From: kernel test robot <yi1.lai@intel.com>
To: Prakash Gupta <prakash.gupta@oss.qualcomm.com>
Cc: oe-lkp@lists.linux.dev, lkp@intel.com, cgroups@vger.kernel.org,
linux-mm@kvack.org, Johannes Weiner <hannes@cmpxchg.org>,
Michal Hocko <mhocko@kernel.org>,
Roman Gushchin <roman.gushchin@linux.dev>,
Shakeel Butt <shakeel.butt@linux.dev>,
Muchun Song <muchun.song@linux.dev>,
Andrew Morton <akpm@linux-foundation.org>,
Kefeng Wang <wangkefeng.wang@huawei.com>,
"Matthew Wilcox (Oracle)" <willy@infradead.org>,
linux-arm-msm@vger.kernel.org, linux-kernel@vger.kernel.org,
stable@vger.kernel.org,
Prakash Gupta <prakash.gupta@oss.qualcomm.com>,
yi1.lai@intel.com
Subject: Re: [PATCH] mm/memcg: fix NULL nodeinfo[] dereference on late-onlined nodes
Date: Wed, 26 Aug 2026 14:30:05 +0800 [thread overview]
Message-ID: <202608261313.1d95c34d-lkp@intel.com> (raw)
In-Reply-To: <20260810-memcg-nodeinfo-null-guard-v1-1-77a73204d63a@oss.qualcomm.com>
Hello,
kernel test robot noticed "Oops:general_protection_fault,probably_for_non-canonical_address#:#[##]SMP_KASAN" on:
commit: d793df2588b727e161c6586cafda1b3146216b36 ("[PATCH] mm/memcg: fix NULL nodeinfo[] dereference on late-onlined nodes")
url: https://github.com/intel-lab-lkp/linux/commits/Prakash-Gupta/mm-memcg-fix-NULL-nodeinfo-dereference-on-late-onlined-nodes/20260810-111630
patch link: https://lore.kernel.org/all/20260810-memcg-nodeinfo-null-guard-v1-1-77a73204d63a@oss.qualcomm.com/
patch subject: [PATCH] mm/memcg: fix NULL nodeinfo[] dereference on late-onlined nodes
in testcase: boot
config: x86_64-randconfig-r132-20260821
compiler: clang-22
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G
(please refer to attached dmesg/kmsg for entire log/backtrace)
If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <yi1.lai@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202608261313.1d95c34d-lkp@intel.com
[ 4.964339][ T26] KASAN: probably user-memory-access in range [0x0000000000002040-0x0000000000002047]
[ 4.964822][ T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x1e3306b9ada, max_idle_ns: 440795224413 ns
[ 4.964364][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u10:0 Tainted: G T 7.2.0-rc6-00001-gd793df2588b7 #1 PREEMPTLAZY 7c3d8f436a783d0b482149cc8be5fdb0e2064a33
[ 4.967167][ T26] Tainted: [T]=RANDSTRUCT
[ 4.967167][ T26] Workqueue: async async_run_entry_fn
[ 4.967167][ T26] RIP: 0010:mod_node_state+0x2d/0x180
[ 4.967167][ T26] Code: 41 56 41 55 41 54 53 89 cd 41 89 d4 41 89 f7 49 89 fe 48 8d 9f 40 20 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 85 18 13 00 4c 8b 2b 44 89 fb 41 83
[ 4.967167][ T26] RSP: 0000:ffffc900001c7610 EFLAGS: 00010002
[ 4.967167][ T26] RAX: 0000000000000408 RBX: 0000000000002040 RCX: dffffc0000000000
[ 4.967167][ T26] RDX: 0000000000000001 RSI: 0000000000000013 RDI: 0000000000000000
[ 4.967167][ T26] RBP: 0000000000000000 R08: ffffffffffe8ac20 R09: 0000000000000001
[ 4.967167][ T26] R10: 0000000000000000 R11: fffff52000038ecc R12: 0000000000000001
[ 4.967167][ T26] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000013
[ 4.967167][ T26] FS: 0000000000000000(0000) GS:ffff888799a99000(0000) knlGS:0000000000000000
[ 4.967167][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 4.967167][ T26] CR2: 0000000000000000 CR3: 00000000040c5000 CR4: 00000000000406b0
[ 4.967167][ T26] Call Trace:
[ 4.967167][ T26] <TASK>
[ 4.967167][ T26] mod_lruvec_state+0x47/0xc0
[ 4.967167][ T26] ? lruvec_stat_mod_folio+0x22/0x300
[ 4.967167][ T26] lruvec_stat_mod_folio+0x181/0x300
[ 4.967167][ T26] __filemap_add_folio+0x758/0xb00
[ 4.967167][ T26] ? workingset_activation+0x500/0x500
