From: kernel test robot <oliver.sang@intel.com>
To: Zqiang <qiang.zhang@linux.dev>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>,
"Paul E. McKenney" <paulmck@kernel.org>, <rcu@vger.kernel.org>,
<oliver.sang@intel.com>
Subject: [linux-next:master] [srcu] 05c3e88488: RIP:cleanup_srcu_struct
Date: Thu, 6 Aug 2026 14:59:33 +0800 [thread overview]
Message-ID: <202608060833.bce92909-lkp@intel.com> (raw)
Hello,
kernel test robot noticed "RIP:cleanup_srcu_struct" on:
commit: 05c3e88488ed8c12129ca04db84e4c02a16d7ee9 ("srcu: Queue sdp->work when the delay timer is successfully deleted")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master
in testcase: blktests
version: blktests-x86_64-6f5a1dc-1_20260728
with following parameters:
disk: 1SSD
test: nvme-group-01
nvme_trtype: rdma
use_siw: true
config: x86_64-rhel-9.4-func
compiler: gcc-14
test machine: 16 threads Intel(R) Core(TM) i7-13620H (Raptor Lake) with 32G memory
(please refer to attached dmesg/kmsg for entire log/backtrace)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202608060833.bce92909-lkp@intel.com
kern :info : [ 42.171416] [ T3271] nvme nvme1: Removing ctrl: NQN "blktests-subsystem-1"
kern :info : [ 42.220396] [ T3271] ------------[ cut here ]------------
kern :warn : [ 42.221853] [ T3271] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x373/0xa70, CPU#10: nvme/3271
kern :warn : [ 42.223306] [ T3271] Modules linked in: siw loop btrfs libblake2b raid6_pq zstd_compress xor binfmt_misc snd_hda_codec_intelhdmi snd_hda_codec_hdmi snd_hda_codec_alc269 snd_hda_codec_realtek_lib snd_hda_scodec_component snd_hda_codec_generic intel_rapl_msr intel_uncore_frequency intel_uncore_frequency_common x86_pkg_temp_thermal snd_hda_intel snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic i915 soundwire_intel intel_powerclamp snd_sof_intel_hda_sdw_bpt coretemp snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_soc_sdw_utils snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation snd_soc_acpi crc8 soundwire_bus snd_soc_sdca snd_soc_avs snd_soc_hda_codec snd_hda_ext_core snd_hda_codec kvm_intel snd_hda_core spi_pxa2xx_platform dw_dmac spi_pxa2xx_core snd_intel_dspcfg snd_intel_sdw_acpi intel_gtt snd_hwdep drm_buddy ttm kvm snd_soc_core iwlwifi drm_display_helper
kern :warn : [ 42.223363] [ T3271] processor_thermal_device_pci processor_thermal_device btusb processor_thermal_wt_hint snd_compress platform_temperature_control btrtl processor_thermal_soc_slider snd_pcm processor_thermal_rfim spi_nor btintel cec irqbypass processor_thermal_rapl drm_client_lib rapl intel_rapl_common btbcm think_lmi btmtk drm_kms_helper mtd snd_timer intel_lpss_pci ahci intel_cstate processor_thermal_wt_req cfg80211 firmware_attributes_class wmi_bmof bluetooth libahci processor_thermal_power_floor video mei_me intel_pmc_core snd intel_uncore i2c_i801 spi_intel_pci intel_lpss processor_thermal_mbox pl2303 pcspkr libata spi_intel i2c_smbus soundcore idma64 mei pmt_telemetry rfkill int340x_thermal_zone pmt_discovery wmi pmt_class intel_pmc_ssram_telemetry intel_pmc_pwrm_telemetry intel_vsec int3400_thermal acpi_pad pinctrl_tigerlake acpi_tad acpi_thermal_rel drm fuse [last unloaded: siw]
kern :warn : [ 42.233209] [ T3271] CPU: 10 UID: 0 PID: 3271 Comm: nvme Tainted: G S W 7.2.0-rc3+ #1 PREEMPT(lazy)
kern :warn : [ 42.235107] [ T3271] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN
kern :warn : [ 42.236721] [ T3271] Hardware name: LENOVO 90XW004HPL/336B, BIOS M5LKT1CA 01/06/2025
kern :warn : [ 42.238213] [ T3271] RIP: 0010:cleanup_srcu_struct (rcu/srcutree.c:706 (discriminator 2))
kern :warn : [ 42.239837] [ T3271] Code: c1 ea 03 42 80 3c 22 00 0f 85 77 05 00 00 4a 03 1c f5 e0 dd 47 85 48 8d bb d8 00 00 00 e8 15 ca 07 00 85 c0 0f 84 0e ff ff ff <0f> 0b 48 8d 8b 58 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ca
All code
========
0: c1 ea 03 shr $0x3,%edx
3: 42 80 3c 22 00 cmpb $0x0,(%rdx,%r12,1)
8: 0f 85 77 05 00 00 jne 0x585
e: 4a 03 1c f5 e0 dd 47 add -0x7ab82220(,%r14,8),%rbx
15: 85
16: 48 8d bb d8 00 00 00 lea 0xd8(%rbx),%rdi
1d: e8 15 ca 07 00 call 0x7ca37
22: 85 c0 test %eax,%eax
24: 0f 84 0e ff ff ff je 0xffffffffffffff38
2a:* 0f 0b ud2 <-- trapping instruction
2c: 48 8d 8b 58 01 00 00 lea 0x158(%rbx),%rcx
33: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
3a: fc ff df
3d: 48 89 ca mov %rcx,%rdx
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 48 8d 8b 58 01 00 00 lea 0x158(%rbx),%rcx
9: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
10: fc ff df
13: 48 89 ca mov %rcx,%rdx
kern :warn : [ 42.241383] [ T3271] RSP: 0018:ffffc900049778f0 EFLAGS: 00010202
kern :warn : [ 42.242985] [ T3271] RAX: 0000000000000001 RBX: ffffe8ffff622fc0 RCX: ffffffff817d27dd
kern :warn : [ 42.244560] [ T3271] RDX: 1ffff110ea8e5ce0 RSI: 0000000000000246 RDI: ffff88875472e600
kern :warn : [ 42.246197] [ T3271] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10ea8e5cc5
kern :warn : [ 42.247819] [ T3271] R10: ffff88875472e62f R11: 0000000000000040 R12: dffffc0000000000
kern :warn : [ 42.249508] [ T3271] R13: fffffbfff0d0d6ee R14: 0000000000000000 R15: ffff88818083c0a8
kern :warn : [ 42.251005] [ T3271] FS: 00007fd8541ea780(0000) GS:ffff8887ccda7000(0000) knlGS:0000000000000000
kern :warn : [ 42.252678] [ T3271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern :warn : [ 42.254204] [ T3271] CR2: 00007f7098b7e2c0 CR3: 0000000883d05005 CR4: 0000000000f72ef0
kern :warn : [ 42.255916] [ T3271] PKRU: 55555554
kern :warn : [ 42.257486] [ T3271] Call Trace:
kern :warn : [ 42.259126] [ T3271] <TASK>
kern :warn : [ 42.260726] [ T3271] ? __mutex_unlock_slowpath+0x4b3/0x530
kern :warn : [ 42.262369] [ T3271] blk_mq_free_tag_set (blk-mq.c:4976)
kern :warn : [ 42.263861] [ T3271] nvme_rdma_teardown_io_queues+0xee/0x130
kern :warn : [ 42.265514] [ T3271] nvme_rdma_delete_ctrl (nvme/host/rdma.c:947 nvme/host/rdma.c:2157 nvme/host/rdma.c:2165)
kern :warn : [ 42.267029] [ T3271] nvme_do_delete_ctrl (nvme/host/core.c:247)
kern :warn : [ 42.268752] [ T3271] nvme_delete_ctrl_sync.cold (nvme/host/core.c:277)
kern :warn : [ 42.270328] [ T3271] nvme_sysfs_delete (nvme/host/sysfs.c:498)
kern :warn : [ 42.271987] [ T3271] kernfs_fop_write_iter (kernfs/file.c:345)
kern :warn : [ 42.273601] [ T3271] vfs_write (read_write.c:595 read_write.c:687)
kern :warn : [ 42.275278] [ T3271] ? __pfx_vfs_write (linux/fs.h:2733 (discriminator 1))
kern :warn : [ 42.276750] [ T3271] ? kmem_cache_free (linux/kasan.h:235 slub.c:2705 slub.c:6405 slub.c:6532)
kern :warn : [ 42.278425] [ T3271] ? fdget_pos (linux/instrumented.h:82 linux/atomic/atomic-instrumented.h:3188 linux/file_ref.h:215 file.c:1231 file.c:1257)
kern :warn : [ 42.279916] [ T3271] ? do_sys_openat2 (linux/fs.h:2564 linux/fs.h:2566 open.c:1367)
kern :warn : [ 42.281536] [ T3271] ksys_write (read_write.c:739)
kern :warn : [ 42.283048] [ T3271] ? __pfx_ksys_write (read_write.c:723)
kern :warn : [ 42.284669] [ T3271] do_syscall_64 (x86/entry/syscall_64.c:63 x86/entry/syscall_64.c:94)
kern :warn : [ 42.286196] [ T3271] ? ksys_read (read_write.c:716)
kern :warn : [ 42.287822] [ T3271] ? do_syscall_64 (linux/irq-entry-common.h:210 linux/irq-entry-common.h:230 linux/entry-common.h:318 x86/entry/syscall_64.c:100)
kern :warn : [ 42.289367] [ T3271] ? __pfx___do_sys_newfstat (stat.c:446)
kern :warn : [ 42.290855] [ T3271] ? do_syscall_64 (linux/irq-entry-common.h:210 linux/irq-entry-common.h:230 linux/entry-common.h:318 x86/entry/syscall_64.c:100)
kern :warn : [ 42.292405] [ T3271] ? do_syscall_64 (linux/irq-entry-common.h:210 linux/irq-entry-common.h:230 linux/entry-common.h:318 x86/entry/syscall_64.c:100)
kern :warn : [ 42.293886] [ T3271] ? __x64_sys_close (open.c:1511 open.c:1496 open.c:1496)
kern :warn : [ 42.295469] [ T3271] ? do_syscall_64 (linux/randomize_kstack.h:57 x86/entry/syscall_64.c:92)
kern :warn : [ 42.296937] [ T3271] entry_SYSCALL_64_after_hwframe (x86/entry/entry_64.S:121)
kern :warn : [ 42.298472] [ T3271] RIP: 0033:0x7fd8549a2687
kern :warn : [ 42.299951] [ T3271] Code: 48 89 fa 4c 89 df e8 58 b3 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
All code
========
0: 48 89 fa mov %rdi,%rdx
3: 4c 89 df mov %r11,%rdi
6: e8 58 b3 00 00 call 0xb363
b: 8b 93 08 03 00 00 mov 0x308(%rbx),%edx
11: 59 pop %rcx
12: 5e pop %rsi
13: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax
17: 74 1a je 0x33
19: 5b pop %rbx
1a: c3 ret
1b: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)
22: 00
23: 48 8b 44 24 10 mov 0x10(%rsp),%rax
28: 0f 05 syscall
2a:* 5b pop %rbx <-- trapping instruction
2b: c3 ret
2c: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)
33: 83 e2 39 and $0x39,%edx
36: 83 fa 08 cmp $0x8,%edx
39: 75 de jne 0x19
3b: e8 23 ff ff ff call 0xffffffffffffff63
Code starting with the faulting instruction
===========================================
0: 5b pop %rbx
1: c3 ret
2: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)
9: 83 e2 39 and $0x39,%edx
c: 83 fa 08 cmp $0x8,%edx
f: 75 de jne 0xffffffffffffffef
11: e8 23 ff ff ff call 0xffffffffffffff39
kern :warn : [ 42.301560] [ T3271] RSP: 002b:00007ffdc9d84570 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
kern :warn : [ 42.303102] [ T3271] RAX: ffffffffffffffda RBX: 00007fd8541ea780 RCX: 00007fd8549a2687
kern :warn : [ 42.304724] [ T3271] RDX: 0000000000000001 RSI: 00007fd854b4da0a RDI: 0000000000000004
kern :warn : [ 42.306296] [ T3271] RBP: 00007fd854b4da0a R08: 0000000000000000 R09: 0000000000000000
kern :warn : [ 42.307782] [ T3271] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a417335e50
kern :warn : [ 42.309390] [ T3271] R13: 00007ffdc9d86703 R14: 000055a417335e50 R15: 000055a417336760
kern :warn : [ 42.310924] [ T3271] </TASK>
kern :warn : [ 42.312525] [ T3271] ---[ end trace 0000000000000000 ]---
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260806/202608060833.bce92909-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
next reply other threads:[~2026-08-06 6:59 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-06 6:59 kernel test robot [this message]
2026-08-06 13:32 ` [linux-next:master] [srcu] 05c3e88488: RIP:cleanup_srcu_struct Zqiang
2026-08-10 1:03 ` Oliver Sang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202608060833.bce92909-lkp@intel.com \
--to=oliver.sang@intel.com \
--cc=lkp@intel.com \
--cc=oe-lkp@lists.linux.dev \
--cc=paulmck@kernel.org \
--cc=qiang.zhang@linux.dev \
--cc=rcu@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.