracking branch 'netfilter-next/master'
git bisect bad 56588d3bea1fa94d24ef8b7ff606fec281d9caf8 # 21:00 B 0 1 15 0 Merge remote-tracking branch 'thermal/next'
git bisect bad 61ccc9929e2ac336e54241662f81f10689b41f80 # 21:20 B 0 2 16 0 Merge remote-tracking branch 'v4l-dvb/master'
git bisect good 65949c111072500a09709cfc3c9796b58acdf6be # 21:49 G 10 0 0 0 Merge remote-tracking branch 'jc_docs/docs-next'
git bisect good 5f43f90a99ade6db0c05e2bb45883256649c9164 # 22:14 G 10 0 0 0 media: venus: hfi: handle buffer output2 type as well
git bisect good 3153dfe2914bec728cab9a5c9d7b2ec71d714d9c # 22:39 G 10 0 1 1 media: ddbridge/sx8: disable automatic PLS code search
git bisect good ad1363c05a7d65ce6d4c5dca1fdec823b58d6e8b # 23:09 G 11 0 0 0 media: omap2: omapfb: fix ifnullfree.cocci warnings
git bisect good d81469d2b77553b281b9b59eadd995309728f506 # 23:34 G 10 0 0 0 media: sh_veu: convert to SPDX identifiers
git bisect good 845b978a871bff3707eee611b32e4be0b9a94dd2 # 23:50 G 11 0 1 1 media: rtl28xxu: be sure that it won't go past the array size
git bisect bad 484f9b372dd8da6a4a9867ebcd10e5c2b21ab478 # 00:04 B 0 3 17 0 media: mt9v111: Fix build error with no VIDEO_V4L2_SUBDEV_API
git bisect bad 3fcb3c836ef413d3fc848288b308eb655e08d853 # 00:27 B 0 2 16 0 media: tuner-xc2028: don't use casts for printing sizes
git bisect bad 40e431112c63296a6130810ab62a5fe73953f074 # 00:44 B 0 1 15 0 media: cleanup fall-through comments
git bisect bad 3354b54f9f7037a1122d3b6009aa9d39829d6843 # 00:49 B 0 17 53 2 media: vivid: shut up warnings due to a non-trivial logic
# first bad commit: [3354b54f9f7037a1122d3b6009aa9d39829d6843] media: vivid: shut up warnings due to a non-trivial logic
git bisect good 845b978a871bff3707eee611b32e4be0b9a94dd2 # 01:00 G 32 0 0 1 media: rtl28xxu: be sure that it won't go past the array size
# extra tests on HEAD of linux-next/master
git bisect bad 1c2f2531cf8b25cd291c356e734d1db2f290ba8a # 01:01 B 0 25 61 0 Add linux-next specific files for 20180809
# extra tests on tree/branch linux-next/master
git bisect bad 4110b42356f3f8e237659eb85b0ec1f479044cdf # 01:22 B 0 2 16 0 Add linux-next specific files for 20180810
# extra tests with first bad commit reverted
git bisect good 415916742e95b589052e8486d8a9ebee8e54da9c # 01:52 G 11 0 0 0 Revert "media: vivid: shut up warnings due to a non-trivial logic"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
3354b54f9f [ 248.847809] BUG: unable to handle kernel paging request at ffffc90000393131
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master
commit 3354b54f9f7037a1122d3b6009aa9d39829d6843
Author: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
AuthorDate: Tue Aug 7 07:29:12 2018 -0400
Commit: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
CommitDate: Wed Aug 8 10:57:14 2018 -0400
media: vivid: shut up warnings due to a non-trivial logic
The vivid driver uses a complex logic to save one kalloc/kfree
allocation. That non-trivial way of allocating data causes
smatch to warn:
drivers/media/platform/vivid/vivid-core.c:869 vivid_create_instance() warn: potentially one past the end of array 'dev->query_dv_timings_qmenu[dev->query_dv_timings_size]'
drivers/media/platform/vivid/vivid-core.c:869 vivid_create_instance() warn: potentially one past the end of array 'dev->query_dv_timings_qmenu[dev->query_dv_timings_size]'
I also needed to read the code several times in order to understand
what it was desired there. It turns that the logic was right,
although confusing to read.
As it is doing allocations on a non-standard way, let's add some
documentation while shutting up the false positive.
