public inbox for oe-lkp@lists.linux.dev
 help / color / mirror / Atom feed
From: kernel test robot <oliver.sang@intel.com>
To: Mike Rapoport <rppt@kernel.org>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>,
	Mike Rapoport <rppt@kernel.org>, <oliver.sang@intel.com>
Subject: [rppt:free-late/v0.3] [memblock]  9ba8a144ce: kernel_BUG_at_arch/x86/mm/physaddr.c
Date: Tue, 10 Mar 2026 14:24:50 +0800	[thread overview]
Message-ID: <202603101424.47c2dbe7-lkp@intel.com> (raw)



Hello,

kernel test robot noticed "kernel_BUG_at_arch/x86/mm/physaddr.c" on:

commit: 9ba8a144ce025146410dbf26bae89396154815c0 ("memblock: make free_reserved_area() more robust")
https://git.kernel.org/cgit/linux/kernel/git/rppt/linux.git free-late/v0.3

in testcase: boot

config: i386-randconfig-014-20260309
compiler: gcc-14
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202603101424.47c2dbe7-lkp@intel.com



[    6.514860][   T26] ------------[ cut here ]------------
[    6.517404][   T26] kernel BUG at arch/x86/mm/physaddr.c:70!
[    6.518760][   T26] Oops: invalid opcode: 0000 [#1] SMP
[    6.520109][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u10:0 Not tainted 7.0.0-rc1-00004-g9ba8a144ce02 #1 PREEMPTLAZY
[    6.522037][   T26] Workqueue: async async_run_entry_fn
[    6.522037][   T26] EIP: __phys_addr (arch/x86/mm/physaddr.c:70 (discriminator 1))
[    6.522037][   T26] Code: f0 75 27 89 f0 5b 5e 5d c3 0f 0b b8 1c 96 e0 d1 e8 00 fe ee ff e8 6f d9 2b 00 84 c0 74 c8 0f 0b b8 10 96 e0 d1 e8 eb fd ee ff <0f> 0b b8 f8 95 e0 d1 e8 df fd ee ff 0f 0b b8 04 96 e0 d1 e8 d3 fd
All code
========
   0:	f0 75 27             	lock jne 0x2a
   3:	89 f0                	mov    %esi,%eax
   5:	5b                   	pop    %rbx
   6:	5e                   	pop    %rsi
   7:	5d                   	pop    %rbp
   8:	c3                   	ret
   9:	0f 0b                	ud2
   b:	b8 1c 96 e0 d1       	mov    $0xd1e0961c,%eax
  10:	e8 00 fe ee ff       	call   0xffffffffffeefe15
  15:	e8 6f d9 2b 00       	call   0x2bd989
  1a:	84 c0                	test   %al,%al
  1c:	74 c8                	je     0xffffffffffffffe6
  1e:	0f 0b                	ud2
  20:	b8 10 96 e0 d1       	mov    $0xd1e09610,%eax
  25:	e8 eb fd ee ff       	call   0xffffffffffeefe15
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	b8 f8 95 e0 d1       	mov    $0xd1e095f8,%eax
  31:	e8 df fd ee ff       	call   0xffffffffffeefe15
  36:	0f 0b                	ud2
  38:	b8 04 96 e0 d1       	mov    $0xd1e09604,%eax
  3d:	e8                   	.byte 0xe8
  3e:	d3 fd                	sar    %cl,%ebp

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	b8 f8 95 e0 d1       	mov    $0xd1e095f8,%eax
   7:	e8 df fd ee ff       	call   0xffffffffffeefdeb
   c:	0f 0b                	ud2
   e:	b8 04 96 e0 d1       	mov    $0xd1e09604,%eax
  13:	e8                   	.byte 0xe8
  14:	d3 fd                	sar    %cl,%ebp
[    6.522037][   T26] EAX: 00000000 EBX: f6ffe000 ECX: 00000000 EDX: d2438f6c
[    6.522037][   T26] ESI: 36ffe000 EDI: f6ffe000 EBP: c080fe60 ESP: c080fe58
[    6.522037][   T26] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010287
[    6.522037][   T26] CR0: 80050033 CR2: 00000000 CR3: 12438000 CR4: 00040690
[    6.522037][   T26] Call Trace:
[    6.522037][   T26]  free_reserved_area (mm/memblock.c:909)
[    6.522037][   T26]  ? set_memory_rw (arch/x86/mm/pat/set_memory.c:2321)
[    6.522037][   T26]  free_init_pages (arch/x86/mm/init.c:939)
[    6.522037][   T26]  free_initrd_mem (arch/x86/mm/init.c:996)
[    6.522037][   T26]  do_populate_rootfs (init/initramfs.c:750)
[    6.522037][   T26]  async_run_entry_fn (kernel/async.c:136 (discriminator 1))
[    6.522037][   T26]  ? debug_smp_processor_id (lib/smp_processor_id.c:59)
[    6.522037][   T26]  process_one_work (arch/x86/include/asm/atomic.h:23 include/linux/atomic/atomic-arch-fallback.h:457 include/linux/jump_label.h:262 include/trace/events/workqueue.h:110 kernel/workqueue.c:3280)
[    6.522037][   T26]  ? process_one_work (kernel/workqueue.c:3251)
[    6.522037][   T26]  worker_thread (kernel/workqueue.c:3352 (discriminator 2) kernel/workqueue.c:3439 (discriminator 2))
[    6.522037][   T26]  kthread (kernel/kthread.c:467)
[    6.522037][   T26]  ? rescuer_thread (kernel/workqueue.c:3385)
[    6.522037][   T26]  ? kthread_affine_node (kernel/kthread.c:412)
[    6.522037][   T26]  ret_from_fork (arch/x86/kernel/process.c:164)
[    6.522037][   T26]  ? kthread_affine_node (kernel/kthread.c:412)
[    6.522037][   T26]  ret_from_fork_asm (arch/x86/entry/entry_32.S:737)
[    6.522037][   T26]  entry_INT80_32 (arch/x86/entry/entry_32.S:945)
[    6.522037][   T26] Modules linked in:
[    6.558024][   T26] ---[ end trace 0000000000000000 ]---
[    6.559399][   T26] EIP: __phys_addr (arch/x86/mm/physaddr.c:70 (discriminator 1))
[    6.560632][   T26] Code: f0 75 27 89 f0 5b 5e 5d c3 0f 0b b8 1c 96 e0 d1 e8 00 fe ee ff e8 6f d9 2b 00 84 c0 74 c8 0f 0b b8 10 96 e0 d1 e8 eb fd ee ff <0f> 0b b8 f8 95 e0 d1 e8 df fd ee ff 0f 0b b8 04 96 e0 d1 e8 d3 fd
All code
========
   0:	f0 75 27             	lock jne 0x2a
   3:	89 f0                	mov    %esi,%eax
   5:	5b                   	pop    %rbx
   6:	5e                   	pop    %rsi
   7:	5d                   	pop    %rbp
   8:	c3                   	ret
   9:	0f 0b                	ud2
   b:	b8 1c 96 e0 d1       	mov    $0xd1e0961c,%eax
  10:	e8 00 fe ee ff       	call   0xffffffffffeefe15
  15:	e8 6f d9 2b 00       	call   0x2bd989
  1a:	84 c0                	test   %al,%al
  1c:	74 c8                	je     0xffffffffffffffe6
  1e:	0f 0b                	ud2
  20:	b8 10 96 e0 d1       	mov    $0xd1e09610,%eax
  25:	e8 eb fd ee ff       	call   0xffffffffffeefe15
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	b8 f8 95 e0 d1       	mov    $0xd1e095f8,%eax
  31:	e8 df fd ee ff       	call   0xffffffffffeefe15
  36:	0f 0b                	ud2
  38:	b8 04 96 e0 d1       	mov    $0xd1e09604,%eax
  3d:	e8                   	.byte 0xe8
  3e:	d3 fd                	sar    %cl,%ebp

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	b8 f8 95 e0 d1       	mov    $0xd1e095f8,%eax
   7:	e8 df fd ee ff       	call   0xffffffffffeefdeb
   c:	0f 0b                	ud2
   e:	b8 04 96 e0 d1       	mov    $0xd1e09604,%eax
  13:	e8                   	.byte 0xe8
  14:	d3 fd                	sar    %cl,%ebp


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260310/202603101424.47c2dbe7-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


                 reply	other threads:[~2026-03-10  6:25 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202603101424.47c2dbe7-lkp@intel.com \
    --to=oliver.sang@intel.com \
    --cc=lkp@intel.com \
    --cc=oe-lkp@lists.linux.dev \
    --cc=rppt@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox