From: kernel test robot <oliver.sang@intel.com>
To: NeilBrown <neilb@ownmail.net>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>,
Amir Goldstein <amir73il@gmail.com>, <linux-doc@vger.kernel.org>,
<linuxppc-dev@lists.ozlabs.org>, <linux-kernel@vger.kernel.org>,
<linux-bcachefs@vger.kernel.org>, <linux-fsdevel@vger.kernel.org>,
<ocfs2-devel@lists.linux.dev>, <linux-cifs@vger.kernel.org>,
<bpf@vger.kernel.org>, <netdev@vger.kernel.org>,
Alexander Viro <viro@zeniv.linux.org.uk>,
Christian Brauner <brauner@kernel.org>,
"Jeff Layton" <jlayton@kernel.org>, Jan Kara <jack@suse.cz>,
<oliver.sang@intel.com>
Subject: Re: [PATCH v3 5/6] VFS: rename kern_path_locked() and related functions.
Date: Sun, 21 Sep 2025 17:43:46 +0800 [thread overview]
Message-ID: <202509211121.ebd9f4b0-lkp@intel.com> (raw)
In-Reply-To: <20250915021504.2632889-6-neilb@ownmail.net>
Hello,
kernel test robot noticed "BUG:unable_to_handle_page_fault_for_address" on:
commit: 747e356babd8bdd569320c29916470345afd3cf7 ("[PATCH v3 5/6] VFS: rename kern_path_locked() and related functions.")
url: https://github.com/intel-lab-lkp/linux/commits/NeilBrown/VFS-ovl-add-lookup_one_positive_killable/20250915-101929
base: https://git.kernel.org/cgit/linux/kernel/git/vfs/vfs.git vfs.all
patch link: https://lore.kernel.org/all/20250915021504.2632889-6-neilb@ownmail.net/
patch subject: [PATCH v3 5/6] VFS: rename kern_path_locked() and related functions.
in testcase: boot
config: i386-randconfig-2006-20250825
compiler: gcc-14
test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+---------------------------------------------+------------+------------+
| | 1c87fa0646 | 747e356bab |
+---------------------------------------------+------------+------------+
| boot_successes | 24 | 0 |
| boot_failures | 0 | 24 |
| BUG:unable_to_handle_page_fault_for_address | 0 | 24 |
| Oops:Oops:#[##] | 0 | 24 |
| EIP:mnt_want_write | 0 | 24 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 24 |
+---------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202509211121.ebd9f4b0-lkp@intel.com
[ 12.277015][ T18] BUG: unable to handle page fault for address: fefeff02
[ 12.278063][ T18] #PF: supervisor read access in kernel mode
[ 12.278982][ T18] #PF: error_code(0x0000) - not-present page
[ 12.279886][ T18] *pde = 00000000
[ 12.280491][ T18] Oops: Oops: 0000 [#1]
[ 12.281158][ T18] CPU: 0 UID: 0 PID: 18 Comm: kdevtmpfs Not tainted 6.17.0-rc3-00100-g747e356babd8 #1 PREEMPT(full) 97a7d9f1f9975edf00ea02f43ed800cec17522a0
[ 12.283292][ T18] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 12.283887][ T18] EIP: mnt_want_write (include/linux/fs.h:1908 include/linux/fs.h:2044 fs/namespace.c:566)
[ 12.283887][ T18] Code: 74 26 00 55 83 e8 30 89 e5 e8 b0 ff ff ff 5d c3 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 3e 8d 74 26 00 55 89 e5 56 53 89 c3 <8b> 40 04 05 d8 01 00 00 e8 67 f5 ff ff 89 d8 e8 90 e6 ff ff 89 c6
All code
========
0: 74 26 je 0x28
2: 00 55 83 add %dl,-0x7d(%rbp)
5: e8 30 89 e5 e8 call 0xffffffffe8e5893a
a: b0 ff mov $0xff,%al
c: ff (bad)
d: ff 5d c3 lcall *-0x3d(%rbp)
10: 2e 8d b4 26 00 00 00 cs lea 0x0(%rsi,%riz,1),%esi
17: 00
18: 8d b6 00 00 00 00 lea 0x0(%rsi),%esi
1e: 3e 8d 74 26 00 ds lea 0x0(%rsi,%riz,1),%esi
23: 55 push %rbp
24: 89 e5 mov %esp,%ebp
26: 56 push %rsi
27: 53 push %rbx
28: 89 c3 mov %eax,%ebx
2a:* 8b 40 04 mov 0x4(%rax),%eax <-- trapping instruction
2d: 05 d8 01 00 00 add $0x1d8,%eax
32: e8 67 f5 ff ff call 0xfffffffffffff59e
37: 89 d8 mov %ebx,%eax
39: e8 90 e6 ff ff call 0xffffffffffffe6ce
3e: 89 c6 mov %eax,%esi
Code starting with the faulting instruction
===========================================
0: 8b 40 04 mov 0x4(%rax),%eax
3: 05 d8 01 00 00 add $0x1d8,%eax
8: e8 67 f5 ff ff call 0xfffffffffffff574
d: 89 d8 mov %ebx,%eax
f: e8 90 e6 ff ff call 0xffffffffffffe6a4
14: 89 c6 mov %eax,%esi
[ 12.283887][ T18] EAX: fefefefe EBX: fefefefe ECX: c5923640 EDX: c58b9e28
[ 12.283887][ T18] ESI: c58b9f0c EDI: c54024e0 EBP: c58b9ea4 ESP: c58b9e9c
[ 12.283887][ T18] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010246
[ 12.283887][ T18] CR0: 80050033 CR2: fefeff02 CR3: 04780000 CR4: 000406d0
[ 12.283887][ T18] Call Trace:
[ 12.283887][ T18] __start_removing_path (include/linux/fs.h:1024 fs/namei.c:2784)
[ 12.283887][ T18] start_removing_path (fs/namei.c:2842)
[ 12.283887][ T18] devtmpfs_work_loop (drivers/base/devtmpfs.c:326 drivers/base/devtmpfs.c:387 drivers/base/devtmpfs.c:400)
[ 12.283887][ T18] devtmpfsd (drivers/base/devtmpfs.c:444)
[ 12.283887][ T18] kthread (kernel/kthread.c:465)
[ 12.283887][ T18] ? vclkdev_alloc (drivers/base/devtmpfs.c:436)
[ 12.283887][ T18] ? kthread_is_per_cpu (kernel/kthread.c:412)
[ 12.283887][ T18] ret_from_fork (arch/x86/kernel/process.c:154)
[ 12.283887][ T18] ? kthread_is_per_cpu (kernel/kthread.c:412)
[ 12.283887][ T18] ret_from_fork_asm (arch/x86/entry/entry_32.S:737)
[ 12.283887][ T18] entry_INT80_32 (arch/x86/entry/entry_32.S:945)
[ 12.283887][ T18] Modules linked in:
[ 12.283887][ T18] CR2: 00000000fefeff02
[ 12.283887][ T18] ---[ end trace 0000000000000000 ]---
[ 12.283887][ T18] EIP: mnt_want_write (include/linux/fs.h:1908 include/linux/fs.h:2044 fs/namespace.c:566)
[ 12.283887][ T18] Code: 74 26 00 55 83 e8 30 89 e5 e8 b0 ff ff ff 5d c3 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 3e 8d 74 26 00 55 89 e5 56 53 89 c3 <8b> 40 04 05 d8 01 00 00 e8 67 f5 ff ff 89 d8 e8 90 e6 ff ff 89 c6
All code
========
0: 74 26 je 0x28
2: 00 55 83 add %dl,-0x7d(%rbp)
5: e8 30 89 e5 e8 call 0xffffffffe8e5893a
a: b0 ff mov $0xff,%al
c: ff (bad)
d: ff 5d c3 lcall *-0x3d(%rbp)
10: 2e 8d b4 26 00 00 00 cs lea 0x0(%rsi,%riz,1),%esi
17: 00
18: 8d b6 00 00 00 00 lea 0x0(%rsi),%esi
1e: 3e 8d 74 26 00 ds lea 0x0(%rsi,%riz,1),%esi
23: 55 push %rbp
24: 89 e5 mov %esp,%ebp
26: 56 push %rsi
27: 53 push %rbx
28: 89 c3 mov %eax,%ebx
2a:* 8b 40 04 mov 0x4(%rax),%eax <-- trapping instruction
2d: 05 d8 01 00 00 add $0x1d8,%eax
32: e8 67 f5 ff ff call 0xfffffffffffff59e
37: 89 d8 mov %ebx,%eax
39: e8 90 e6 ff ff call 0xffffffffffffe6ce
3e: 89 c6 mov %eax,%esi
Code starting with the faulting instruction
===========================================
0: 8b 40 04 mov 0x4(%rax),%eax
3: 05 d8 01 00 00 add $0x1d8,%eax
8: e8 67 f5 ff ff call 0xfffffffffffff574
d: 89 d8 mov %ebx,%eax
f: e8 90 e6 ff ff call 0xffffffffffffe6a4
14: 89 c6 mov %eax,%esi
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250921/202509211121.ebd9f4b0-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
next prev parent reply other threads:[~2025-09-21 9:44 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-09-15 2:13 [PATCH v3 0/6] VFS: more prep for change to directory locking NeilBrown
2025-09-15 2:13 ` [PATCH v3 1/6] VFS/ovl: add lookup_one_positive_killable() NeilBrown
2025-09-15 2:13 ` [PATCH v3 2/6] VFS: discard err2 in filename_create() NeilBrown
2025-09-15 2:13 ` [PATCH v3 3/6] VFS: unify old_mnt_idmap and new_mnt_idmap in renamedata NeilBrown
2025-09-15 2:13 ` [PATCH v3 4/6] VFS/audit: introduce kern_path_parent() for audit NeilBrown
2025-09-15 2:13 ` [PATCH v3 5/6] VFS: rename kern_path_locked() and related functions NeilBrown
2025-09-21 9:43 ` kernel test robot [this message]
2025-09-21 10:22 ` NeilBrown
2025-09-15 2:13 ` [PATCH v3 6/6] debugfs: rename start_creating() to debugfs_start_creating() NeilBrown
2025-09-19 5:06 ` Al Viro
2025-09-19 22:49 ` NeilBrown
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202509211121.ebd9f4b0-lkp@intel.com \
--to=oliver.sang@intel.com \
--cc=amir73il@gmail.com \
--cc=bpf@vger.kernel.org \
--cc=brauner@kernel.org \
--cc=jack@suse.cz \
--cc=jlayton@kernel.org \
--cc=linux-bcachefs@vger.kernel.org \
--cc=linux-cifs@vger.kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linuxppc-dev@lists.ozlabs.org \
--cc=lkp@intel.com \
--cc=neilb@ownmail.net \
--cc=netdev@vger.kernel.org \
--cc=ocfs2-devel@lists.linux.dev \
--cc=oe-lkp@lists.linux.dev \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.