From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.6 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9B901C282DD for ; Sat, 11 Jan 2020 16:32:08 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 41ADF2084D for ; Sat, 11 Jan 2020 16:32:08 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="SnsjPlFf" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 41ADF2084D Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id C9C0E8E0006; Sat, 11 Jan 2020 11:32:07 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id C4CA98E0001; Sat, 11 Jan 2020 11:32:07 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id B622B8E0006; Sat, 11 Jan 2020 11:32:07 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0155.hostedemail.com [216.40.44.155]) by kanga.kvack.org (Postfix) with ESMTP id 8CB098E0001 for ; Sat, 11 Jan 2020 11:32:07 -0500 (EST) Received: from smtpin13.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with SMTP id 23E128248076 for ; Sat, 11 Jan 2020 16:32:07 +0000 (UTC) X-FDA: 76365895494.13.bath40_2f89fe8a8601b X-HE-Tag: bath40_2f89fe8a8601b X-Filterd-Recvd-Size: 15577 Received: from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) by imf02.hostedemail.com (Postfix) with ESMTP for ; Sat, 11 Jan 2020 16:32:06 +0000 (UTC) Received: by mail-io1-f68.google.com with SMTP id n21so5305120ioo.10 for ; Sat, 11 Jan 2020 08:32:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=XV2fMrg1G10wj++8Ysxkw0jO51aUxZLa09DnSSss78o=; b=SnsjPlFfxn/0qEV26nImon0BwxbWk0vVhpB3Q/F2ZA5PvQWqYYJbiKmYzxrO2jn6nT FlyV4s2ST6JulgOVxAN2UJ7SIENs8v+YlYHjaAYC9/nBQpgKxemt9dr9fCSFpikwmLHT Et6LRGptxPjdyxdQkqD/pm+8SmB6rDgRnyz6oLTSsAzxjtkJUYBElT2VeoQ2YWHih40T +cpc9i1G7SgkCIe9EieyXrYH+/TmljzOA+0iubXc4MM5suhOHwH53Y/CxuQJiw88uifV vS3kSEQD01W+58NVu27EQnhP902qaByJ15Ueoh0SWF3AX9mkb5mfEtp/9y7u5aZQv0sF tlfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=XV2fMrg1G10wj++8Ysxkw0jO51aUxZLa09DnSSss78o=; b=Kc1nlhWwgL5Oj6lj1JwaLaCqzOFNcaG1S0lQvGb6RrlZxkKrqv1SlMEqcDOEk9pA/z UtKz9SnoAcX22x5IPGuBVtfRflDSMCA6aS3fn+8PfB7VdDzbRXuyZXQhMpUrrQrvwDri RvrrWENt1XItFNH6lJfatW+saa/LTTgUsRdtW5j0QDoDDV4XSz3w4uJcFkUX9PKuhSQs 2WCYsyGLb4sazeFkDbh2r93RwQyjI4Z6HPpV3MsAm/nQ+zT0tLp99aqBql57hIydjD0E M+8QJx64UVuVSOlWA3vqO0nNo6CYHMKoHF5AujiAwS/T8UpGmgmC3/h/DUuPgGY1wUPL DAlA== X-Gm-Message-State: APjAAAVcnBQRkqb0UH5P3LV1f00PiGQ2AB8RS2sQlNz18xY8ycH7r4Y9 xODob6v9gaRxo1bBK7DukcShBHcjb4QHFI3NyVajvBGdUH3/VQ== X-Google-Smtp-Source: APXvYqxnc9dZlAQGkmU0o5oh6wiuXkM2gNMMMRl0YaZQhGq8AZ0MXywXnZzcqdPwELhSvwP9fiQ7mLMcW58UlEqvkL8= X-Received: by 2002:a6b:b3c1:: with SMTP id c184mr6806229iof.245.1578760325547; Sat, 11 Jan 2020 08:32:05 -0800 (PST) MIME-Version: 1.0 From: Mikhail Gavrilov Date: Sat, 11 Jan 2020 21:31:54 +0500 Message-ID: Subject: [BUG] RIP: 0010:__kmalloc+0xa8/0x330 (general protection fault: 0000 [#1] SMP NOPTI) To: Linux List Kernel Mailing , Linux Memory Management List Content-Type: multipart/alternative; boundary="00000000000063cd58059bdfc84b" X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: --00000000000063cd58059bdfc84b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi folks, I caused a kernel panic by just starting downloading simultaneously several big files by Google Chrome browser and removing games in parallel in the Steam client (because the disk was almost full) general protection fault: 0000 [#1] SMP NOPTI CPU: 15 PID: 104506 Comm: Chrome_IOThread Not tainted 5.5.0-0.rc5.git3.2.fc32.x86_64 #1 Hardware name: System manufacturer System Product Name/ROG STRIX X570-I GAMING, BIOS 1405 11/19/2019 RIP: 0010:__kmalloc+0xa8/0x330 Code: e3 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 be 91 cc 5e 4d 8b 38 4d 85 ff 0f 84 22 02 00 00 41 8b 5e 20 49 8b 3e 4c 01 fb <48> 33 1b 49 33 9e d0 01 00 00 40 f6 c7 0f 0f 85 1f 02 00 00 48 8d RSP: 0018:ffffa4428b6bfb00 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 669e19e5410de38b RCX: 0000000000000000 RDX: 000000000016fcfc RSI: 0000000000000400 RDI: 00000000001f4080 RBP: 0000000000000cc0 R08: ffff889a7c1f4080 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000011 R13: ffff889a76c07800 R14: ffff889a76c07800 R15: 669e19e5410de38b FS: 00007fd5dc49d700(0000) GS:ffff889a7c000000(0000) knlGS:000000000000000= 0 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00001a0409c04000 CR3: 000000078042e000 CR4: 0000000000340ee0 Call Trace: ? shmem_initxattrs+0x89/0xd0 shmem_initxattrs+0x89/0xd0 security_inode_init_security+0xf8/0x140 ? shmem_enabled_store+0x1f0/0x1f0 shmem_mknod+0x76/0xe0 lookup_open+0x5bd/0x820 path_openat+0x33d/0xc90 ? touch_atime+0x33/0xe0 do_filp_open+0x91/0x100 ? _raw_spin_unlock+0x1f/0x30 ? __alloc_fd+0xe9/0x1d0 do_sys_open+0x184/0x220 do_syscall_64+0x5c/0xa0 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fd5ee1d3134 Code: 24 20 eb 8f 66 90 44 89 54 24 0c e8 26 4c f9 ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 58 4c f9 ff 8b 44 RSP: 002b:00007fd5dc49bc30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5ee1d3134 RDX: 00000000000000c2 RSI: 00001baff2871330 RDI: 00000000ffffff9c RBP: 00001baff2871330 R08: 0000000000000000 R09: 00007fd5dc49bcd8 R10: 0000000000000180 R11: 0000000000000293 R12: 00000000000000c2 R13: 00007fd5ee272c60 R14: 00007fd5dc49bcd0 R15: 8421084210842109 Modules linked in: uinput rfcomm xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp tun bridge stp llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_tables_set nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep sunrpc vfat fat snd_hda_codec_realtek snd_hda_codec_generic edac_mce_amd ledtrig_audio snd_hda_codec_hdmi iwlmvm snd_hda_intel kvm_amd snd_intel_dspcfg snd_usb_audio kvm snd_hda_codec snd_hda_core snd_usbmidi_lib btusb irqbypass snd_rawmidi mac80211 snd_hwdep uvcvideo btrtl snd_seq btbcm videobuf2_vmalloc btintel videobuf2_memops snd_seq_device videobuf2_v4l2 crct10dif_pclmul videobuf2_common bluetooth crc32_pclmul libarc4 snd_pcm videodev joydev iwlwifi eeepc_wmi xpad mc snd_timer ff_memless ghash_clmulni_intel asus_wmi ecdh_generic sparse_keymap ecc video sp5100_tco wmi_bmof pcspkr snd cfg80211 k10temp ccp i2c_piix4 soundcore rfkill acpi_cpufreq binfmt_misc ip_tables hid_logitech_hidpp hid_logitech_dj amdgpu amd_iommu_v2 gpu_sched ttm drm_kms_helper drm igb nvme crc32c_intel dca nvme_core i2c_algo_bit wmi pinctrl_amd fuse ---[ end trace 8503eed9a4b0cd11 ]--- RIP: 0010:__kmalloc+0xa8/0x330 Code: e3 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 be 91 cc 5e 4d 8b 38 4d 85 ff 0f 84 22 02 00 00 41 8b 5e 20 49 8b 3e 4c 01 fb <48> 33 1b 49 33 9e d0 01 00 00 40 f6 c7 0f 0f 85 1f 02 00 00 48 8d RSP: 0018:ffffa4428b6bfb00 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 669e19e5410de38b RCX: 0000000000000000 RDX: 000000000016fcfc RSI: 0000000000000400 RDI: 00000000001f4080 RBP: 0000000000000cc0 R08: ffff889a7c1f4080 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000011 R13: ffff889a76c07800 