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org>
845b978a87 media: rtl28xxu: be sure that it won't go past the array size
3354b54f9f media: vivid: shut up warnings due to a non-trivial logic
1c2f2531cf Add linux-next specific files for 20180809
+------------------------------------------+------------+------------+---------------+
| | 845b978a87 | 3354b54f9f | next-20180809 |
+------------------------------------------+------------+------------+---------------+
| boot_successes | 35 | 0 | 4 |
| boot_failures | 0 | 17 | 20 |
| BUG:unable_to_handle_kernel | 0 | 17 | 20 |
| Oops:#[##] | 0 | 17 | 20 |
| RIP:vivid_probe | 0 | 17 | 20 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 17 | 20 |
+------------------------------------------+------------+------------+---------------+
[ 248.812686] serial_ir serial_ir.0: use 'setserial /dev/ttySX uart none'
[ 248.817736] serial_ir serial_ir.0: or compile the serial port driver as module and
[ 248.823158] serial_ir serial_ir.0: make sure this module is loaded first
[ 248.828672] serial_ir: probe of serial_ir.0 failed with error -16
[ 248.834846] vivid-000: using single planar format API
[ 248.847809] BUG: unable to handle kernel paging request at ffffc90000393131
[ 248.848015] PGD 1a043067 P4D 1a043067 PUD 1a044067 PMD 19423067 PTE 0
[ 248.848015] Oops: 0002 [#1] DEBUG_PAGEALLOC KASAN
[ 248.848015] CPU: 0 PID: 1 Comm: swapper Not tainted 4.18.0-rc2-00394-g3354b54 #1
[ 248.848015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 248.848015] RIP: 0010:vivid_probe+0x1834/0x38f0
[ 248.848015] Code: 49 8b 9f 30 52 00 00 be 00 01 00 00 48 89 df e8 02 80 b1 fe 48 8b 05 6b d8 5c 01 48 8d 7b 08 48 c7 c6 a0 66 76 95 48 83 e7 f8 <48> 89 03 48 8b 05 4a d9 5c 01 48 89 83 f8 00 00 00 48 29 fb 8d 8b
[ 248.848015] RSP: 0000:ffff88001a097a90 EFLAGS: 00010282
[ 248.848015] RAX: 00ffffffffffff00 RBX: ffffc90000393131 RCX: ffffffff94198e2e
[ 248.848015] RDX: 0000000000000001 RSI: ffffffff957666a0 RDI: ffffc90000393138
[ 248.848015] RBP: 0000000000000000 R08: fffff52000072647 R09: fffff52000072647
[ 248.848015] R10: 0000000000000000 R11: fffff52000072646 R12: ffff880017ac0248
[ 248.848015] R13: 0000000000000000 R14: 0000000000000000 R15: ffff880017ac0240
[ 248.848015] FS: 0000000000000000(0000) GS:ffffffff9607b000(0000) knlGS:0000000000000000
[ 248.848015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 248.848015] CR2: ffffc90000393131 CR3: 000000000d825001 CR4: 00000000001606f0
[ 248.848015] Call Trace:
[ 248.848015] ? vivid_dev_release+0xc0/0xc0
[ 248.848015] ? acpi_dev_pm_attach+0x27/0xd0
[ 248.848015] platform_drv_probe+0x4b/0xb0
[ 248.848015] driver_probe_device+0x33c/0x470
[ 248.848015] __driver_attach+0x12e/0x130
[ 248.848015] ? driver_probe_device+0x470/0x470
[ 248.848015] bus_for_each_dev+0xf4/0x150
[ 248.848015] ? lock_downgrade+0x2e0/0x2e0
[ 248.848015] ? bus_remove_file+0x70/0x70
[ 248.848015] bus_add_driver+0x271/0x300
[ 248.848015] ? set_debug_rodata+0xc/0xc
[ 248.848015] driver_register+0xca/0x1b0
[ 248.848015] ? saa7146_vv_init_module+0x3/0x3
[ 248.848015] vivid_init+0x1f/0x39
[ 248.848015] do_one_initcall+0xc0/0x1c1
[ 248.848015] ? start_kernel+0x4fd/0x4fd
[ 248.848015] ? lock_downgrade+0x2e0/0x2e0
[ 248.848015] kernel_init_freeable+0x19c/0x236
[ 248.848015] ? rest_init+0xe0/0xe0
[ 248.848015] kernel_init+0xa/0x120
[ 248.848015] ? rest_init+0xe0/0xe0
[ 248.848015] ret_from_fork+0x1f/0x30
[ 248.848015] CR2: ffffc90000393131
[ 248.848015] ---[ end trace f4cdabe70826edee ]---
[ 248.848015] RIP: 0010:vivid_probe+0x1834/0x38f0
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 59f1ed58fa1d8a0193244a0b2b60b7df4b3de502 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect bad 363167f4cc14502827585ec55b8035b40d534ef1 # 07:04 B 0 2 16 0 Merge 'linux-review/UPDATE-20180803-184736/Diego-Rondini/ARM-dts-sun8i-Add-initial-Orangepi-Zero-Plus-2-H3-support/20180728-060519' into devel-hourly-2018081001
git bisect good 2fa0ff7965d3a0d6c556d7a2b10fc308da2d3b3b # 07:26 G 11 0 0 0 Merge 'linux-review/David-Howells/rxrpc-Fix-the-keepalive-generator-ver-2/20180809-054631' into devel-hourly-2018081001
git bisect bad 6484141e0886345665f6c0b26ef387492e9c9443 # 07:39 B 0 9 23 0 Merge 'linux-review/Colin-King/USB-typec-fsusb302-remove-unused-variables-snk_pdo-and-toggling_mode_name/20180807-043644' into devel-hourly-2018081001
git bisect bad eb6bc4abb28f529d123f2d9aff71e0874e0367e3 # 07:52 B 0 7 21 0 Merge 'linux-review/Alexandru-Gheorghe/Add-helper-for-plane-reset/20180806-021828' into devel-hourly-2018081001
git bisect good 1f72fae08a7d8046da4549bedc19048243f1bc98 # 08:12 G 11 0 0 0 Merge 'djwong-xfs/djwong-devel' into devel-hourly-2018081001
git bisect good 856cdb74a15ba8eb5c981ce650b26e800fbb8977 # 08:26 G 11 0 1 1 Merge 'vfs/work.misc' into devel-hourly-2018081001
git bisect bad 4f6bc941bf04f9e13aad6292eb94b5469ea57315 # 08:42 B 0 11 25 0 Merge 'linux-review/Chao-Yu/f2fs-fix-to-return-success-when-trimming-meta-area/20180808-232818' into devel-hourly-2018081001
git bisect bad dd5b0d6d0ef7d552c9a4f81880105461657b16b8 # 09:03 B 0 1 15 0 Merge 'linux-review/Guennadi-Liakhovetski/uvcvideo-rename-UVC_QUIRK_INFO-to-UVC_INFO_QUIRK/20180806-031900' into devel-hourly-2018081001
git bisect bad eabb08c0bbe72514f92caacf3dee1b11bb184025 # 09:25 B 0 11 25 0 Merge 'linux-review/Kieran-Bingham/dt-bindings-media-adv748x-Document-secondary-addresses/20180809-103518' into devel-hourly-2018081001
git bisect bad 3354b54f9f7037a1122d3b6009aa9d39829d6843 # 09:43 B 0 4 18 0 media: vivid: shut up warnings due to a non-trivial logic
git bisect good 4effa8bfe4f6bacd041f98775f49cdc550502dc2 # 10:08 G 11 0 0 0 media: i2c: fix warning in Aptina MT9V111
git bisect good 75070c6a3311e320508427bbc779c4de6942872e # 10:25 G 10 0 0 0 media: vsp1_dl: add a description for cmdpool field
git bisect good 845b978a871bff3707eee611b32e4be0b9a94dd2 # 10:36 G 11 0 0 0 media: rtl28xxu: be sure that it won't go past the array size
# first bad commit: [3354b54f9f7037a1122d3b6009aa9d39829d6843] media: vivid: shut up warnings due to a non-trivial logic
git bisect good 845b978a871bff3707eee611b32e4be0b9a94dd2 # 10:42 G 31 0 0 0 media: rtl28xxu: be sure that it won't go past the array size
# extra tests with debug options
git bisect bad 3354b54f9f7037a1122d3b6009aa9d39829d6843 # 10:58 B 0 9 23 0 media: vivid: shut up warnings due to a non-trivial logic
# extra tests on HEAD of linux-devel/devel-hourly-2018081001
git bisect bad 59f1ed58fa1d8a0193244a0b2b60b7df4b3de502 # 10:58 B 0 25 43 0 0day head guard for 'devel-hourly-2018081001'
# extra tests on tree/branch linux-next/master
git bisect bad 1c2f2531cf8b25cd291c356e734d1db2f290ba8a # 11:04 B 0 18 36 0 Add linux-next specific files for 20180809
# extra tests with first bad commit reverted
git bisect good b9c7778b64e9bf83ac5d68cfd22293d5de93aea2 # 11:51 G 10 0 0 0 Revert "media: vivid: shut up warnings due to a non-trivial logic"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
ffbe758dbb [ 0.052456] Kernel panic - not syncing: Can't create rootfs
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git fsinfo
commit ffbe758dbbda23606bfe0ad52023e25ebf8465c6
Author: David Howells <dhowells(a)redhat.com>
AuthorDate: Fri Jun 15 23:27:22 2018 +0100
Commit: David Howells <dhowells(a)redhat.com>
CommitDate: Mon Jul 30 15:14:54 2018 +0100
vfs: Implement a filesystem superblock creation/configuration context
Implement a filesystem context concept to be used during superblock
creation for mount and superblock reconfiguration for remount.
The mounting procedure then becomes:
(1) Allocate new fs_context context.
(2) Configure the context.
(3) Create superblock.
(4) Query the superblock.
(5) Create a mount for the superblock.
(6) Destroy the context.
Rather than calling fs_type->mount(), an fs_context struct is created and
fs_type->init_fs_context() is called to set it up. Pointers exist for the
filesystem and LSM to hang their private data off.
A set of operations has to be set by ->init_fs_context() to provide
freeing, duplication, option parsing, binary data parsing, validation,
mounting and superblock filling.
Legacy filesystems are supported by the provision of a set of legacy
fs_context operations that build up a list of mount options and then invoke
fs_type->mount() from within the fs_context ->get_tree() operation. This
allows all filesystems to be accessed using fs_context.
It should be noted that, whilst this patch adds a lot of lines of code,
there is quite a bit of duplication with existing code that can be
eliminated should all filesystems be converted over.
Signed-off-by: David Howells <dhowells(a)redhat.com>
ca93a22ee4 vfs: Separate changing mount flags full remount
ffbe758dbb vfs: Implement a filesystem superblock creation/configuration context
f51a8fa449 vfs: Implement parameter value retrieval with fsinfo()
+----------------------------------------------+------------+------------+------------+
| | ca93a22ee4 | ffbe758dbb | f51a8fa449 |
+----------------------------------------------+------------+------------+------------+
| boot_successes | 0 | 0 | 0 |
| boot_failures | 48 | 15 | 7 |
| BUG:kernel_hang_in_boot_stage | 48 | | |
| Kernel_panic-not_syncing:Can't_create_rootfs | 0 | 15 | 7 |
+----------------------------------------------+------------+------------+------------+
[ 0.040199] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
[ 0.043451] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
[ 0.046718] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes)
[ 0.050027] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes)
[ 0.052449] smack: Unknown parameter 'source'
[ 0.052456] Kernel panic - not syncing: Can't create rootfs
[ 0.053333] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G T 4.18.0-rc1-00016-gffbe758 #1
[ 0.053333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.053333] Call Trace:
[ 0.053333] ? dump_stack+0x6f/0x9a
[ 0.053333] ? panic+0x1a3/0x319
[ 0.053333] ? refcount_error_report+0x19e/0x19e
[ 0.053333] ? kfree+0x8e/0x112
[ 0.053333] ? mnt_init+0x1eb/0x44a
[ 0.053333] ? set_mphash_entries+0x74/0x74
[ 0.053333] ? kmem_cache_create_usercopy+0x134/0x188
[ 0.053333] ? arch_local_irq_restore+0x7/0x8
[ 0.053333] ? _raw_spin_unlock_irqrestore+0x3a/0x44
[ 0.053333] ? vfs_caches_init+0x136/0x163
[ 0.053333] ? start_kernel+0x731/0x7b6
[ 0.053333] ? thread_stack_cache_init+0x2e/0x2e
[ 0.053333] ? load_ucode_bsp+0x5c/0x223
[ 0.053333] ? secondary_startup_64+0xa5/0xb0
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start f965fa56da6bbacbd54c136b0f2fe95be06c0c4d acb1872577b346bd15ab3a3f8dff780d6cca4b70 --
git bisect good 8d41ea2b3eb1840f293dcf4874e94a24ce775574 # 04:21 G 10 0 2 2 Merge 'dhowells-fs/rxrpc-next' into devel-catchup-201808020237
git bisect bad 3972e7e2b312a183d4a697791042898eb342059c # 04:32 B 0 3 17 0 Merge 'security/next-tpm' into devel-catchup-201808020237
git bisect bad bcd312605681f77d0abdb78db93e47ff73d21e8a # 04:51 B 0 1 26 11 Merge 'wsa/i2c/for-next' into devel-catchup-201808020237
git bisect bad c980dcd3df9359e21773b757a14866f0716e9201 # 05:09 B 0 1 15 0 Merge 'block/for-next' into devel-catchup-201808020237
git bisect bad a93afa539b7915d486b9ab755bff4146109e00f3 # 05:28 B 0 1 18 3 Merge 'dhowells-fs/fsinfo' into devel-catchup-201808020237
git bisect bad 8ff12263067657f83818e5f62a93b56228ab5d4a # 05:44 B 0 5 19 0 ipc: Convert mqueue fs to fs_context
git bisect good cd746cee7b26b831be1a18b2e9ae2860df28b5bd # 06:23 G 10 0 10 12 vfs: Add LSM hooks for the new mount API
git bisect good ca93a22ee4ebc90872e477e51c18b8b86894ed51 # 06:45 G 11 0 11 11 vfs: Separate changing mount flags full remount
git bisect bad 11a7a4a5a38b08e5e8b17ff14685e348db1a69ce # 06:58 B 0 10 24 0 vfs: Remove unused code after filesystem context changes
git bisect bad ffbe758dbbda23606bfe0ad52023e25ebf8465c6 # 07:14 B 0 1 17 2 vfs: Implement a filesystem superblock creation/configuration context
# first bad commit: [ffbe758dbbda23606bfe0ad52023e25ebf8465c6] vfs: Implement a filesystem superblock creation/configuration context
git bisect good ca93a22ee4ebc90872e477e51c18b8b86894ed51 # 08:02 G 30 0 30 45 vfs: Separate changing mount flags full remount
# extra tests with debug options
git bisect bad ffbe758dbbda23606bfe0ad52023e25ebf8465c6 # 08:14 B 0 2 16 0 vfs: Implement a filesystem superblock creation/configuration context
# extra tests on HEAD of linux-devel/devel-catchup-201808020237
git bisect bad f965fa56da6bbacbd54c136b0f2fe95be06c0c4d # 08:19 B 0 35 52 0 0day head guard for 'devel-catchup-201808020237'
# extra tests on tree/branch dhowells-fs/fsinfo
git bisect bad f51a8fa4494826cdf6ad9c8e70c6070288e74700 # 08:31 B 0 2 16 0 vfs: Implement parameter value retrieval with fsinfo()
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 3
- 6
b01b7ac724 BUG: kernel hang in test stage
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/0day-ci/linux/commits/Nicolai-Stange/x86-ftrace-fix-li...
commit b01b7ac724f2b1d55bf444160bdcf1bc69478dcd
Author: Nicolai Stange <nstange(a)suse.de>
AuthorDate: Thu Jul 26 12:40:29 2018 +0200
Commit: 0day robot <lkp(a)intel.com>
CommitDate: Sat Jul 28 04:12:46 2018 +0800
x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
With dynamic ftrace, ftrace patches call sites in a three steps:
1. Put a breakpoint at the to be patched location,
2. update call site and
3. finally remove the breakpoint again.
Note that the breakpoint ftrace_int3_handler() simply makes execution
to skip over the to be patched function.
This patching happens in the following circumstances:
- the global ftrace_trace_function changes and the call sites at
ftrace_call and ftrace_regs_call get patched,
- an ftrace_ops' ->func changes and the call site in its trampoline gets
patched,
- graph tracing gets enabled/disabled and the jump site at
ftrace_graph_call gets patched
- a mcount site gets converted from nop -> call, call -> nop
or call -> call.
The latter case, i.e. a mcount call getting redirected, happens for example
in a transition from trampolined to not trampolined upon a user enabling
function tracing on a live patched function.
The ftrace_int3_handler() simply skipping over the mcount callsite is
problematic here, because it means that a live patched function gets
temporarily reverted to its unpatched original and this breaks live
patching consistency.
Make ftrace_int3_handler not to skip over the fops invocation, but modify
the interrupted control flow to issue a call as needed.
For determining what the proper action actually is, modify
update_ftrace_func() to take an extra argument, func, to be called if the
corresponding breakpoint gets hit. Introduce a new global variable,
trace_update_func_dest and let update_ftrace_func() set it. For the special
case of patching the jmp insn at ftrace_graph_call, set it to zero and make
ftrace_int3_handler() just skip over the insn in this case as before.
Because there's no space left above the int3 handler's iret frame to stash
an extra call's return address in, this can't be mimicked from the
ftrace_int3_handler() itself.
Instead, make ftrace_int3_handler() change the iret frame's %rip slot to
point to the new ftrace_int3_call_trampoline to be executed immediately
after iret.
The original %rip gets communicated to ftrace_int3_call_trampoline which
can then take proper action. Note that ftrace_int3_call_trampoline can
nest, because of NMIs, for example. In order to avoid introducing another
stack, abuse %r11 for passing the original %rip. This is safe, because the
interrupted context is always at a call insn and according to the x86_64
ELF ABI allows %r11 is callee-clobbered. According to the glibc sources,
this is also true for the somewhat special mcount/fentry ABI.
OTOH, a spare register doesn't exist on i686 and thus, this is approach is
limited to x86_64.
For determining the call target address, let ftrace_int3_call_trampoline
compare ftrace_update_func against the interrupted %rip.
If they match, an update_ftrace_func() is currently pending and the
call site is either of ftrace_call, ftrace_regs_call or the call insn
within a fops' trampoline. Jump to the ftrace_update_func_dest location as
set by update_ftrace_func().
If OTOH the interrupted %rip doesn't equal ftrace_update_func, then
it points to an mcount call site. In this case, redirect control flow to
the most generic handler, ftrace_regs_caller, which will then do the right
thing.
Finally, reading ftrace_update_func and ftrace_update_func_dest from
outside of the int3 handler requires some care: inbetween adding and
removing the breakpoints, ftrace invokes run_sync() which basically
issues a couple of IPIs. Because the int3 handler has interrupts disabled,
it orders with run_sync().
To extend that ordering to also include ftrace_int3_call_trampoline, make
ftrace_int3_handler() disable interrupts within the iret frame returning to
it.
Store the original EFLAGS.IF into %r11's MSB which, because it represents
a kernel address, is redundant. Make ftrace_int3_call_trampoline restore
it when done.
Signed-off-by: Nicolai Stange <nstange(a)suse.de>
a9235b544a ring-buffer: Fix typo in comment
b01b7ac724 x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
+-------------------------------------------------+------------+------------+
| | a9235b544a | b01b7ac724 |
+-------------------------------------------------+------------+------------+
| boot_successes | 912 | 275 |
| boot_failures | 0 | 16 |
| BUG:kernel_hang_in_test_stage | 0 | 14 |
| BUG:kernel_reboot-without-warning_in_test_stage | 0 | 2 |
| RIP:ftrace_epilogue | 0 | 1 |
| RIP:memcmp | 0 | 1 |
+-------------------------------------------------+------------+------------+
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 51a3611310a8c98167558ccb2a0eab05b223290c 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect good 6a8f3ca0d2c6717f31a131c9c04198391f8c145f # 18:47 G 92 0 0 0 Merge 'linux-review/Jia-Ju-Bai/media-usb-em28xx-Replace-GFP_ATOMIC-with-GFP_KERNEL-in-em28xx_audio_urb_init/20180801-205256' into devel-hourly-2018080808
git bisect good ca497b0362b1302cefc5b705361d512bf029bcee # 19:54 G 92 0 0 0 Merge 'linux-review/owner-linux-mm-kvack-org/mm-refactor-do_munmap-to-extract-the-common-part/20180728-224013' into devel-hourly-2018080808
git bisect bad c398b308aaf7d462afc142890b27dbce5d0770e9 # 20:31 B 52 2 2 2 Merge 'linux-review/Alexander-Wetzel/Fix-PTK-rekey-freezes-and-cleartext-leaks/20180806-181525' into devel-hourly-2018080808
git bisect bad 25c3a6213ffa35a6d39fdec521258676633fafa2 # 21:18 B 19 1 0 0 Merge 'linux-review/Sandipan-Das/perf-tests-Fix-indexing-when-invoking-subtests/20180728-025144' into devel-hourly-2018080808
git bisect good 992b800d9d2dc156321a03a1c46b53564bbefb33 # 23:52 G 181 0 0 0 Merge 'linux-review/Varsha-Rao/drivers-infiniband-core-Remove-extra-parentheses/20180728-060719' into devel-hourly-2018080808
git bisect good 176dfec0d25aa2c692450ee43af2b5bb2b1857e1 # 00:52 G 183 0 1 1 Merge 'linux-review/Katsuhiro-Suzuki/ASoC-uniphier-add-support-for-multichannel-output/20180728-045147' into devel-hourly-2018080808
git bisect bad 670bcf8d5fb0ed3c40f8d4e707286f45c42efb66 # 01:30 B 41 2 0 0 Merge 'linux-review/Chen-Hu/serial-8250_dw-always-set-baud-rate-in-dw8250_set_termios/20180728-040602' into devel-hourly-2018080808
git bisect good ef4f3d25a6ffb83c0511d6d2a5471e94986747d5 # 03:03 G 183 0 1 1 Merge 'linux-review/Coly-Li/lib-add-crc64-calculation-routines/20180728-044133' into devel-hourly-2018080808
git bisect bad 27436d5ee063e02df63d7db83dc5fc4a167ea593 # 03:47 B 90 1 0 0 Merge 'linux-review/Nicolai-Stange/x86-ftrace-fix-live-patching-vs-tracing-race/20180728-041242' into devel-hourly-2018080808
git bisect bad b01b7ac724f2b1d55bf444160bdcf1bc69478dcd # 04:40 B 98 1 1 1 x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
# first bad commit: [b01b7ac724f2b1d55bf444160bdcf1bc69478dcd] x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
git bisect good a9235b544a0ae95fbd56443bdbd251358c7df4c5 # 08:27 G 908 0 2 2 ring-buffer: Fix typo in comment
# extra tests with debug options
git bisect bad b01b7ac724f2b1d55bf444160bdcf1bc69478dcd # 09:18 B 69 1 0 0 x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
# extra tests on HEAD of linux-devel/devel-hourly-2018080808
git bisect bad 51a3611310a8c98167558ccb2a0eab05b223290c # 09:23 B 42 8 0 0 0day head guard for 'devel-hourly-2018080808'
# extra tests on tree/branch linux-review/Nicolai-Stange/x86-ftrace-fix-live-patching-vs-tracing-race/20180728-041242
git bisect bad b01b7ac724f2b1d55bf444160bdcf1bc69478dcd # 09:32 B 271 36 0 3 x86/ftrace: make ftrace_int3_handler() not to skip fops invocation
# extra tests with first bad commit reverted
git bisect good 20cf0b448f1968e8bb30d403ff5833b7ccaffb65 # 10:32 G 302 0 1 1 Revert "x86/ftrace: make ftrace_int3_handler() not to skip fops invocation"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
3ef9e3d575 BUG: kernel hang in early-boot stage, last printk: early console in setup code
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
git://anongit.freedesktop.org/drm/drm-intel topic/core-for-CI
commit 3ef9e3d575a2b725e5783fd57192ceb573359a33
Author: Daniel Vetter <daniel.vetter(a)ffwll.ch>
AuthorDate: Tue Mar 20 17:02:58 2018 +0100
Commit: Chris Wilson <chris(a)chris-wilson.co.uk>
CommitDate: Mon Jul 23 09:30:11 2018 +0100
RFC: debugobjects: capture stack traces at _init() time
Sometimes it's really easy to know which object has gone boom and
where the offending code is, and sometimes it's really hard. One case
we're trying to hunt down is when module unload catches a live debug
object, with a module with lots of them.
Capture a full stack trace from debug_object_init() and dump it when
there's a problem.
FIXME: Should we have a separate Kconfig knob for the backtraces,
they're quite expensive? Atm I'm just selecting it for the general
debug object stuff.
v2: Drop the locks for gathering&storing the backtrace. This is
required because depot_save_stack can call free_pages (to drop it's
preallocation), which can call debug_check_no_obj_freed, which will
recurse into the db->lock spinlocks.
Cc: Philippe Ombredanne <pombredanne(a)nexb.com>
Cc: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Cc: Thomas Gleixner <tglx(a)linutronix.de>
Cc: Kate Stewart <kstewart(a)linuxfoundation.org>
Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch>
Cc: Waiman Long <longman(a)redhat.com>
Acked-by-for-CI-testing: Chris Wilson <chris(a)chris-wilson.co.uk>
Signed-off-by: Daniel Vetter <daniel.vetter(a)intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20180320160258.11381-1-dani...
7d054ef1e0 kernel/panic: Repeat the line and caller information at the end of the OOPS
3ef9e3d575 RFC: debugobjects: capture stack traces at _init() time
e0b3053545 usb/icl: Work around ACPI boottime crash
+-----------------------------------------------------------------------------+------------+------------+------------+
| | 7d054ef1e0 | 3ef9e3d575 | e0b3053545 |
+-----------------------------------------------------------------------------+------------+------------+------------+
| boot_successes | 29 | 0 | 0 |
| boot_failures | 4 | 15 | 17 |
| invoked_oom-killer:gfp_mask=0x | 4 | | |
| Mem-Info | 4 | | |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 4 | | |
| BUG:kernel_hang_in_early-boot_stage,last_printk:early_console_in_setup_code | 0 | 15 | 17 |
+-----------------------------------------------------------------------------+------------+------------+------------+
early console in setup code
BUG: kernel hang in early-boot stage, last printk: early console in setup code
Linux version 4.18.0-rc6-00007-g3ef9e3d #1
Command line: root=/dev/ram0 hung_task_panic=1 debug apic=debug sysrq_always_enabled rcupdate.rcu_cpu_stall_timeout=100 net.ifnames=0 printk.devkmsg=on panic=-1 softlockup_panic=1 nmi_watchdog=panic oops=panic load_ramdisk=2 prompt_ramdisk=0 drbd.minor_count=8 systemd.log_level=err ignore_loglevel console=tty0 earlyprintk=ttyS0,115200 console=ttyS0,115200 vga=normal rw link=/cephfs/kbuild/run-queue/quantal-ivb41/x86_64-randconfig-s1-08090217/linux-devel:devel-spot-201808090119:3ef9e3d575a2b725e5783fd57192ceb573359a33:bisect-linux-21/.vmlinuz-3ef9e3d575a2b725e5783fd57192ceb573359a33-20180809075155-1:quantal-ivb41-104 branch=linux-devel/devel-spot-201808090119 BOOT_IMAGE=/pkg/linux/x86_64-randconfig-s1-08090217/gcc-6/3ef9e3d575a2b725e5783fd57192ceb573359a33/vmlinuz-4.18.0-rc6-00007-g3ef9e3d drbd.minor_count=8 rcuperf.shutdown=0
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 2422d5c839d525251615548647f5e4e399c4f144 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect good 9f2962179b8abb0977ee60467599460d5031aa1d # 03:28 G 11 0 2 6 Merge 'linux-review/Krzysztof-Kozlowski/extcon-maxim-Add-SPDX-license-identifiers/20180808-150748' into devel-spot-201808090119
git bisect bad eb8dade73f568c8e24e2419362ddf86decc222df # 03:41 B 0 7 22 0 Merge 'linux-review/Kees-Cook/drbd-Convert-from-ahash-to-shash/20180808-063807' into devel-spot-201808090119
git bisect bad 197a308e17cf8741ce014798cd7ffde02a769a5f # 03:56 B 0 11 26 0 Merge 'linux-review/Krzysztof-Kozlowski/regulator-maxim-Add-SPDX-license-identifiers/20180808-123040' into devel-spot-201808090119
git bisect bad f7c06970eb85052f32a8f73dbe3d59a70921b770 # 04:14 B 0 7 22 0 Merge 'jpirko-mlxsw/combined_queue' into devel-spot-201808090119
git bisect bad b141d493d94d86c5370befdff59582c42d6df702 # 04:33 B 0 11 26 0 Merge 'intel-gvt-linux/gvt-staging' into devel-spot-201808090119
git bisect bad 94114db68e86b18b6ec994e3ee0c5129c68fe81d # 04:51 B 0 11 26 0 Merge 'gvt-linux/gvt-staging' into devel-spot-201808090119
git bisect good 539c475dadc430bd0f1601902fcacc1e55ffe85a # 05:10 G 10 0 0 2 Merge tag 'drm-intel-next-2018-07-09' of git://anongit.freedesktop.org/drm/drm-intel into drm-next
git bisect good f8f15c34ac94563eb169ce95e97c200a00c15c35 # 05:26 G 11 0 2 2 Merge tag 'drm-msm-next-2018-07-30' of git://people.freedesktop.org/~robclark/linux into drm-next
git bisect good 4f8c6f47b1c8a128104bf0b46a7e1ad905318df1 # 05:41 G 11 0 0 0 Merge remote-tracking branch 'drm-intel/drm-intel-next-queued' into drm-tip
git bisect good d63f33d3f083bdb3a7c2dfd623f4d811b2a8d772 # 05:55 G 11 0 1 1 ALSA: ad1816a: Fix sparse warning wrt PCM format type
git bisect good 04702e8d0092832eaeeacc6b1bfbf81a66f242c9 # 06:09 G 11 0 0 0 ALSA: seq: Use no intrruptible mutex_lock
git bisect good ae2e66cfc50b11a3d04ecbf77b3658e366421cad # 06:26 G 11 0 1 1 Merge remote-tracking branch 'tiwai-sound/for-next' into drm-tip
git bisect bad cf4f0ad8aac757e06f83b2bf1346d7d4748895d6 # 06:42 B 0 9 24 0 drm-tip: 2018y-08m-08d-07h-12m-19s UTC integration manifest
git bisect good 7d054ef1e0a7fae2054fd180ecffda65ee00ea7c # 06:55 G 11 0 0 2 kernel/panic: Repeat the line and caller information at the end of the OOPS
git bisect bad b8ae14c73ea5731acb427dd6ca44dd3b5c5b4dd2 # 07:09 B 0 2 17 0 RFT mm/oomkill: Don't skip the reaper