[ 4.967167][ T26] filemap_add_folio+0x1ce/0x380
[ 4.967167][ T26] __filemap_get_folio_mpol+0x3b5/0x940
[ 4.967167][ T26] simple_write_begin+0x61/0x2c0
[ 4.967167][ T26] page_symlink+0x1a8/0x300
[ 4.967167][ T26] ramfs_symlink+0x8c/0x140
[ 4.967167][ T26] vfs_symlink+0x12f/0x2c0
[ 4.967167][ T26] filename_symlinkat+0xf4/0x280
[ 4.967167][ T26] ? __asan_memcpy+0x40/0x80
[ 4.967167][ T26] init_symlink+0x2e/0x80
[ 4.967167][ T26] do_symlink+0xa5/0x180
[ 4.967167][ T26] flush_buffer+0x6b/0x100
[ 4.967167][ T26] ? unpack_to_rootfs+0x380/0x380
[ 4.967167][ T26] __gunzip+0x8bd/0xdc0
[ 4.967167][ T26] ? __gunzip+0xdc0/0xdc0
[ 4.967167][ T26] ? decompress_method+0x1c0/0x1c0
[ 4.967167][ T26] unpack_to_rootfs+0x21e/0x380
[ 4.967167][ T26] ? flush_buffer+0x100/0x100
[ 4.967167][ T26] ? xwrite+0x100/0x100
[ 4.967167][ T26] do_populate_rootfs+0x21c/0x300
[ 4.967167][ T26] async_run_entry_fn+0x95/0x3c0
[ 4.967167][ T26] ? process_scheduled_works+0x7a6/0x1240
[ 4.967167][ T26] process_scheduled_works+0x86b/0x1240
[ 4.967167][ T26] worker_thread+0x749/0xbc0
[ 4.967167][ T26] kthread+0x338/0x440
[ 4.967167][ T26] ? alloc_worker+0x2c0/0x2c0
[ 4.967167][ T26] ? __do_trace_sched_kthread_stop_ret+0x140/0x140
[ 4.967167][ T26] ret_from_fork+0x291/0x5c0
[ 4.967167][ T26] ? __do_trace_sched_kthread_stop_ret+0x140/0x140
[ 4.967167][ T26] ret_from_fork_asm+0x11/0x20
[ 4.967167][ T26] </TASK>
[ 4.967167][ T26] Modules linked in:
[ 4.967167][ T26] ---[ end trace 0000000000000000 ]---
[ 4.967167][ T26] RIP: 0010:mod_node_state+0x2d/0x180
[ 4.967167][ T26] Code: 41 56 41 55 41 54 53 89 cd 41 89 d4 41 89 f7 49 89 fe 48 8d 9f 40 20 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 85 18 13 00 4c 8b 2b 44 89 fb 41 83
[ 4.967167][ T26] RSP: 0000:ffffc900001c7610 EFLAGS: 00010002
[ 4.967167][ T26] RAX: 0000000000000408 RBX: 0000000000002040 RCX: dffffc0000000000
[ 4.967167][ T26] RDX: 0000000000000001 RSI: 0000000000000013 RDI: 0000000000000000
[ 4.967167][ T26] RBP: 0000000000000000 R08: ffffffffffe8ac20 R09: 0000000000000001
[ 4.967167][ T26] R10: 0000000000000000 R11: fffff52000038ecc R12: 0000000000000001
[ 4.967167][ T26] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000013
[ 4.967167][ T26] FS: 0000000000000000(0000) GS:ffff888799a99000(0000) knlGS:0000000000000000
[ 4.967167][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 4.967167][ T26] CR2: 0000000000000000 CR3: 00000000040c5000 CR4: 00000000000406b0
[ 4.967167][ T26] Kernel panic - not syncing: Fatal exception
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260826/202608261313.1d95c34d-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
prev parent reply other threads:[~2026-08-26 6:30 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-10 5:46 [PATCH] mm/memcg: fix NULL nodeinfo[] dereference on late-onlined nodes Prakash Gupta
2026-08-10 7:58 ` Muchun Song
2026-08-11 5:16 ` Prakash Gupta
2026-08-11 6:19 ` Muchun Song
2026-08-26 6:30 ` kernel test robot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202608261313.1d95c34d-lkp@intel.com \
--to=yi1.lai@intel.com \
--cc=akpm@linux-foundation.org \
--cc=cgroups@vger.kernel.org \
--cc=hannes@cmpxchg.org \
--cc=linux-arm-msm@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=lkp@intel.com \
--cc=mhocko@kernel.org \
--cc=muchun.song@linux.dev \
--cc=oe-lkp@lists.linux.dev \
--cc=prakash.gupta@oss.qualcomm.com \
--cc=roman.gushchin@linux.dev \
--cc=shakeel.butt@linux.dev \
--cc=stable@vger.kernel.org \
--cc=wangkefeng.wang@huawei.com \
--cc=willy@infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox