FYI, we noticed the following commit:
commit: de54ebbe26bb371a6f1fbc0593372232f04e3107 ("bug: Provide toggle for BUG on
data corruption")
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url:
http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -m 320M
caused below changes:
+-------------------------------------------------------+------------+------------+
| | 0cd340dcb0 | de54ebbe26 |
+-------------------------------------------------------+------------+------------+
| boot_successes | 0 | 0 |
| boot_failures | 28 | 29 |
| calltrace:init | 28 | 29 |
| WARNING:at_lib/list_debug.c:#__list_add_valid | 18 | |
| BUG:key_not_in.data | 28 | 9 |
| WARNING:at_kernel/locking/lockdep.c:#lockdep_init_map | 28 | 9 |
| calltrace:vhci_hcd_init | 28 | 9 |
| kernel_BUG_at_lib/list_debug.c | 0 | 20 |
| invalid_opcode:#[##]PREEMPT_SMP | 0 | 20 |
| RIP:__list_add_valid | 0 | 20 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 20 |
+-------------------------------------------------------+------------+------------+
[ 0.937546] gadget: usb_udc_nop_release
[ 0.937832] kobject (ffff88000f382f58): tried to init an initialized object, something
is seriously wrong.
[ 0.938465] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.9.0-rc1-00004-gde54ebb #1
[ 0.938948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1.9.3-20161025_171302-gandalf 04/01/2014
[ 0.939605] ffffc900000d3b98 ffffffff814352b6 ffff88000f382f58 ffffffff82509c40
[ 0.940115] ffffc900000d3bb8 ffffffff81436fb0 ffff88000f382f48 00000000fffffff4
[ 0.940631] ffffc900000d3bd0 ffffffff815540cd ffff88000f382f48 ffffc900000d3be8
[ 0.941147] Call Trace:
[ 0.941318] [<ffffffff814352b6>] dump_stack+0x61/0x7d
[ 0.941652] [<ffffffff81436fb0>] kobject_init+0x31/0x7f
[ 0.941998] [<ffffffff815540cd>] device_initialize+0x23/0xf9
[ 0.942393] [<ffffffff8155497e>] device_register+0xd/0x18
[ 0.942752] [<ffffffff8171e237>] usb_add_gadget_udc_release+0xb9/0x248
[ 0.943200] [<ffffffff810f2914>] ? check_chain_key+0x81/0xda
[ 0.943580] [<ffffffff8171e43c>] usb_add_gadget_udc+0xb/0xd
[ 0.943953] [<ffffffff817204f9>] dummy_udc_probe+0x194/0x1d6
[ 0.944327] [<ffffffff81558c67>] platform_drv_probe+0x35/0x78
[ 0.944707] [<ffffffff81557a7d>] driver_probe_device+0x11d/0x301
[ 0.945102] [<ffffffff81557d71>] __device_attach_driver+0x80/0x87
[ 0.945504] [<ffffffff81557cf1>] ? driver_allows_async_probing+0xd/0xd
[ 0.945952] [<ffffffff8155651a>] bus_for_each_drv+0x52/0x87
[ 0.946320] [<ffffffff81557857>] __device_attach+0x8e/0xed
[ 0.946695] [<ffffffff81557ea4>] device_initial_probe+0xe/0x10
[ 0.947077] [<ffffffff815566f8>] bus_probe_device+0x2e/0x99
[ 0.947445] [<ffffffff815547e8>] device_add+0x393/0x51c
[ 0.947790] [<ffffffff81559251>] platform_device_add+0x141/0x1a1
[ 0.948184] [<ffffffff82669db3>] init+0x262/0x374
[ 0.948500] [<ffffffff82669ae8>] ? musb_driver_init+0x14/0x14
[ 0.948877] [<ffffffff82669b51>] ? usb_udc_init+0x4b/0x4b
[ 0.949233] [<ffffffff826296fa>] ? do_early_param+0x8f/0x8f
[ 0.949605] [<ffffffff82629fe3>] do_one_initcall+0x8b/0x115
[ 0.949971] [<ffffffff826296fa>] ? do_early_param+0x8f/0x8f
[ 0.950339] [<ffffffff8262a17f>] kernel_init_freeable+0x112/0x1a6
[ 0.950739] [<ffffffff81bffa97>] ? rest_init+0xbe/0xbe
[ 0.951077] [<ffffffff81bffaa0>] kernel_init+0x9/0xf0
[ 0.951412] [<ffffffff81c077a5>] ret_from_fork+0x25/0x30
[ 0.951827] list_add corruption. prev->next should be next (ffff880011568738), but
was ffff880011568860. (prev=ffff880011568860).
[ 0.952586] ------------[ cut here ]------------
[ 0.952888] kernel BUG at lib/list_debug.c:28!
