Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/0day-ci/linux/commits/Amir-Goldstein/Sort-out-fsnotify...
commit ae1cf04e2249dbf0d35acc873068d66f9f9b6027
Author: Amir Goldstein <amir73il(a)gmail.com>
AuthorDate: Thu May 16 13:26:33 2019 +0300
Commit: 0day robot <lkp(a)intel.com>
CommitDate: Fri May 17 00:30:16 2019 +0800
fs: convert debugfs to use simple_remove() helper
This will allow generating fsnotify delete events after the
fsnotify_nameremove() hook is removed from d_delete().
Cc: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Signed-off-by: Amir Goldstein <amir73il(a)gmail.com>
131d233d5c fs: convert qibfs/ipathfs to use simple_remove() helper
ae1cf04e22 fs: convert debugfs to use simple_remove() helper
e647f49c69 fsnotify: get rid of fsnotify_nameremove()
+-----------------------------------------------------------+------------+------------+------------+
| | 131d233d5c | ae1cf04e22 |
e647f49c69 |
+-----------------------------------------------------------+------------+------------+------------+
| boot_successes | 481 | 138 |
191 |
| boot_failures | 263 | 95 | 77
|
| Kernel_panic-not_syncing:Attempted_to_kill_init!exitcode= | 247 | 80 | 55
|
| BUG:kernel_hang_in_boot_stage | 5 | 0 | 3
|
| BUG:kernel_timeout_in_boot_stage | 9 | 2 | 8
|
| invoked_oom-killer:gfp_mask=0x | 2 | 1 |
|
| Mem-Info | 2 | 1 |
|
| Out_of_memory_and_no_killable_processes | 0 | 1 |
|
| Kernel_panic-not_syncing:System_is_deadlocked_on_memory | 0 | 1 |
|
| BUG:KASAN:use-after-free_in__debugfs_remove | 0 | 12 | 9
|
| BUG:kernel_reboot-without-warning_in_test_stage | 0 | 0 | 2
|
+-----------------------------------------------------------+------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <lkp(a)intel.com>
[ 71.541528] ide-gd driver 1.18
[ 71.556178] ide-cd driver 5.00
[ 71.587443] ide-cd: hdc: ATAPI 4X DVD-ROM drive, 512kB Cache
[ 71.600962] cdrom: Uniform CD-ROM driver Revision: 3.20
[ 71.667440] ==================================================================
[ 71.667657] BUG: KASAN: use-after-free in __debugfs_remove+0x6c/0x100
[ 71.667657] Read of size 4 at addr ffff888013ad1548 by task swapper/1
[ 71.667657]
[ 71.667657] CPU: 0 PID: 1 Comm: swapper Not tainted 5.1.0-11167-gae1cf04 #1
[ 71.667657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1
04/01/2014
[ 71.667657] Call Trace:
[ 71.667657] dump_stack+0x2a/0x3a
[ 71.667657] print_address_description+0xbe/0x5a0
[ 71.667657] ? __debugfs_remove+0x6c/0x100
[ 71.667657] __kasan_report+0x17d/0x26a
[ 71.667657] ? dput+0x300/0x610
[ 71.667657] ? __debugfs_remove+0x6c/0x100
[ 71.667657] kasan_report+0x1e/0x40
[ 71.667657] __asan_load4+0x70/0xf0
[ 71.667657] __debugfs_remove+0x6c/0x100
[ 71.667657] debugfs_remove+0xbc/0x130
[ 71.667657] bdi_unregister+0x163/0x310
[ 71.667657] del_gendisk+0x480/0x510
[ 71.667657] ide_cd_remove+0x4b/0x90
[ 71.667657] generic_ide_remove+0x4b/0x60
[ 71.667657] really_probe+0x1f4/0xa10
[ 71.667657] driver_probe_device+0x178/0x230
[ 71.667657] device_driver_attach+0x9f/0xb0
[ 71.667657] __driver_attach+0x13f/0x2d0
[ 71.667657] ? device_driver_attach+0xb0/0xb0
[ 71.667657] bus_for_each_dev+0xbd/0x130
[ 71.667657] ? klist_node_init+0x73/0xa0
[ 71.667657] driver_attach+0x2f/0x40
[ 71.667657] bus_add_driver+0x317/0x4c0
[ 71.667657] driver_register+0x102/0x250
[ 71.667657] ? ide_gd_init+0x35/0x35
[ 71.667657] ide_cdrom_init+0x2d/0x35
[ 71.667657] do_one_initcall+0xa8/0x450
[ 71.667657] ? ftrace_likely_update+0x5a/0x3d0
[ 71.667657] kernel_init_freeable+0x43d/0x539
[ 71.667657] ? rest_init+0x120/0x120
[ 71.667657] kernel_init+0x17/0x210
[ 71.667657] ? rest_init+0x120/0x120
[ 71.667657] ret_from_fork+0x24/0x30
[ 71.667657]
[ 71.667657] Allocated by task 1:
[ 71.667657] __kasan_kmalloc+0x116/0x1d0
[ 71.667657] kasan_slab_alloc+0x18/0x30
[ 71.667657] kmem_cache_alloc+0x20e/0x3c0
[ 71.667657] __d_alloc+0x2e/0x400
[ 71.667657] d_alloc+0x30/0xf0
[ 71.667657] d_alloc_parallel+0x68/0xbf0
[ 71.667657] __lookup_slow+0xa6/0x370
[ 71.667657] lookup_one_len+0x135/0x140
[ 71.667657] start_creating+0x110/0x2b0
[ 71.667657] debugfs_create_dir+0x18/0x270
[ 71.667657] bdi_register_va+0x14f/0x3d0
[ 71.667657] bdi_register+0x47/0x60
[ 71.667657] bdi_register_owner+0x49/0x110
[ 71.667657] __device_add_disk+0x709/0xbe0
[ 71.667657] device_add_disk+0x17/0x20
[ 71.667657] ide_cd_probe+0x5c5/0xda0
[ 71.667657] generic_ide_probe+0x4b/0x60
[ 71.667657] really_probe+0x1aa/0xa10
[ 71.667657] driver_probe_device+0x178/0x230
[ 71.667657] device_driver_attach+0x9f/0xb0
[ 71.667657] __driver_attach+0x13f/0x2d0
[ 71.667657] bus_for_each_dev+0xbd/0x130
[ 71.667657] driver_attach+0x2f/0x40
[ 71.667657] bus_add_driver+0x317/0x4c0
[ 71.667657] driver_register+0x102/0x250
[ 71.667657] ide_cdrom_init+0x2d/0x35
[ 71.667657] do_one_initcall+0xa8/0x450
[ 71.667657] kernel_init_freeable+0x43d/0x539
[ 71.667657] kernel_init+0x17/0x210
[ 71.667657] ret_from_fork+0x24/0x30
[ 71.667657]
[ 71.667657] Freed by task 7:
[ 71.667657] __kasan_slab_free+0x26c/0x380
[ 71.667657] kasan_slab_free+0x12/0x20
[ 71.667657] kmem_cache_free+0xf5/0x460
[ 71.667657] __d_free+0x20/0x30
[ 71.667657] rcu_process_callbacks+0x268/0x4b0
[ 71.667657] __do_softirq+0x162/0x6da
[ 71.667657]
[ 71.667657] The buggy address belongs to the object at ffff888013ad1548
[ 71.667657] which belongs to the cache dentry of size 192
[ 71.667657] The buggy address is located 0 bytes inside of
[ 71.667657] 192-byte region [ffff888013ad1548, ffff888013ad1608)
# HH:MM RESULT GOOD BAD
GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start db1856bd7fc3fdc394c97d2c6b66e2100942d511
e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd --
git bisect good a030f8854b146fbca391d71aa161a734e78a4d70 # 12:17 G 152 0 50 50
Merge 'ebiggers/wip-fscrypt-subpage-blocks-prep' into devel-hourly-2019051903
git bisect good ff2f89b166e2fb91912bd7e94c8f84f758ddeeb2 # 12:34 G 151 0 48 48