R14: ffff889a76c07800 R15: 669e19e5410de38b FS: 00007fd5dc49d700(0000) GS:ffff889a7c000000(0000) knlGS:000000000000000= 0 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00001a0409c04000 CR3: 000000078042e000 CR4: 0000000000340ee0 I don=E2=80=99t think that git bisect is really possible here because the s= tate on the disk will be different each time (there are no more deleted files) and there is no exact case that would reproduce the error. $ /usr/src/kernels/`uname -r`/scripts/faddr2line /lib/debug/lib/modules/`uname -r`/vmlinux __kmalloc+0xa8/0x330 __kmalloc+0xa8/0x330: freelist_ptr at mm/slub.c:261 (inlined by) freelist_dereference at mm/slub.c:272 (inlined by) get_freepointer at mm/slub.c:278 (inlined by) get_freepointer_safe at mm/slub.c:292 (inlined by) slab_alloc_node at mm/slub.c:2726 (inlined by) slab_alloc at mm/slub.c:2767 (inlined by) __kmalloc at mm/slub.c:3799 >From the trace, I see that the problem comes from mm/slub.c so I added this report in the linux-mm mailing list please correct me if I'm wrong. -- Best Regards, Mike Gavrilov. --00000000000063cd58059bdfc84b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi folks, I caused a kernel panic by just starting downloading= =C2=A0simultaneously several big files by Google Chrome browser and removin= g games in parallel =C2=A0in the Steam client (because the disk was almost = full)

general protection faul= t: 0000 [#1] SMP NOPTI
CPU: 15 PID: 104506 Comm: Chrome_IOTh= read Not tainted 5.5.0-0.rc5.git3.2.fc32.x86_64 #1
Hardware name: System= manufacturer System Product Name/ROG STRIX X570-I GAMING, BIOS 1405 11/19/= 2019
RIP: 0010:__kmalloc+0xa8/0x330
Code: e3 01 00 00 4d 8b 06 = 65 49 8b 50 08 65 4c 03 05 be 91 cc 5e 4d 8b 38 4d 85 ff 0f 84 22 02 00 00 = 41 8b 5e 20 49 8b 3e 4c 01 fb <48> 33 1b 49 33 9e d0 01 00 00 40 f6 c= 7 0f 0f 85 1f 02 00 00 48 8d
RSP: 0018:ffffa4428b6bfb00 EFLAGS: 00010206=
RAX: 0000000000000000 RBX: 669e19e5410de38b RCX: 0000000000000000
RD= X: 000000000016fcfc RSI: 0000000000000400 RDI: 00000000001f4080
RBP: 000= 0000000000cc0 R08: ffff889a7c1f4080 R09: 0000000000000000
R10: 000000000= 0000000 R11: 0000000000000000 R12: 0000000000000011
R13: ffff889a76c0780= 0 R14: ffff889a76c07800 R15: 669e19e5410de38b
FS: =C2=A000007fd5dc49d700= (0000) GS:ffff889a7c000000(0000) knlGS:0000000000000000
CS: =C2=A00010 D= S: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00001a0409c04000 CR3: 000000= 078042e000 CR4: 0000000000340ee0
Call Trace:
=C2=A0? shmem_initxattrs= +0x89/0xd0
=C2=A0shmem_initxattrs+0x89/0xd0
=C2=A0security_inode_init= _security+0xf8/0x140
=C2=A0? shmem_enabled_store+0x1f0/0x1f0
=C2=A0sh= mem_mknod+0x76/0xe0
=C2=A0lookup_open+0x5bd/0x820
=C2=A0path_openat+0= x33d/0xc90
=C2=A0? touch_atime+0x33/0xe0
=C2=A0do_filp_open+0x91/0x10= 0
=C2=A0? _raw_spin_unlock+0x1f/0x30
=C2=A0? __alloc_fd+0xe9/0x1d0=C2=A0do_sys_open+0x184/0x220
=C2=A0do_syscall_64+0x5c/0xa0
=C2=A0en= try_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fd5ee1d3134
Code:= 24 20 eb 8f 66 90 44 89 54 24 0c e8 26 4c f9 ff 44 8b 54 24 0c 44 89 e2 48= 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff = ff 77 32 44 89 c7 89 44 24 0c e8 58 4c f9 ff 8b 44
RSP: 002b:00007fd5dc4= 9bc30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda = RBX: 0000000000000000 RCX: 00007fd5ee1d3134
RDX: 00000000000000c2 RSI: 0= 0001baff2871330 RDI: 00000000ffffff9c
RBP: 00001baff2871330 R08: 0000000= 000000000 R09: 00007fd5dc49bcd8