[ 0.953299] invalid opcode: 0000 [#1] PREEMPT SMP
[ 0.953604] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.9.0-rc1-00004-gde54ebb #1
[ 0.954084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1.9.3-20161025_171302-gandalf 04/01/2014
[ 0.954733] task: ffff8800001a0000 task.stack: ffffc900000d0000
[ 0.955113] RIP: 0010:[<ffffffff814571c9>] [<ffffffff814571c9>]
__list_add_valid+0x3e/0x65
[ 0.955660] RSP: 0000:ffffc900000d3b50 EFLAGS: 00010282
[ 0.956002] RAX: 0000000000000075 RBX: ffff880011568860 RCX: 0000000000000000
[ 0.956462] RDX: ffffffff810fa8e9 RSI: 0000000000000001 RDI: 0000000000000246
[ 0.956925] RBP: ffffc900000d3b50 R08: 0000000000000001 R09: 0000000000000000
[ 0.957385] R10: 0000000000000000 R11: ffffffff833c06e7 R12: ffff880011568860
[ 0.957844] R13: ffff880011568738 R14: ffff8800116c9410 R15: 0000000000000000
[ 0.958305] FS: 0000000000000000(0000) GS:ffff880013800000(0000)
knlGS:0000000000000000
[ 0.958822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.959192] CR2: 0000000000000000 CR3: 0000000002414000 CR4: 00000000000006b0
[ 0.959663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.960125] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.960587] Stack:
[ 0.960729] ffffc900000d3b78 ffffffff81bfef7a ffff880011568700 ffff880011568858
[ 0.961240] ffff880011b8b020 ffffc900000d3b98 ffffffff81bff219 ffff880011b8b010
[ 0.961753] 0000000000000000 ffffc900000d3be8 ffffffff815547fe ffff880000357f80
[ 0.962261] Call Trace:
[ 0.962429] [<ffffffff81bfef7a>] __list_add+0x17/0x31
[ 0.962763] [<ffffffff81bff219>] klist_add_tail+0x32/0x3f
[ 0.963119] [<ffffffff815547fe>] device_add+0x3a9/0x51c
[ 0.963466] [<ffffffff8171e2cc>] usb_add_gadget_udc_release+0x14e/0x248
[ 0.963898] [<ffffffff8171e43c>] usb_add_gadget_udc+0xb/0xd
[ 0.964264] [<ffffffff817204f9>] dummy_udc_probe+0x194/0x1d6
[ 0.964637] [<ffffffff81558c67>] platform_drv_probe+0x35/0x78
[ 0.965015] [<ffffffff81557a7d>] driver_probe_device+0x11d/0x301
[ 0.965410] [<ffffffff81557d71>] __device_attach_driver+0x80/0x87
[ 0.965809] [<ffffffff81557cf1>] ? driver_allows_async_probing+0xd/0xd
[ 0.966235] [<ffffffff8155651a>] bus_for_each_drv+0x52/0x87
[ 0.966604] [<ffffffff81557857>] __device_attach+0x8e/0xed
[ 0.966964] [<ffffffff81557ea4>] device_initial_probe+0xe/0x10
[ 0.967348] [<ffffffff815566f8>] bus_probe_device+0x2e/0x99
[ 0.967714] [<ffffffff815547e8>] device_add+0x393/0x51c
[ 0.968058] [<ffffffff81559251>] platform_device_add+0x141/0x1a1
[ 0.968454] [<ffffffff82669db3>] init+0x262/0x374
[ 0.968766] [<ffffffff82669ae8>] ? musb_driver_init+0x14/0x14
[ 0.969143] [<ffffffff82669b51>] ? usb_udc_init+0x4b/0x4b
[ 0.969501] [<ffffffff826296fa>] ? do_early_param+0x8f/0x8f
[ 0.969867] [<ffffffff82629fe3>] do_one_initcall+0x8b/0x115
[ 0.970234] [<ffffffff826296fa>] ? do_early_param+0x8f/0x8f
[ 0.970603] [<ffffffff8262a17f>] kernel_init_freeable+0x112/0x1a6
[ 0.971001] [<ffffffff81bffa97>] ? rest_init+0xbe/0xbe
[ 0.971343] [<ffffffff81bffaa0>] kernel_init+0x9/0xf0
[ 0.971676] [<ffffffff81c077a5>] ret_from_fork+0x25/0x30
[ 0.972026] Code: 48 c7 c7 ba cb 29 82 4c 89 c2 e8 89 7a cf ff 0f 0b 49 8b 10 48 39 d0
74 14 4c 89 c1 48 89 c6 48 c7 c7 30 cc 29 82 e8 6d 7a cf ff <0f> 0b 49 39 f8 74 05
48 39 f8 75 17 48 89 f2 48 89 c1 48 89 fe
[ 0.973817] RIP [<ffffffff814571c9>] __list_add_valid+0x3e/0x65
[ 0.974214] RSP <ffffc900000d3b50>
[ 0.974460] ---[ end trace 8afac07a57229db5 ]---
[ 0.974767] Kernel panic - not syncing: Fatal exception
[ 0.975116] Kernel Offset: disabled
Elapsed time: 10
To reproduce:
git clone
git://git.kernel.org/pub/scm/linux/kernel/git/wfg/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this
email
Thanks,
Xiaolong