git bisect bad deb10f1a3499020497288fd4e2d3ed5b14db606e # 07:39 B 0 11 26 0 net/sch_generic: Shut up noise
git bisect bad 3ef9e3d575a2b725e5783fd57192ceb573359a33 # 07:58 B 0 10 25 0 RFC: debugobjects: capture stack traces at _init() time
# first bad commit: [3ef9e3d575a2b725e5783fd57192ceb573359a33] RFC: debugobjects: capture stack traces at _init() time
git bisect good 7d054ef1e0a7fae2054fd180ecffda65ee00ea7c # 08:05 G 31 0 2 6 kernel/panic: Repeat the line and caller information at the end of the OOPS
# extra tests with debug options
git bisect bad 3ef9e3d575a2b725e5783fd57192ceb573359a33 # 08:20 B 0 11 26 0 RFC: debugobjects: capture stack traces at _init() time
# extra tests on HEAD of linux-devel/devel-spot-201808090119
git bisect bad 2422d5c839d525251615548647f5e4e399c4f144 # 08:20 B 0 13 31 0 0day head guard for 'devel-spot-201808090119'
# extra tests on tree/branch drm-drm-intel/topic/core-for-CI
git bisect bad e0b3053545ea38e20cc85537ba2840780fc63a68 # 08:37 B 0 4 19 0 usb/icl: Work around ACPI boottime crash
# extra tests with first bad commit reverted
git bisect good be53e12bfc12f364b9634d0141cbeeb10b8ff2d8 # 09:02 G 11 0 0 0 Revert "RFC: debugobjects: capture stack traces at _init() time"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 1
- 0
30514effc9 ("x86/mm/pti: Don't clear permissions in .."): WARNING: CPU: 0 PID: 1 at arch/x86/mm/dump_pagetables.c:283 note_page
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86/pti
commit 30514effc9206d4e084ec32239ae221db157d43a
Author: Joerg Roedel <jroedel(a)suse.de>
AuthorDate: Tue Aug 7 12:24:30 2018 +0200
Commit: Thomas Gleixner <tglx(a)linutronix.de>
CommitDate: Tue Aug 7 23:36:02 2018 +0200
x86/mm/pti: Don't clear permissions in pti_clone_pmd()
The function sets the global-bit on cloned PMD entries, which only makes
sense when the permissions are identical between the user and the kernel
page-table. Further, only write-permissions are cleared for entry-text and
kernel-text sections, which are not writeable at the end of the boot
process.
The reason why this RW clearing exists is that in the early PTI
implementations the cloned kernel areas were set up during early boot
before the kernel text is set to read only and not touched afterwards.
This is not longer true. The cloned areas are still set up early to get the
entry code working for interrupts and other things, but after the kernel
text has been set RO the clone is repeated which copies the RO PMD/PTEs
over to the user visible clone. That means the initial clearing of the
writable bit can be avoided.
[ tglx: Amended changelog ]
Signed-off-by: Joerg Roedel <jroedel(a)suse.de>
Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de>
Acked-by: Dave Hansen <dave.hansen(a)intel.com>
Cc: "H . Peter Anvin" <hpa(a)zytor.com>
Cc: linux-mm(a)kvack.org
Cc: Linus Torvalds <torvalds(a)linux-foundation.org>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: Josh Poimboeuf <jpoimboe(a)redhat.com>
Cc: Juergen Gross <jgross(a)suse.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Borislav Petkov <bp(a)alien8.de>
Cc: Jiri Kosina <jkosina(a)suse.cz>
Cc: Boris Ostrovsky <boris.ostrovsky(a)oracle.com>
Cc: Brian Gerst <brgerst(a)gmail.com>
Cc: David Laight <David.Laight(a)aculab.com>
Cc: Denys Vlasenko <dvlasenk(a)redhat.com>
Cc: Eduardo Valentin <eduval(a)amazon.com>
Cc: Greg KH <gregkh(a)linuxfoundation.org>
Cc: Will Deacon <will.deacon(a)arm.com>
Cc: aliguori(a)amazon.com
Cc: daniel.gruss(a)iaik.tugraz.at
Cc: hughd(a)google.com
Cc: keescook(a)google.com
Cc: Andrea Arcangeli <aarcange(a)redhat.com>
Cc: Waiman Long <llong(a)redhat.com>
Cc: Pavel Machek <pavel(a)ucw.cz>
Cc: "David H . Gutteridge" <dhgutteridge(a)sympatico.ca>
Cc: joro(a)8bytes.org
Link: https://lkml.kernel.org/r/1533637471-30953-3-git-send-email-joro@8bytes.org
88c6f8a397 x86/mm/pti: Fix 32 bit PCID check
30514effc9 x86/mm/pti: Don't clear permissions in pti_clone_pmd()
16a3fe634f x86/mm/pti: Clone kernel-image on PTE level for 32 bit
5d09a26943 Merge branch 'x86/urgent'
+-----------------------------------------------------+------------+------------+------------+------------+
| | 88c6f8a397 | 30514effc9 | 16a3fe634f | 5d09a26943 |
+-----------------------------------------------------+------------+------------+------------+------------+
| boot_successes | 35 | 0 | 0 | 0 |
| boot_failures | 0 | 15 | 13 | 11 |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 0 | 15 | 13 | 11 |
| RIP:note_page | 0 | 15 | 13 | 11 |
+-----------------------------------------------------+------------+------------+------------+------------+
[ 16.937839] Freeing unused kernel image memory: 556K
[ 16.954368] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 16.956696] x86/mm: Checking user space page tables
[ 16.973108] ------------[ cut here ]------------
[ 16.975052] x86/mm: Found insecure W+X mapping at address (____ptrval____)/native_usergs_sysret64+0x0/0x10
[ 16.978787] WARNING: CPU: 0 PID: 1 at arch/x86/mm/dump_pagetables.c:283 note_page+0xdd/0x890
[ 16.982965] CPU: 0 PID: 1 Comm: swapper Tainted: G T 4.18.0-rc8-00058-g30514eff #1
[ 16.986506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 16.989935] RIP: 0010:note_page+0xdd/0x890
[ 16.991679] Code: 74 f4 4d 85 c9 78 ef 80 3d 95 ec 20 02 00 48 8b 76 18 75 1c 48 89 f2 48 c7 c7 18 49 d3 84 c6 05 7e ec 20 02 01 e8 33 b9 06 00 <0f> 0b 48 8b 73 18 4c 8b 4b 20 4c 89 c8 48 29 f0 48 c1 e8 0c 48 01
[ 16.998255] RSP: 0000:ffff88001f457e08 EFLAGS: 00010282
[ 17.000269] RAX: 0000000000000000 RBX: ffff88001f457ec8 RCX: 0000000000000000
[ 17.002692] RDX: ffff88001f450040 RSI: 0000000000000001 RDI: 0000000000000246
[ 17.005129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 17.007555] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 17.009980] R13: 0000000000000004 R14: 0000000000000000 R15: ffff88001f457ec8
[ 17.012399] FS: 0000000000000000(0000) GS:ffffffff85087000(0000) knlGS:0000000000000000
[ 17.015931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 17.018052] CR2: 0000000000000000 CR3: 000000000cc62001 CR4: 00000000001606f0
[ 17.020485] Call Trace:
[ 17.021888] ptdump_walk_pgd_level_core+0x3e7/0x510
[ 17.023814] ? __kprobes_text_end+0x76488/0x76488
[ 17.025713] ? __irqentry_text_end+0x1fe4ee/0x1fe4ee
[ 17.027666] ? rest_init+0xa0/0xa0
[ 17.029876] kernel_init+0x27/0xf0
[ 17.031488] ret_from_fork+0x3a/0x50
[ 17.033135] irq event stamp: 9170668
[ 17.034781] hardirqs last enabled at (9170667): [<ffffffff831061d1>] console_unlock+0x451/0x4e0
[ 17.038310] hardirqs last disabled at (9170668): [<ffffffff844011b9>] error_entry+0x89/0x110
[ 17.041745] softirqs last enabled at (9170648): [<ffffffff84600214>] __do_softirq+0x214/0x254
[ 17.045231] softirqs last disabled at (9170631): [<ffffffff830bcfb1>] irq_exit+0x61/0xc0
[ 17.050776] ---[ end trace e678f3f9b7a7f5ff ]---
[ 17.054226] x86/mm: Checked W+X mappings: FAILED, 512 W+X pages found.
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 59f242421e6bc986692795d8b1d0289ec0ded657 1ffaddd029c867d134a1dde39f540dcc8c52e274 --
git bisect bad 49b82b310744d2f1e0e0c7c1783f025b1f925dd9 # 13:38 B 0 7 21 0 Merge 'perf/perf/core' into devel-catchup-201808081129
git bisect good 93fac2021c2785544dc3a400401df7cda0ffaf3f # 13:49 G 11 0 0 0 Merge 'bluetooth-next/master' into devel-catchup-201808081129
git bisect bad 49f5b4024f21f256aecd546ee8258e792088fb96 # 13:59 B 0 5 19 0 Merge 'tip/x86/pti' into devel-catchup-201808081129
git bisect good 5d27748d8731b478e3148ea1f3d5564f9eeaa4a8 # 14:14 G 11 0 0 0 Merge 'vfio/next' into devel-catchup-201808081129
git bisect good ff829964a0914aece6b461a1fc9b97bc68663d72 # 14:34 G 11 0 0 0 Merge 'tip/x86/urgent' into devel-catchup-201808081129
git bisect good 1ac228a7c87f697d1d01eb6362a6b5246705b0dd # 14:45 G 11 0 0 0 x86/mm/pti: Keep permissions when cloning kernel text in pti_clone_kernel_text()
git bisect good d5e84c21dbf5ea458897f88346dc979909eed913 # 14:58 G 11 0 0 0 x86/entry/32: Check for VM86 mode in slow-path check
git bisect good 706d51681d636a0c4a5ef53395ec3b803e45ed4d # 15:11 G 10 0 1 1 x86/speculation: Support Enhanced IBRS on future CPUs
git bisect good c40a56a7818cfe735fc93a69e1875f8bba834483 # 15:23 G 11 0 0 0 x86/mm/init: Remove freed kernel image areas from alias mapping
git bisect good 88c6f8a3977cc35997b47e2f99f080a15559c1eb # 15:41 G 11 0 0 0 x86/mm/pti: Fix 32 bit PCID check
git bisect bad 16a3fe634f6a568c6234b8747e5d50487fed3526 # 15:56 B 0 5 20 1 x86/mm/pti: Clone kernel-image on PTE level for 32 bit
git bisect bad 30514effc9206d4e084ec32239ae221db157d43a # 16:11 B 0 11 25 0 x86/mm/pti: Don't clear permissions in pti_clone_pmd()
# first bad commit: [30514effc9206d4e084ec32239ae221db157d43a] x86/mm/pti: Don't clear permissions in pti_clone_pmd()
git bisect good 88c6f8a3977cc35997b47e2f99f080a15559c1eb # 16:13 G 31 0 0 0 x86/mm/pti: Fix 32 bit PCID check
# extra tests with debug options
git bisect bad 30514effc9206d4e084ec32239ae221db157d43a # 16:55 B 0 1 15 0 x86/mm/pti: Don't clear permissions in pti_clone_pmd()
# extra tests on HEAD of linux-devel/devel-catchup-201808081129
git bisect bad 59f242421e6bc986692795d8b1d0289ec0ded657 # 17:01 B 0 365 382 0 0day head guard for 'devel-catchup-201808081129'
# extra tests on tree/branch tip/x86/pti
git bisect bad 16a3fe634f6a568c6234b8747e5d50487fed3526 # 17:03 B 0 11 25 0 x86/mm/pti: Clone kernel-image on PTE level for 32 bit
# extra tests on tree/branch tip/master
git bisect bad 5d09a2694308dff4b0bc9b550b7906b11dc9da91 # 17:21 B 0 4 18 0 Merge branch 'x86/urgent'
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years
- 2
- 1