All of lore.kernel.org
 help / color / mirror / Atom feed
* [vbabka:slub-percpu-sheaves-v1r0] [TESTING, HACK] 9cb4096680: BUG:unable_to_handle_page_fault_for_address
@ 2024-07-14 11:10 kernel test robot
  2024-07-15  7:20 ` Vlastimil Babka
  0 siblings, 1 reply; 2+ messages in thread
From: kernel test robot @ 2024-07-14 11:10 UTC (permalink / raw)
  To: Vlastimil Babka; +Cc: oe-lkp, lkp, oliver.sang


hi, Vlastimil Babka,

we noticed this is a 'TESTING, HACK' patch, however, we are not sure if this
report could supply some hints or information to you, so just report FYI.


Hello,

kernel test robot noticed "BUG:unable_to_handle_page_fault_for_address" on:

commit: 9cb4096680ee90fe6be1b22ff3961174fa8e3ee4 ("TESTING, HACK: sheaves for everyone")
https://git.kernel.org/cgit/linux/kernel/git/vbabka/linux.git slub-percpu-sheaves-v1r0

in testcase: boot

compiler: gcc-10
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+-------------------------------------------------------+------------+------------+
|                                                       | 7e57e2483a | 9cb4096680 |
+-------------------------------------------------------+------------+------------+
| boot_successes                                        | 6          | 0          |
| boot_failures                                         | 0          | 6          |
| BUG:unable_to_handle_page_fault_for_address           | 0          | 3          |
| Oops                                                  | 0          | 6          |
| EIP:refill_obj_stock                                  | 0          | 6          |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0          | 6          |
| BUG:kernel_NULL_pointer_dereference,address           | 0          | 3          |
+-------------------------------------------------------+------------+------------+


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202407141855.53dbebec-oliver.sang@intel.com


[    9.827171][    C0] BUG: unable to handle page fault for address: 6b6b6b6b
[    9.828805][    C0] #PF: supervisor read access in kernel mode
[    9.830174][    C0] #PF: error_code(0x0000) - not-present page
[    9.830821][    C0] *pde = 00000000
[    9.830821][    C0] Oops: Oops: 0000 [#1] PREEMPT
[    9.830821][    C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc1-00012-g9cb4096680ee #1
[    9.830821][    C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 9.830821][ C0] EIP: refill_obj_stock (include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:204 include/linux/percpu-refcount.h:222 include/linux/memcontrol.h:810 mm/memcontrol.c:3650) 
[ 9.830821][ C0] Code: ff 31 c9 31 d2 b8 d0 a8 92 c3 68 6c e5 24 c1 6a 00 6a 00 6a 02 e8 66 7e e7 ff e8 89 7d 2f 01 83 c4 10 85 c0 0f 85 ae 01 00 00 <8b> 03 a8 03 0f 85 f4 01 00 00 ff 00 e8 6d 7d 2f 01 85 c0 0f 85 75
All code
========
   0:	ff 31                	pushq  (%rcx)
   2:	c9                   	leaveq 
   3:	31 d2                	xor    %edx,%edx
   5:	b8 d0 a8 92 c3       	mov    $0xc392a8d0,%eax
   a:	68 6c e5 24 c1       	pushq  $0xffffffffc124e56c
   f:	6a 00                	pushq  $0x0
  11:	6a 00                	pushq  $0x0
  13:	6a 02                	pushq  $0x2
  15:	e8 66 7e e7 ff       	callq  0xffffffffffe77e80
  1a:	e8 89 7d 2f 01       	callq  0x12f7da8
  1f:	83 c4 10             	add    $0x10,%esp
  22:	85 c0                	test   %eax,%eax
  24:	0f 85 ae 01 00 00    	jne    0x1d8
  2a:*	8b 03                	mov    (%rbx),%eax		<-- trapping instruction
  2c:	a8 03                	test   $0x3,%al
  2e:	0f 85 f4 01 00 00    	jne    0x228
  34:	ff 00                	incl   (%rax)
  36:	e8 6d 7d 2f 01       	callq  0x12f7da8
  3b:	85 c0                	test   %eax,%eax
  3d:	0f                   	.byte 0xf
  3e:	85                   	.byte 0x85
  3f:	75                   	.byte 0x75

Code starting with the faulting instruction
===========================================
   0:	8b 03                	mov    (%rbx),%eax
   2:	a8 03                	test   $0x3,%al
   4:	0f 85 f4 01 00 00    	jne    0x1fe
   a:	ff 00                	incl   (%rax)
   c:	e8 6d 7d 2f 01       	callq  0x12f7d7e
  11:	85 c0                	test   %eax,%eax
  13:	0f                   	.byte 0xf
  14:	85                   	.byte 0x85
  15:	75                   	.byte 0x75
[    9.830821][    C0] EAX: 00000001 EBX: 6b6b6b6b ECX: 00000001 EDX: 23d164d6
[    9.830821][    C0] ESI: 000000c4 EDI: 00000000 EBP: c4bc1e54 ESP: c4bc1e3c
[    9.830821][    C0] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010002
[    9.830821][    C0] CR0: 80050033 CR2: 6b6b6b6b CR3: 2b0e7000 CR4: 000406d0
[    9.830821][    C0] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    9.830821][    C0] DR6: fffe0ff0 DR7: 00000400
[    9.830821][    C0] Call Trace:
[ 9.830821][ C0] ? show_regs (arch/x86/kernel/dumpstack.c:479) 
[ 9.830821][ C0] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) 
[ 9.830821][ C0] ? page_fault_oops (arch/x86/mm/fault.c:715) 
[ 9.830821][ C0] ? kernelmode_fixup_or_oops+0x64/0x70 
[ 9.830821][ C0] ? __bad_area_nosemaphore+0x10d/0x1a8 
[ 9.830821][ C0] ? bad_area_nosemaphore (arch/x86/mm/fault.c:835) 
[ 9.830821][ C0] ? do_user_addr_fault (arch/x86/mm/fault.c:1452) 
[ 9.830821][ C0] ? exc_page_fault (arch/x86/include/asm/irqflags.h:26 arch/x86/include/asm/irqflags.h:67 arch/x86/include/asm/irqflags.h:127 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) 
[ 9.830821][ C0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1494) 
[ 9.830821][ C0] ? handle_exception (arch/x86/entry/entry_32.S:1047) 
[ 9.830821][ C0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1494) 
[ 9.830821][ C0] ? refill_obj_stock (include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:204 include/linux/percpu-refcount.h:222 include/linux/memcontrol.h:810 mm/memcontrol.c:3650) 
[ 9.830821][ C0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1494) 
[ 9.830821][ C0] ? refill_obj_stock (include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:204 include/linux/percpu-refcount.h:222 include/linux/memcontrol.h:810 mm/memcontrol.c:3650) 
[ 9.830821][ C0] __memcg_slab_free_hook (mm/slab.h:599 mm/memcontrol.c:3804) 
[ 9.830821][ C0] __rcu_free_sheaf_prepare (mm/slub.c:5049) 
[ 9.830821][ C0] rcu_free_sheaf (mm/slub.c:5072) 
[ 9.830821][ C0] rcu_do_batch+0x17b/0x588 
[ 9.830821][ C0] rcu_core (kernel/rcu/tree.c:2812) 
[ 9.830821][ C0] rcu_core_si (kernel/rcu/tree.c:2828) 
[ 9.830821][ C0] handle_softirqs (include/linux/jump_label.h:207 include/linux/jump_label.h:207 include/trace/events/irq.h:142 kernel/softirq.c:555) 
[ 9.830821][ C0] run_ksoftirqd (kernel/softirq.c:411 kernel/softirq.c:929) 
[ 9.830821][ C0] smpboot_thread_fn (kernel/smpboot.c:164 (discriminator 3)) 
[ 9.830821][ C0] kthread (kernel/kthread.c:389) 
[ 9.830821][ C0] ? sort_range (kernel/smpboot.c:107) 
[ 9.830821][ C0] ? kthread_park (kernel/kthread.c:342) 
[ 9.830821][ C0] ret_from_fork (arch/x86/kernel/process.c:153) 
[ 9.830821][ C0] ? kthread_park (kernel/kthread.c:342) 
[ 9.830821][ C0] ret_from_fork_asm (arch/x86/entry/entry_32.S:737) 
[ 9.830821][ C0] entry_INT80_32 (arch/x86/entry/entry_32.S:944) 
[    9.830821][    C0] Modules linked in:
[    9.830821][    C0] CR2: 000000006b6b6b6b
[    9.830821][    C0] ---[ end trace 0000000000000000 ]---
[ 9.830821][ C0] EIP: refill_obj_stock (include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:204 include/linux/percpu-refcount.h:222 include/linux/memcontrol.h:810 mm/memcontrol.c:3650) 
[ 9.830821][ C0] Code: ff 31 c9 31 d2 b8 d0 a8 92 c3 68 6c e5 24 c1 6a 00 6a 00 6a 02 e8 66 7e e7 ff e8 89 7d 2f 01 83 c4 10 85 c0 0f 85 ae 01 00 00 <8b> 03 a8 03 0f 85 f4 01 00 00 ff 00 e8 6d 7d 2f 01 85 c0 0f 85 75
All code
========
   0:	ff 31                	pushq  (%rcx)
   2:	c9                   	leaveq 
   3:	31 d2                	xor    %edx,%edx
   5:	b8 d0 a8 92 c3       	mov    $0xc392a8d0,%eax
   a:	68 6c e5 24 c1       	pushq  $0xffffffffc124e56c
   f:	6a 00                	pushq  $0x0
  11:	6a 00                	pushq  $0x0
  13:	6a 02                	pushq  $0x2
  15:	e8 66 7e e7 ff       	callq  0xffffffffffe77e80
  1a:	e8 89 7d 2f 01       	callq  0x12f7da8
  1f:	83 c4 10             	add    $0x10,%esp
  22:	85 c0                	test   %eax,%eax
  24:	0f 85 ae 01 00 00    	jne    0x1d8
  2a:*	8b 03                	mov    (%rbx),%eax		<-- trapping instruction
  2c:	a8 03                	test   $0x3,%al
  2e:	0f 85 f4 01 00 00    	jne    0x228
  34:	ff 00                	incl   (%rax)
  36:	e8 6d 7d 2f 01       	callq  0x12f7da8
  3b:	85 c0                	test   %eax,%eax
  3d:	0f                   	.byte 0xf
  3e:	85                   	.byte 0x85
  3f:	75                   	.byte 0x75

Code starting with the faulting instruction
===========================================
   0:	8b 03                	mov    (%rbx),%eax
   2:	a8 03                	test   $0x3,%al
   4:	0f 85 f4 01 00 00    	jne    0x1fe
   a:	ff 00                	incl   (%rax)
   c:	e8 6d 7d 2f 01       	callq  0x12f7d7e
  11:	85 c0                	test   %eax,%eax
  13:	0f                   	.byte 0xf
  14:	85                   	.byte 0x85
  15:	75                   	.byte 0x75


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20240714/202407141855.53dbebec-oliver.sang@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2024-07-15  7:20 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-07-14 11:10 [vbabka:slub-percpu-sheaves-v1r0] [TESTING, HACK] 9cb4096680: BUG:unable_to_handle_page_fault_for_address kernel test robot
2024-07-15  7:20 ` Vlastimil Babka

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.