Merge 'masahiroy/kbuild' into devel-hourly-2019051903
git bisect bad 8b11397d9cc65c7e18376a75b7d9089b519061c3 # 12:47 B 37 1 12 12
Merge
'linux-review/YueHaibing/clk-ti-Remove-unused-function-ti_clk_build_component_gate/20190514-033011'
into devel-hourly-2019051903
git bisect good c5ab329dc2300fca06a65960642b54b70f11e3b6 # 13:21 G 259 0 99 99
Merge
'linux-review/David-Howells/vfs-Move-kernel_read_file-to-fs-read_write-c/20190517-004742'
into devel-hourly-2019051903
git bisect good cdab060cdbb4325d6fd79b5588f05b4b7b54a8f5 # 13:46 G 252 0 79 79
Merge 'jpoimboe/objtool-host-ar' into devel-hourly-2019051903
git bisect good cd2e79f9d6d9f0d9d675e954e98ac18a63bdc8fa # 14:09 G 251 0 117 117
Merge
'linux-review/Michael-Schmitz/resolve-module-name-conflict-for-asix-PHY-and-USB-modules/20190518-143219'
into devel-hourly-2019051903
git bisect good 4253dd348a29e589578eef56c0825f100dec03dc # 14:44 G 256 0 73 73
Merge
'linux-review/Stanley-Chu/scsi-ufs-add-error-handlings-of-auto-hibern8/20190514-005613'
into devel-hourly-2019051903
git bisect good ff184a3de6f1b1a65b8fdb266ed1db6c2338be3d # 15:25 G 251 0 102 102
Merge 'mvebu/mvebu/dt64' into devel-hourly-2019051903
git bisect bad f20ac16baadd40073bbb9ae016c1739747eaa309 # 15:45 B 1 1 1 1
Merge
'linux-review/Amir-Goldstein/Sort-out-fsnotify_nameremove-mess/20190517-003011'
into devel-hourly-2019051903
git bisect bad 509d1fb892c651b9507014ade18beda0769d586e # 16:13 B 53 1 9 9
fs: convert tracefs to use simple_remove() helper
git bisect good 0a4548c9929ad8fffa4f4a412457f8a05298e6a9 # 16:50 G 252 0 80 80
fsnotify: add empty fsnotify_{unlink,rmdir}() hooks
git bisect good 131d233d5c36c97c4c78a1f8f268ff0643d7c8fa # 17:31 G 259 0 102 102
fs: convert qibfs/ipathfs to use simple_remove() helper
git bisect bad ae1cf04e2249dbf0d35acc873068d66f9f9b6027 # 17:57 B 33 1 8 8
fs: convert debugfs to use simple_remove() helper
# first bad commit: [ae1cf04e2249dbf0d35acc873068d66f9f9b6027] fs: convert debugfs to use
simple_remove() helper
git bisect good 131d233d5c36c97c4c78a1f8f268ff0643d7c8fa # 18:31 G 757 0 279 381
fs: convert qibfs/ipathfs to use simple_remove() helper
# extra tests with debug options
git bisect bad ae1cf04e2249dbf0d35acc873068d66f9f9b6027 # 18:55 B 47 1 17 17
fs: convert debugfs to use simple_remove() helper
# extra tests on HEAD of linux-devel/devel-hourly-2019051903
git bisect bad db1856bd7fc3fdc394c97d2c6b66e2100942d511 # 19:00 B 41 2 0 16
0day head guard for 'devel-hourly-2019051903'
# extra tests on tree/branch
linux-review/Amir-Goldstein/Sort-out-fsnotify_nameremove-mess/20190517-003011
git bisect bad e647f49c69ecca8eff50ba1998927dd6ebe9cf66 # 19:34 B 4 1 0 0
fsnotify: get rid of fsnotify_nameremove()
# extra tests with first bad commit reverted
git bisect good e85b529d0fad2129941ea78fd68f6f24575a2b81 # 20:37 G 300 0 110 110
Revert "fs: convert debugfs to use simple_remove() helper"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation