FYI, we noticed the following commit:
commit: 9820795796278bc66baa3f41220f8524cbdda537 ("PM / QOS: Add
'performance' request")
https://git.linaro.org/people/vireshk/linux opp/genpd-performance-state
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url:
http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -m 512M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------+------------+------------+
| | 65e83681e6 | 9820795796 |
+------------------------------------------+------------+------------+
| boot_successes | 0 | 0 |
| boot_failures | 6 | 6 |
| Kernel_panic-not_syncing:Fatal_exception | 6 | 6 |
| kernel_BUG_at_mm/slab.c | 0 | 6 |
+------------------------------------------+------------+------------+
[ 13.961126] kernel BUG at mm/slab.c:2815!
[ 13.962800] invalid opcode: 0000 [#1]
[ 13.963966] CPU: 0 PID: 1 Comm: swapper Not tainted 4.10.0-rc7-00115-g9820795 #1
[ 13.966194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1.9.3-20161025_171302-gandalf 04/01/2014
[ 13.969050] task: ffff88001f464040 task.stack: ffff88001f468000
[ 13.970725] RIP: 0010:___cache_free+0x157/0x2c9
[ 13.972083] RSP: 0000:ffff88001f46b640 EFLAGS: 00010002
[ 13.973598] RAX: 0000000000000400 RBX: ffff88001f400600 RCX: 0000000000000008
[ 13.975512] RDX: 000000000000024c RSI: ffff88001c37f000 RDI: ffff88001f400600
[ 13.977434] RBP: ffff88001f46b688 R08: ffff88001c37f400 R09: c1cff5f04a80d1ea
[ 13.979343] R10: 0000000000000000 R11: ffff88001f4647d8 R12: ffff88001c37f498
[ 13.981276] R13: ffff88001ffd2608 R14: ffff88001c366bb0 R15: ffff88001c37f000
[ 13.983208] FS: 0000000000000000(0000) GS:ffffffff8203b000(0000)
knlGS:0000000000000000
[ 13.985600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 13.987236] CR2: 0000000000000000 CR3: 0000000002017000 CR4: 00000000000006f0
[ 13.989170] Call Trace:
[ 13.990090] ? dev_pm_qos_constraints_destroy+0x19d/0x1c8
[ 13.991656] ? debug_check_no_locks_freed+0x114/0x147
[ 13.993132] kfree+0x53/0x7d
[ 13.994140] dev_pm_qos_constraints_destroy+0x19d/0x1c8
[ 13.995668] dpm_sysfs_remove+0x25/0x50
[ 13.996890] device_del+0xf6/0x2b1
[ 13.998013] ? mark_held_locks+0x57/0x76
[ 13.999241] device_unregister+0x35/0x4d
[ 14.000493] usb_hub_remove_port_device+0xdd/0xe6
[ 14.001892] hub_disconnect+0x88/0xf7
[ 14.003065] usb_unbind_interface+0x82/0x1cb
[ 14.004361] ? usb_probe_interface+0x1d7/0x22c
[ 14.005723] driver_probe_device+0x1d4/0x45f
[ 14.007044] __device_attach_driver+0x90/0xd0
[ 14.008371] ? driver_allows_async_probing+0xd/0xd
[ 14.009799] bus_for_each_drv+0x52/0x87
[ 14.011006] __device_attach+0x8e/0x10c
[ 14.012218] device_initial_probe+0xe/0x10
[ 14.013507] bus_probe_device+0x2e/0x99
[ 14.014713] device_add+0x3aa/0x55d
[ 14.015845] usb_set_configuration+0x641/0x6bb
[ 14.017199] ? lock_release+0x2ee/0x32c
[ 14.018430] generic_probe+0x3e/0x6e
[ 14.019586] usb_probe_device+0x29/0x5d
[ 14.020796] driver_probe_device+0x192/0x45f
[ 14.022109] __device_attach_driver+0x90/0xd0
[ 14.023451] ? driver_allows_async_probing+0xd/0xd
[ 14.024866] bus_for_each_drv+0x52/0x87
[ 14.026079] __device_attach+0x8e/0x10c
[ 14.027301] device_initial_probe+0xe/0x10
[ 14.028592] bus_probe_device+0x2e/0x99
[ 14.029808] device_add+0x3aa/0x55d
[ 14.030952] usb_new_device+0x400/0x588
[ 14.032164] usb_add_hcd+0x598/0x865
[ 14.033323] dummy_hcd_probe+0x8b/0x11e
[ 14.034551] platform_drv_probe+0x35/0x78
[ 14.035798] driver_probe_device+0x192/0x45f
[ 14.037107] __device_attach_driver+0x90/0xd0
[ 14.038442] ? driver_allows_async_probing+0xd/0xd
[ 14.039863] bus_for_each_drv+0x52/0x87
[ 14.041079] __device_attach+0x8e/0x10c
[ 14.042290] device_initial_probe+0xe/0x10
[ 14.043586] bus_probe_device+0x2e/0x99
[ 14.044801] device_add+0x3aa/0x55d
[ 14.045947] platform_device_add+0x16c/0x1e4
[ 14.047279] init+0x3ac/0x7c2
[ 14.048313] ? usb_udc_init+0x93/0x93
[ 14.049523] do_one_initcall+0xc3/0x233
[ 14.050734] ? parse_args+0xf4/0x344
[ 14.051889] kernel_init_freeable+0x224/0x355
[ 14.053225] ? rest_init+0x12e/0x12e
[ 14.054377] kernel_init+0x9/0xe6
[ 14.055490] ret_from_fork+0x31/0x40
[ 14.056659] Code: 08 48 8b 45 c0 4c 89 e2 48 89 df 4c 8b 78 08 4c 89 fe e8 57 e3 ff ff
3b 43 24 72 02 0f 0b 0f af 43 14 4d 8d 04 07 4d 39 c4 74 02 <0f> 0b f6 43 21 08 74
10 ba 6b 00 00 00 4c 89 e6 48 89 df e8 18
[ 14.061724] RIP: ___cache_free+0x157/0x2c9 RSP: ffff88001f46b640
[ 14.063417] ---[ end trace 121ac994fe0a62c1 ]---
To reproduce:
git clone
git://git.kernel.org/pub/scm/linux/kernel/git/wfg/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this
email
Thanks,
Xiaolong