R10: 0000000000000180 R11: 0000000000000= 293 R12: 00000000000000c2
R13: 00007fd5ee272c60 R14: 00007fd5dc49bcd0 R1= 5: 8421084210842109
Modules linked in: uinput rfcomm xt_CHECKSUM xt_MASQ= UERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp tun bridge stp= llc nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet= nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject= _ipv6 nft_reject nft_ct nf_tables_set nft_chain_nat nf_tables ebtable_nat e= btable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security i= ptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c ipta= ble_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebt= ables ip6table_filter ip6_tables iptable_filter cmac bnep sunrpc vfat fat s= nd_hda_codec_realtek snd_hda_codec_generic edac_mce_amd ledtrig_audio snd_h= da_codec_hdmi iwlmvm snd_hda_intel kvm_amd snd_intel_dspcfg snd_usb_audio k= vm snd_hda_codec snd_hda_core snd_usbmidi_lib btusb irqbypass snd_rawmidi m= ac80211 snd_hwdep uvcvideo btrtl snd_seq btbcm videobuf2_vmalloc btintel vi= deobuf2_memops snd_seq_device
=C2=A0videobuf2_v4l2 crct10dif_pclmul vide= obuf2_common bluetooth crc32_pclmul libarc4 snd_pcm videodev joydev iwlwifi= eeepc_wmi xpad mc snd_timer ff_memless ghash_clmulni_intel asus_wmi ecdh_g= eneric sparse_keymap ecc video sp5100_tco wmi_bmof pcspkr snd cfg80211 k10t= emp ccp i2c_piix4 soundcore rfkill acpi_cpufreq binfmt_misc ip_tables hid_l= ogitech_hidpp hid_logitech_dj amdgpu amd_iommu_v2 gpu_sched ttm drm_kms_hel= per drm igb nvme crc32c_intel dca nvme_core i2c_algo_bit wmi pinctrl_amd fu= se
---[ end trace 8503eed9a4b0cd11 ]---
RIP: 0010:__kmalloc+0xa8/0x33= 0
Code: e3 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 be 91 cc 5e 4d 8= b 38 4d 85 ff 0f 84 22 02 00 00 41 8b 5e 20 49 8b 3e 4c 01 fb <48> 33= 1b 49 33 9e d0 01 00 00 40 f6 c7 0f 0f 85 1f 02 00 00 48 8d
RSP: 0018:f= fffa4428b6bfb00 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 669e19e5410d= e38b RCX: 0000000000000000
RDX: 000000000016fcfc RSI: 0000000000000400 R= DI: 00000000001f4080
RBP: 0000000000000cc0 R08: ffff889a7c1f4080 R09: 00= 00000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000= 00000011
R13: ffff889a76c07800 R14: ffff889a76c07800 R15: 669e19e5410de3= 8b
FS: =C2=A000007fd5dc49d700(0000) GS:ffff889a7c000000(0000) knlGS:0000= 000000000000
CS: =C2=A00010 DS: 0000 ES: 0000 CR0: 0000000080050033
<= div class=3D"gmail_default" style=3D"font-family:verdana,sans-serif">CR2: 00001a0409c04000 CR3:= 000000078042e000 CR4: 0000000000340ee0

I don=E2=80=99t think th= at git bisect is really possible here because the state on the disk will be= different each time (there are no more deleted files) and there is no exac= t case that would reproduce the error.

$ /usr/src/kernels/`uname -r`/scripts/faddr2line /li= b/debug/lib/modules/`uname -r`/vmlinux __kmalloc+0xa8/0x330
__k= malloc+0xa8/0x330:
freelist_ptr at mm/slub.c:261
(inlined by) fr= eelist_dereference at mm/slub.c:272
(inlined by) get_freepointer at mm/s= lub.c:278
(inlined by) get_freepointer_safe at mm/slub.c:292
(inlined= by) slab_alloc_node at mm/slub.c:2726
(inlined by) slab_alloc at mm/slu= b.c:2767
(inlined by) __kmalloc at mm/slub.c:3799

From the trace, I s= ee that the problem comes from mm/slub.c so I added this report in the linu= x-mm mailing list please correct me if I'm wrong.

--Best Regards,
Mike Gavrilov.
--00000000000063cd58059bdfc84b--