linux-riscv.lists.infradead.org archive mirror
 help / color / mirror / Atom feed
* Crashes with CONFIG_SLAB_FREELIST_RANDOM
@ 2020-05-04 11:30 Andreas Schwab
  2020-05-04 14:47 ` David Abdurachmanov
  0 siblings, 1 reply; 8+ messages in thread
From: Andreas Schwab @ 2020-05-04 11:30 UTC (permalink / raw)
  To: linux-riscv

When enabling CONFIG_SLAB_FREELIST_RANDOM, the kernel frequently crashes
pretty early:

[    0.165922] Unable to handle kernel paging request at virtual address 00000016e1694827
[    0.173081] Oops [#1]
[    0.175308] Modules linked in:
[    0.178353] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.6.6-212-default #1 openSUSE Tumbleweed (unreleased)
[    0.188074] epc: ffffffe00016f40a ra : ffffffe00016f44c sp : ffffffe1f6ae9c90
[    0.195193]  gp : ffffffe0009ae600 tp : ffffffe1f6ae3480 t0 : ffffffe1f6c19c80
[    0.202398]  t1 : 0000000000000000 t2 : 000000000000f8b7 s0 : ffffffe1f6ae9cd0
[    0.209605]  s1 : ffffffe1f6a036c0 a0 : 0000000000000000 a1 : 00000000000002e1
[    0.216811]  a2 : ffffffe000a08c18 a3 : 7fda5816e1694827 a4 : 00000001f7d06000
[    0.224017]  a5 : 00000001f7d06000 a6 : ffffffe1f6c19c00 a7 : 0000000000ff0000
[    0.231224]  s2 : 0000000000000cc0 s3 : ffffffe00043262a s4 : 7fda5816e1694827
[    0.238429]  s5 : ffffffe1f6a1a800 s6 : 0000000000000000 s7 : 0000000000000038
[    0.245636]  s8 : ffffffe00018a674 s9 : ffffffe00018ab60 s10: ffffffe1f6c19c00
[    0.252842]  s11: 000000000000000a t3 : ff633e17173e647f t4 : 000000f600000000
[    0.260047]  t5 : 000000ff00000000 t6 : ffffffe1f6c34258
[    0.265344] status: 0000000200000120 badaddr: 00000016e1694827 cause: 000000000000000d
[    0.273289] ---[ end trace 703a116d0e920a95 ]---

I think that means there is a use-after-free somewhere.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."


^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, other threads:[~2020-06-04 17:15 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-05-04 11:30 Crashes with CONFIG_SLAB_FREELIST_RANDOM Andreas Schwab
2020-05-04 14:47 ` David Abdurachmanov
2020-05-06 21:21   ` Palmer Dabbelt
2020-05-06 21:59     ` Andreas Schwab
2020-05-15 18:57       ` Palmer Dabbelt
2020-05-16 13:33         ` Andreas Schwab
2020-06-04 14:14           ` David Abdurachmanov
2020-06-04 17:15             ` Andreas Schwab

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).